1. Introduction
Metavault Blockchain Ltd ("Metavault", "we", "us", or "our"), a company registered in the United Arab Emirates (Innovation City, RAKBANK Headquarters, Government of Ras al Khaimah, UAE, P.O. Box #30099), operates the Quick Off Super App and Meta Park platform (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application, web platform, or any related services.
By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Services immediately.
2. Information We Collect
2.1 Information You Provide Directly
- Full name, date of birth, and a valid email address or phone number
- Physical address and profile preferences
- Health-related information submitted through the Healthcare Hub (e.g., medical history, consultation records)
- Educational background and academic documents submitted through the Education Platform
- Travel preferences, passport details, and booking history
- Profile images, usernames, and account preferences
2.2 Information Collected Automatically
- Device identifiers (IDFA, GAID, device model, OS version)
- IP address, browser type, and general geographic location
- App usage data, clickstream data, and session duration
- Order and booking history across all Quick Off verticals
- Crash reports and performance diagnostics
- Cookies and similar tracking technologies on the web platform
2.3 Information from Third Parties
- Social login data if you authenticate via a third-party provider
- Data from e-commerce merchants, healthcare providers, educational institutions, and travel partners you interact with through Quick Off
3. Health Data — What We Access and Collect
Quick Off may collect and process Health Data only when you use health-related features and explicitly grant permission. Health Data is never used for advertising and is never sold to third parties.
Important: Health features in Quick Off are for general wellness and informational purposes only. They are not intended for emergency use or as a substitute for clinical decision-making or professional medical advice.
3.1 Data from Apple Health (iOS) or Health Connect (Android)
If you connect wearable or device health sources, the app may read (not write) data such as:
- Activity: steps, distance, flights climbed, workouts, active and total calories burned
- Vitals: heart rate, resting heart rate, heart rate variability, blood oxygen (SpO₂), respiratory rate, blood pressure, blood glucose
- Body measurements: height, weight, body mass index (BMI), body fat, lean body mass, body temperature
- Sleep: sleep duration and sleep stages (light, deep, REM)
- Other: water/hydration, nutrition, menstruation flow (where supported by the device)
This data is used solely to display your Health dashboard, trends, and related wellness metrics. We only access this data after you grant permission both in the app and in your Apple Health or Health Connect settings.
3.2 Health Information You Enter in the App
You may provide the following directly within Quick Off:
- Health profile: age, sex, height, weight, smoking status, alcohol use, activity level, known health conditions, medications
- Profile details: date of birth and gender (entered via Edit Profile)
- Hydration logs and other metrics you manually record in the app
3.3 Lab Reports and Medical Documents You Upload (Dr. AI / Health Reports)
If you upload a lab report or health document, we collect:
- The file itself (e.g., PDF or image)
- Extracted information such as biomarkers, summary text, flags, recommendations, BMI, and analysis metadata
- File name, size, and upload timestamp
Uploaded reports are processed to provide informational insights only. They are not a medical diagnosis or a substitute for professional medical advice.
3.4 Health Reminders
If you create reminders within the app, we store the reminder title, notes, date/time, and on/off status. Local notifications may be scheduled on your device for these reminders.
3.5 Wearable Summaries Sent for Health Scoring
To compute a health score and related summaries, the app may send aggregated wearable data (for example: average resting heart rate, blood oxygen, sleep hours, daily steps) together with your health profile and biomarker data from uploaded reports to our health processing service.
3.6 Documents Tagged as Health-Related
Documents you upload for eligibility or profile purposes may be stored if they are classified as health-related (e.g. health reports).
4. How We Use Your Information
We use the information we collect for the following purposes:
- To create, maintain, and operate your Quick Off account
- To provide AI-powered health monitoring, doctor booking, and live video consultation services
- To deliver personalised education counseling and global college recommendations
- To facilitate flight bookings, hotel reservations, and travel package services
- To enable access to Meta Park virtual experiences, virtual land, and digital asset purchases
- To connect you with merchants and facilitate your e-commerce orders
- To communicate service updates, security alerts, and promotional communications (with your consent)
- To improve, personalise, and develop our Services through analytics
- To detect and prevent fraud, abuse, and security incidents
- To comply with applicable laws and regulatory requirements in the UAE and other jurisdictions
4.1 How We Use Health Data
We use Health Data specifically to:
- Display health metrics, trends, and dashboard content
- Generate wellness scores and AI-assisted report insights (Dr. AI)
- Store your upload history and analysis results so you can view them again
- Schedule health-related reminders you create
- Improve app functionality related to health features
We do not use Health Data for advertising or sell Health Data to third parties.
5. Legal Basis for Processing
Where applicable under data protection laws, we process your personal data on the following legal bases:
- Contract performance — processing necessary to provide the Services you have requested
- Legal obligation — compliance with applicable UAE laws and regulations
- Legitimate interests — fraud prevention, security, and service improvement
- Consent — for marketing communications and optional data processing, including health permissions you grant in-app and via device settings
6. Sharing of Information
We do not sell your personal information. We may share information with:
- Service providers — cloud infrastructure providers (including Supabase for database/file storage and AWS-hosted API services), analytics vendors, and platform partners acting on our behalf under strict data processing agreements
- Merchants — e-commerce sellers you purchase from through Quick Off, limited to information required to fulfil your order
- Healthcare professionals — doctors and hospitals you book through the Healthcare Hub, limited to information required for your consultation
- Educational institutions — universities and colleges you connect with through the Education Platform, limited to information you authorise
- Travel partners — airlines, hotels, and travel operators through which your bookings are fulfilled
- Regulatory authorities — law enforcement and government bodies where legally required
- Business transfers — in the event of a merger, acquisition, or sale of assets, subject to confidentiality commitments
7. Where Health Data Is Stored and Processed
Health Data may be stored or processed across the following systems. All data is transmitted over encrypted connections (HTTPS/TLS).
| Location | What is stored |
|---|---|
| Your device | Encrypted local cache of recent health dashboard metrics and hydration logs |
| Supabase (database & file storage) | Health profile, health report uploads, analysis results, reminders, and related user records |
| AWS-hosted application backend | Health profile, lab report analysis processing, and health score computation |
Service providers (hosting, database, storage, and API processing) process data on our behalf under contractual safeguards.
8. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements.
8.1 Health Data Retention While Your Account Is Active
| Data type | Retention while account is active |
|---|---|
| Apple Health / Health Connect reads | Not stored on our servers by default; cached locally on your device for dashboard display |
| Local encrypted health cache | Until you uninstall the app, clear app data, or the cache is overwritten |
| Uploaded lab reports & AI analyses | Until you delete them or delete your account |
| Health profile & scores | Until updated, deleted, or account is deleted |
| Health reminders | Until you delete them or delete your account |
| Profile date of birth, gender, etc. | Until you update or delete your account |
8.2 After Account Deletion
When you delete your account, we delete or de-identify associated Health Data from our primary systems within 30 days of a confirmed deletion request, except where we must retain limited data for:
- Legal, regulatory, or tax obligations
- Fraud prevention and security
- Backup systems that are purged on a rolling schedule (typically within 90 days)
8.3 Inactive Accounts
If an account is inactive for 24 months, we may delete or anonymise associated data after notifying you at the email address on file.
9. Data Security
Metavault employs industry-standard security measures including:
- 256-bit AES encryption for data at rest and TLS 1.3 for data in transit
- Real-time anomaly detection and AI-powered fraud monitoring
- SOC 2 Type II certified infrastructure
- Regular penetration testing and independent security audits
Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.
10. How to Delete Your Health Data
10.1 Delete Your Entire Account (Recommended)
- Open Quick Off
- Go to Profile → Settings
- Tap Delete account
- Confirm deletion
This will remove your profile and app user data from our database, delete uploaded documents and health report records linked to your account, sign you out, and request deletion of your authentication account. If automatic identity deletion fails, email support@metavaultpay.com to complete removal.
10.2 Revoke Device Health Permissions
To stop the app from reading Apple Health or Health Connect data without deleting your account:
- iOS: Settings → Privacy & Security → Health → Quick Off → turn off access
- Android: Health Connect / device settings → manage Quick Off permissions
This does not delete data already stored on our servers.
10.3 Delete Local Data on Your Device
Uninstalling the app or clearing app storage removes locally cached health metrics including the encrypted on-device health cache.
10.4 Request Deletion by Email
You may request deletion of Health Data or your account at any time by emailing support@metavaultpay.com with the subject line Quick Off — Health Data Deletion Request. Include the email or phone number associated with your account. We will verify your identity before processing the request.
10.5 Delete Individual Health Reminders
You can delete individual reminders from the Health section of the app at any time without deleting your entire account.
11. Your Rights and Choices
Subject to applicable law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data ("right to be forgotten")
- Object to or restrict certain processing activities
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time for consent-based processing
- Lodge a complaint with the relevant supervisory authority in the UAE
Regarding Health Data specifically:
- Optional features: You are not required to connect Apple Health / Health Connect or upload lab reports to use the non-health parts of the app
- Permissions: You can grant or revoke health permissions at any time in your device settings
- Access: You can view your stored profile and upload history inside the app; for other access requests contact support@metavaultpay.com
To exercise any of these rights, contact us at director@metavaultpay.com.
12. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a minor has provided us with their information, please contact us immediately.
13. Cookies and Tracking Technologies
Our web platform uses cookies and similar technologies to enhance your experience, analyse usage patterns, and deliver relevant content. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features. We use:
- Essential cookies — required for the platform to function
- Analytics cookies — to understand how users interact with our Services
- Preference cookies — to remember your settings and preferences
14. International Data Transfers
As a global platform, your data may be transferred to and processed in countries outside the UAE, including where our service providers (Supabase, AWS) operate. We ensure that any such transfers are made in compliance with applicable data protection laws, including through the use of standard contractual clauses or other lawful transfer mechanisms.
15. App Store Privacy Summary
The following summarises health data collected for Apple App Store Privacy Nutrition Label and Google Play Data Safety disclosures:
| Data category | Source | Required? | Linked to identity |
|---|---|---|---|
| Fitness & wellness (steps, sleep, heart rate, etc.) | Device / Apple Health / Health Connect — with permission | Optional | Yes (when signed in) |
| Health info (height, weight, conditions, medications, DOB, gender) | User-provided | Optional | Yes |
| Medical documents / lab reports | User-uploaded | Optional | Yes |
| Health reminders | User-created | Optional | Yes |
Purpose: App functionality, analytics/wellness insights, personalisation (wellness score & Dr. AI insights).
Used for tracking: No.
Deletion: In-app account deletion + email request to support@metavaultpay.com.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app and on our website, and where required by law, by sending you a direct notification. Your continued use of the Services after such changes constitutes your acceptance of the updated policy.
17. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy, please contact:
Metavault Blockchain Ltd
Innovation City, RAKBANK Headquarters
Government of Ras al Khaimah
United Arab Emirates · P.O. Box #30099