Privacy Policy

Effective date: Monday, September 27th, 2026

LAYT collects only what it needs to run the app, pay creators and keep people safe, and never sells your personal data. This policy explains what we collect, why, who receives it, how long we keep it, and your rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

1. Who we are

LAYT is a fashion discovery and social shopping app and website (layt.com), together "LAYT". It is operated by LAYT DISCOVERY - FZCO, licensed in Dubai, United Arab Emirates, licence no. 93323, registered at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates ("we", "us"). We decide how your personal data is used, and you can reach us at support@layt.com.

2. What we collect

Information you give us

• Account: email address, password (stored only in hashed, scrambled form), username, display name and date of birth. If you sign in with Google, Google gives us your name and email address.
• Profile (optional): profile photo, banner, bio, style tags, links to your social accounts, a location you type in, gender, and whether your account is private.
• Content and activity: videos, photos, captions, comments, likes, saves, favourite products, follows, follow requests, blocks and messages to other users. While a recording is processed, we briefly store its raw segments.
• Style profile for Aïsha (optional): style, budget, sizing notes, and colours and items you love or avoid. It can include a modesty preference, which may reveal religious belief, so we only use it with your explicit consent.
• Aïsha conversations: your messages, photos you upload, Aïsha's replies and how often you use Aïsha.
• Creator applications: full name, email, location, social handles, follower counts, sample links and your reasons for applying.
• Creator earnings: your payout account reference with our payment provider, your earnings and payout history, and your advertiser permit number if we ask for it. Your bank and identity details go to our payment provider, not to us.
• Messages to us: emails you send about support, privacy or business.

Information collected automatically

• Viewing activity: which posts you watch, for how long and where in the app. We use it to count views and personalise your feed.
• Product link clicks: the post, creator, retailer, destination link, time, browser or device type, referring page, a hashed (irreversibly scrambled) IP address, and whether the click looks automated. These records are not linked to your LAYT account.
• Technical data: IP address, device and browser type, and error information, used to deliver LAYT, secure it and fix problems.
• Recent searches: on layt.com, your last 10 searches are kept in your browser (see the Cookie and Data Collection Policy).

Information from others

• Other users, for example when they message you, comment, or report content or accounts.
• Affiliate networks and retailers, which tell us when a click on LAYT led to a purchase, with basic order information such as order value, date and the commission earned. We don't receive your payment card details.
• Google, if you sign in with Google.

What we don't collect: your precise (GPS) location, your phone contacts or your device's advertising identifier. We use no advertising or analytics trackers, and no face or voice recognition.

3. How we use your data

• To run LAYT: create and secure your account, show your content, let you follow, comment, save and message, and provide support.
• To personalise your feed (18 and over): we rank posts using your viewing activity, likes, saves and follows. Personalisation is on by default and you can turn it off in Settings. Teen accounts always get a non-personalised feed.
• To run Aïsha: generate style advice and product suggestions from your messages, photos and style profile, and keep your conversation history.
• To power shopping links and pay creators: send you to the retailer, count clicks and purchases, calculate commissions, pay creators their share, and detect fraudulent or automated clicks.
• To manage creators: review applications, make payouts and check advertiser permits where required.
• To keep LAYT safe: check age, enforce our Terms, detect spam, fraud and abuse, and review reported content and messages, using automated tools and human review.
• To contact you: service messages such as sign-in codes and changes to our terms, and marketing emails and notifications only if you opt in. You can unsubscribe at any time.
• To meet legal duties: keep tax and accounting records, respond to lawful requests and protect our rights.
• To improve LAYT: using aggregated or de-identified data wherever possible.

Legal grounds. Under UAE law, we process your data with your consent unless another legal ground applies. We rely on performing our contract with you (most uses above), meeting legal obligations (age checks, records, safety and lawful requests), and your consent (marketing, your modesty preference and anything else we ask you to agree to).

You can withdraw consent at any time. If you live where other rules apply, such as the EU or UK, we rely on the legal grounds available there, including legitimate interests.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. We don't sell your personal data.

4. Who we share it with

• Other users and the public: your username, display name, profile photo and public posts are visible to others. If your account is private, your posts show only to followers you approve. Others can screenshot or reshare what you post.
• Service providers that run parts of LAYT for us under contract:
  • Amazon Web Services: hosting, storage, databases, sign-in and account emails, in Frankfurt, Germany.
  • Vercel: hosting for layt.com.
  • Anthropic: the AI models behind Aïsha, including product searches on retailer websites run through Anthropic and its search provider.
  • Google: Sign in with Google, and our business email.
  • Stripe: creator payouts and creator identity checks.
• Affiliate networks and retailers: when you tap a product link, you leave LAYT. The affiliate network (currently Skimlinks, Impact, CJ, Awin, Rakuten or ShareASale) and the retailer receive your IP address, browser details, the page you came from and a LAYT click reference, so the sale can be credited. We don't give them your name, email or account details. Some product images load directly from retailers' servers, so those retailers can see your IP address and browser details. Their own privacy policies apply.
• Brands: aggregated statistics such as clicks, sales and audience breakdowns, and how individual creators' posts perform. Never information that identifies individual shoppers.
• Authorities: when the law, a court order or a lawful request requires it, or to protect someone's safety.
• A buyer of our business: if LAYT is merged, acquired or sells assets, your data may pass to the new owner under this policy.
• Anyone else, only with your consent or at your direction.

5. International transfers

Our main systems run on Amazon Web Services in Frankfurt, Germany. Anthropic, Vercel, Google, Stripe and our affiliate partners may process data in other countries, including the United States.

We transfer personal data outside the UAE only as UAE law allows: to countries with adequate protection, or under contracts that require the recipient to protect it to the UAE standard. Email support@layt.com for details of these safeguards.

6. How long we keep it

• Account, profile and content: until you delete them or your account. After you ask to delete your account, you have 30 days to restore it. We then permanently delete your account, profile, posts, comments, likes, follows, Aïsha conversations and style profile.
• What stays after deletion: messages you sent can remain in recipients' inboxes, and content others have reshared can remain in their posts.
• Viewing activity: detailed records for up to 45 days, then only totals such as view counts.
• Click and commission records: as long as needed to pay creators, settle disputes and meet accounting and tax laws. They aren't linked to your account.
• Backups: deleted data can remain in backups for up to 35 days.
• Error and security logs: up to 30 days.
• Legal holds: longer only where the law requires it or for a legal claim, and only for that purpose.

7. Your rights

Under UAE law, and similar laws where you live, you can:

• get a copy of the data we hold about you;
• correct inaccurate data;
• delete your data;
• restrict or stop processing in certain cases;
• object to marketing and to profiling linked to it, including by turning off feed personalisation;
• withdraw consent at any time;
• ask for human review of any solely automated decision that significantly affects you;
• move data you gave us to another service, where the law provides this.

You can edit your profile, turn off personalisation and marketing, and delete your account in the app. For anything else, email support@layt.com. We may need to confirm your identity, and we'll reply within the time the law requires.

If you're unhappy with our answer, you can complain to the UAE Data Office or the data protection authority where you live.

8. Teens and children

You must be at least 15 to use LAYT. We ask for your date of birth at sign-up and may ask you to verify your age. If we find an account belongs to someone under 15, we close it and delete its data.

Users aged 15 to 17 automatically get teen mode:

• accounts are private by default;
• only people they follow can message them;
• content is filtered for their age;
• screen-time and parental supervision tools are available;
• the feed isn't personalised, and we don't use their activity for commercial targeting;
• they can't earn commission as creators.

A parent or guardian must agree to our Terms for users under 18. Parents can contact us at support@layt.com.

9. Aïsha, our AI stylist

Aïsha is an AI stylist powered by Anthropic's Claude models. Your messages, any photos you upload and your style profile are sent to Anthropic to generate replies, and Aïsha may search retailer websites for products.

Aïsha only helps with fashion and style and gives no medical, financial or other professional advice. Its answers are generated by AI and may be wrong. We don't use your Aïsha conversations to train AI models, and we ask you not to share sensitive details, such as health information, with Aïsha.

10. Security

We protect your data with encryption in transit and at rest, private storage reachable only through our systems, access controls, and hashed IP addresses in click records. No system is completely secure. If a breach puts your data at risk, we'll notify you and the authorities as the law requires.

11. Changes to this policy

We'll post any update here with a new effective date. For significant changes, we'll tell you in the app or by email before they take effect.

12. Language

This policy is available in English and Arabic. If the two versions differ, the English version prevails to the extent the law allows.

13. Contact

LAYT DISCOVERY - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email: support@layt.com.