Effective 24 May 2026
StickyAlert lets vehicle owners receive anonymous reports from anyone who scans the QR sticker on their car. This page explains what data we collect, why we collect it, who we share it with, and how long we keep it. Plain language, no tricks.
StickyAlert is operated by Luminai AI Solutions & Consultancy FZE (www.luminai.ae), a UAE Free Zone Establishment. When this policy says "we" or "us", it refers to Luminai. For privacy questions, contact us at support@luminai.ae.
Account information: your phone number (used to sign in and verify your account via SMS — StickyAlert does not support email/password sign-in), optional display name, language preference.
Vehicle data: the nickname, plate number, and Plate Source (the emirate the vehicle is registered in) you set for each vehicle. A public copy of the nickname/plate/Plate Source is stored at a public URL so the QR scanner page can show it without you being signed in.
Alerts and chats: the issue type, vehicle, and a generated anonymous reporter handle for each alert. If a reporter selects "Other" as the issue type, the free-text description they write is stored and readable by us, since that's how the report reaches you. Chat messages between you and reporters or owners are end-to-end encrypted on the sender's device before they're sent — we store only the encrypted version and do not have the keys needed to read message content.
Device data: an Expo push notification token, so we can send you push alerts. You can revoke this by turning off Push Notifications in Settings.
Customer support: if you use "Chat With Us" in Settings, your phone number and the content of that conversation are shared with Crisp (crisp.chat), the third-party live-chat provider we use to run customer support.
What we do NOT collect: your precise location or location history; your contacts, photos, microphone audio, or browsing data; your email address. Aside from Crisp (used only for customer support), we do not run advertising or analytics SDKs.
To create and secure your account, deliver alerts and chat messages, send push notifications, respond to support requests you send us via Chat With Us, and enforce blocks you've set on individual reporters. We do not sell your data and we do not use it for advertising.
Google Firebase (Authentication, Firestore, Cloud Functions, Hosting) stores and processes your data on our behalf. The Expo Push Notification Service relays our notification payloads to Apple APNs and Google FCM for delivery. Crisp (crisp.chat) powers the in-app and website live-chat support tool — if you contact support, your phone number and the conversation content are shared with Crisp to enable that conversation; see Crisp's privacy policy at crisp.chat/en/privacy. We never share data with these providers beyond what's needed for them to run the relevant feature, and we do not share data with anyone else.
Chats automatically expire and are deleted 48 hours after the chat was started. Alerts are kept until you delete them or you delete your account. Vehicle records are kept until you delete the vehicle. Account data is kept while your account exists — you can request deletion at any time (see Section 7). Customer support conversations are retained by Crisp per their own retention policy.
When someone scans a vehicle's QR and files a report or chats with the owner, the owner sees a generated anonymous handle (e.g. "User #1234") — not the reporter's phone number, email, or real name. The reporter sees "Car Owner" in the chat, never the owner's contact details. Chat messages are also end-to-end encrypted, so even we cannot read their content.
You can access, correct, or delete your data at any time. Most of this is available in the app: update your display name from Settings → Profile, add/edit/delete vehicles from Settings → Manage Vehicles, delete a chat or block a reporter from the chat screen's actions menu, and turn off push notifications from Settings.
To delete your account and all associated data, use Settings → Delete Account, or email support@luminai.ae from the phone number linked to your account.
StickyAlert is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we'll remove the account.
Data is transmitted over HTTPS and stored encrypted at rest by our infrastructure providers. Account access is gated by Firebase Authentication. Chat messages are additionally end-to-end encrypted on-device, so their content is protected even if our own infrastructure were compromised. No system is perfectly secure, but we follow industry-standard practices and do not run any avoidable third-party trackers.
If we make material changes we'll update the "Effective" date above and, where reasonable, notify you in-app. The latest version is always at https://sticky-alert.web.app/privacy.
Questions, complaints, or data requests: support@luminai.ae.