Effective date: 19 October 2026

This Privacy Policy explains how Toriva Business Management LLC ("Toriva", "we", "us") handles personal information in connection with Toriva One, our mobile applications and the related account, service-request and support functions. It covers applicants, customers, authorised representatives and people whose documents are submitted for a requested service. The separate Website Privacy Notice describes the public marketing website.

1. Who is responsible and how to contact us

Toriva One is operated by Toriva Business Management LLC, First Floor, Art Of Living Mall, Dubai, United Arab Emirates. For privacy questions, access or correction requests, or to request account or data deletion, call +971 50 952 1152 or contact Toriva on WhatsApp. State that your request concerns Toriva One and provide the email address or phone number associated with your account. Do not send your password, one-time sign-in code or payment-card security code.

2. Information we handle

The information needed depends on the features you use and the service you request. We receive information you enter or upload, information provided by an authorised representative, updates created by our service team and technical information generated when the service is used.

Account and contact information: your name, email address, telephone number, account identifier, sign-in and account-verification records, and preferences you provide.
Service and application information: the services you enquire about or request, application details, quotations, appointments, case identifiers, messages, case progress and completed documents.
Documents and identity information: files and information you submit for your particular case. These can include passport or Emirates ID copies, photographs, visa or residency records, trade licences, Ejari or address documents, ownership or company documents, and supporting information about dependants or authorised representatives. A service may require financial or medical-related supporting documents; provide these only when they are needed for your request.
Payment and financial records: invoices, receipts, payment amounts and statuses, transaction references, refund records, and wallet or referral records when you use those features. When you pay through a payment provider, that provider receives the payment information entered in its payment flow; Toriva receives the transaction information needed to reconcile your case. Do not upload full payment-card details as a case document.
Expiry reminders: document type, expiry date and the related details you enter for reminders about visas, Emirates IDs, passports, licences or other renewals.
Optional enquiries and contributions: property enquiries, business-directory information, ratings or other content you choose to submit through an available feature. Information intended for a public listing is different from private case documents; do not include identity documents in public submissions.
Technical and support information: IP address, request timestamps, device or app information sent with requests, session and authentication records, error or security logs, and information you provide when reporting a problem. If you enable push notifications, notification delivery requires a device notification identifier or token.

If you provide information about another person, you must have authority to do so and make this policy available to that person or their parent or guardian, as appropriate.

3. Why we use this information

We use relevant information to create and administer accounts; verify access; answer enquiries; assess and process requested services; check required documents; communicate about cases; coordinate appointments and applications; provide case updates and completed documents; issue and reconcile invoices, payments and refunds; administer eligible wallet and referral activity; deliver reminders you request; provide support; maintain service reliability and security; investigate misuse; and meet applicable record-keeping or legal obligations.

Public directory or rating information is used for the listing or contribution you choose to make. We do not publish private passport, Emirates ID or other case documents as directory content.

We use information as needed to perform the service you request, manage our relationship with you and comply with applicable obligations. Where a particular use requires your consent, we request that consent and you can withdraw it by contacting us. Withdrawing consent does not reverse processing already carried out and may prevent us from completing a service that requires the information.

We share information relevant to a specific purpose with:

Toriva personnel and authorised service partners who need it to manage or fulfil your request. A partner or representative acting on your behalf may receive information about the cases they are authorised to handle.
Authorities and institutions involved in your requested service, such as licensing or immigration authorities, free-zone operators, identity or medical-service centres, banks, tax authorities and other relevant institutions. These recipients may handle application records under their own legal duties and privacy notices.
Providers supporting the service, including hosting and file-storage providers, payment providers, and providers used for account verification, communications or notification delivery. Their access is limited to the purpose for which they are engaged. We require providers handling information on our behalf to protect it consistently with this policy and applicable requirements.
Other recipients you authorise, or recipients where disclosure is required by applicable law, a lawful authority request, or to establish or protect legal rights.

The payment or communication provider used for a particular interaction is identified in that interaction. If you choose WhatsApp, an app store, TestFlight or another external service, that provider also processes information under its own privacy terms. We do not sell your personal information.

5. Storage, transfers and security

Toriva uses its service infrastructure and supporting providers to store and process account, case and document information. Depending on the service or provider involved, processing may take place in the UAE or another country. We consider the protection of personal information when engaging providers and arranging transfers, and apply safeguards required by applicable law.

Access to account and case information is limited to authorised people and providers for the purposes described in this policy. No internet service, transmission method or storage system can be guaranteed completely secure. Keep your device and sign-in information protected and contact us if you suspect unauthorised access.

6. How long information is kept

We retain information for the purposes for which it was collected and for any applicable legal, accounting, application-processing, dispute-resolution or security requirements. The relevant period depends on the type of record and the service, rather than a single period for all app data:

Account and service records are retained while needed to maintain your account and handle the service relationship.
Case documents are retained for the application and necessary follow-up, subject to relevant record-keeping obligations.
Invoices, receipts and transaction records may need to be kept after an account is closed to meet accounting, tax or other applicable obligations.
Reminder information is used for the reminders you request; you can ask us to remove it.
Technical records and backups are retained according to operational and security needs. Deleted information may remain in restricted backups until those backups are replaced; it is not retained there for routine active use.

When information is no longer needed and no retention obligation applies, we delete it or render it non-identifiable. Contact us for information about retention relating to your particular case.

7. Your choices, access and deletion requests

You can contact Toriva using the details in section 1 to request access to your information, correction of inaccurate information, account closure, deletion of personal information, or withdrawal of consent. Depending on applicable law, you may also request a copy of your information or object to or restrict particular processing.

For account deletion, state "Toriva One account deletion" and identify the account by its registered email address or telephone number. We may need to verify your authority before acting, using information proportionate to the request. We will explain any information that must be retained, the reason for retention and any effect on an ongoing service. Deleting the app from your device does not itself delete your account or service records. An authority or institution that has already received an application may retain its records independently.

You can disable notifications in your device settings. Contact us if you want reminder information removed or assistance with an account control. Where an account or privacy control is available within the app, you can also use that control.

8. Device permissions and local information

A feature that lets you take a photograph or select a document may use a system camera, photo or file picker. Your device controls the permissions requested by the installed version. You can review or change permissions in device settings; denying access can limit the related feature. Notification permission controls push notifications. Signing out or removing the app can remove locally held app information but does not replace an account-deletion request.

This policy does not authorise unrelated access to your contacts, microphone, precise location or photo library. If a feature requires additional personal information or permissions, its purpose must be explained when requested.

9. Dependants and children

Toriva One is intended for people managing business or personal service requests, rather than an app directed at children. A parent, guardian or other authorised representative may need to provide a dependant’s information for a family or residency application. That information is handled for the requested service, not for advertising to the child. Contact us if a child has provided information without appropriate authority.

10. Changes and privacy enquiries

We may update this policy to reflect changes to the app, services or applicable requirements. The effective date above identifies the current version. Where a material change requires notice or consent, we will provide the appropriate notice or obtain consent. For a concern about how your information is handled, contact Toriva using section 1 so we can review it and explain the next steps.

Toriva One Privacy Policy