Privacy Policy
Last updated: September 2026
Your privacy is important to us. This policy explains how we collect, use, protect, and share your personal information.
GDPR Compliant
This privacy policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to protecting your personal data and respecting your privacy rights.
1Introduction
Ethiopian Maids ("we", "us", or "our") operates the ethiopianmaids.com website and mobile application (collectively, the "Platform"). This Privacy Policy describes how we collect, use, maintain, and disclose information from users of our Platform.
We are committed to protecting your privacy and ensuring you have a positive experience on our Platform. This policy applies to all users, including:
- Sponsors (Employers): Individuals seeking domestic workers
- Maids (Domestic Workers): Individuals seeking employment
- Agencies: Recruitment agencies managing worker placements
- Visitors: Anyone browsing our Platform
By using our Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Services.
2Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including:
Identity Information
Full name, date of birth, gender, nationality, passport/ID numbers, photographs
Contact Information
Email address, phone number, physical address, emergency contacts
Account Information
Username, password (encrypted), account preferences, profile settings
Employment Information (Maids)
Work experience, skills, certifications, education, references, availability, salary expectations
Employment Requirements (Sponsors)
Job requirements, household size, preferred qualifications, budget, location
Payment Information
Payment method details, billing address, transaction history (processed via Stripe)
Verification Documents
Passport copies, medical certificates, police clearance, educational certificates, agency licenses
2.2 Automatically Collected Information
When you use our Platform, we automatically collect:
Device Information
Device type, operating system, unique device identifiers, browser type and version
Usage Information
Pages visited, features used, search queries, time spent, click patterns
Location Information
IP address, approximate location (city/country), timezone
Communication Data
Messages sent through our platform, support tickets, feedback submitted
3How We Collect Information
We collect information through the following methods:
3.1 Direct Collection
- Account registration and profile creation
- Job postings and applications
- Document uploads and verifications
- Customer support interactions
- Surveys and feedback forms
- Payment transactions
3.2 Automatic Collection
- Cookies and similar tracking technologies
- Server logs and analytics tools
- Mobile device sensors (with permission)
3.3 Third-Party Sources
- Google Sign-In (Firebase Authentication): When you sign in with Google, we receive your name, email address, and profile photo via Google OAuth 2.0 using the
openid,email, andprofilescopes. See Section 15 for full details on how we handle Google user data. - Other third-party authentication providers (for account verification)
- Background check providers (with your consent)
- Verification services
- Payment processors (Stripe)
4How We Use Your Information
We use collected information for the following purposes:
Service Delivery
To provide, maintain, and improve our Platform services; to process transactions; to match Sponsors with Maids; to facilitate communications between users.
Account Management
To create and manage your account; to verify your identity; to respond to your requests and provide customer support.
Communication
To send service-related notices, updates, and promotional materials (with consent); to respond to inquiries and feedback.
Safety & Security
To verify user identities; to detect and prevent fraud; to ensure platform security; to enforce our Terms of Service.
Legal Compliance
To comply with legal obligations; to respond to legal requests; to protect our rights and the rights of others.
Analytics & Improvement
To analyze usage patterns; to improve our services; to develop new features; to conduct research.
Legal Basis (GDPR): We process your personal data based on: (1) your consent, (2) performance of a contract, (3) our legitimate interests, or (4) legal obligations.
5Information Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
5.1 With Other Users
Your profile information is shared with other users to facilitate matching:
- Maid profiles are visible to Sponsors searching for domestic workers
- Sponsor job postings are visible to Maids and Agencies
- Contact information is shared only after mutual agreement
5.2 With Service Providers
We share information with trusted third-party service providers who assist us in:
- Payment processing (Stripe)
- Cloud hosting and storage (Firebase, Hasura)
- Analytics and monitoring (Google Analytics)
- Communication services (email, SMS providers)
- Background verification services
5.3 For Legal Reasons
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Enforce our Terms of Service
- Protect our rights, privacy, safety, or property
- Investigate potential violations
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.
6Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods include:
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of account + 3 years |
| Transaction records | 7 years (legal requirement) |
| Communication logs | 2 years after account closure |
| Verification documents | 5 years after last verification |
| Analytics data | 26 months (anonymized) |
When data is no longer needed, we will securely delete or anonymize it.
7Data Security
We implement robust security measures to protect your personal information:
Encryption
256-bit SSL/TLS encryption for data in transit; AES-256 encryption for data at rest
Access Controls
Role-based access controls; multi-factor authentication; regular access audits
Monitoring
24/7 security monitoring; intrusion detection systems; regular vulnerability assessments
Infrastructure
Secure cloud infrastructure; regular backups; disaster recovery procedures
Note: While we implement strong security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly in case of a data breach.
8International Data Transfers
Ethiopian Maids operates in multiple countries, including Ethiopia and the GCC region (UAE, Saudi Arabia, Qatar, Kuwait, Bahrain, Oman). Your information may be transferred to and processed in countries other than your own.
When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by relevant authorities
- Binding Corporate Rules where applicable
- Compliance with local data protection requirements
- Adequate level of protection in receiving countries
9Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete personal data
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data under certain circumstances
Right to Restrict Processing
Request limitation of how we process your data
Right to Data Portability
Receive your data in a structured, commonly used format
Right to Object
Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at privacy@ethiopianmaids.com. We will respond to your request within 30 days.
10Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.
If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@ethiopianmaids.com.
11Third-Party Links
Our Platform may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices or content of third-party sites.
We encourage you to read the privacy policies of any third-party services you access through our Platform.
12Cookies
We use cookies and similar tracking technologies to enhance your experience on our Platform. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
13Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:
- We will update the "Last Updated" date at the top of this policy
- We will notify you via email or through a notice on our Platform
- We may request your consent for significant changes
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
14Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Email
privacy@ethiopianmaids.comGeneral Support
support@ethiopianmaids.comPhone
+971 58 859 3894Website
ethiopianmaids.comData Protection Officer
For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@ethiopianmaids.com
15Google API Services User Data
Google API Services Compliance
This section specifically addresses our use of Google API Services and complies with the Google API Services User Data Policy, including the Limited Use requirements.
15.1 Google User Data We Collect
When you choose to sign in using your Google account via Firebase Authentication, we request the following OAuth 2.0 scopes and collect the corresponding data:
| OAuth Scope | Data Collected | Purpose |
|---|---|---|
| openid | Unique Google account identifier | Authenticate your identity and link your Google account to your Ethiopian Maids account |
| Email address, email verification status | Create your account, send account-related notifications (password resets, security alerts, service updates) | |
| profile | Display name, profile photo URL | Pre-fill your user profile so you do not need to enter this information manually |
We also receive OAuth authentication tokens, which are used solely to authenticate your identity and maintain your signed-in session. These tokens are managed by Firebase Authentication and are not stored in our application database.
We do not request access to any other Google services on your account. We do not access your Google Drive, Gmail, Google Calendar, Google Contacts, YouTube, Google Photos, or any other Google product data. Our access to your account is strictly limited to the three scopes listed above, which are the minimum necessary for authentication. (Our own YouTube channel is a separate matter, described in section 15.7: it involves our account, never yours.)
15.2 How We Use Google User Data
Google user data is used exclusively for the following purposes:
| Data | How We Use It |
|---|---|
| Google account ID | To uniquely identify your account and authenticate you each time you sign in |
| Email address | To create your Ethiopian Maids account; to send account-related notifications such as password resets, security alerts, and service updates; to enable communication with other platform users (e.g., agencies, sponsors) when you initiate contact |
| Display name | To pre-populate your profile name on the platform. You can change this at any time in your account settings |
| Profile photo URL | To display your profile picture on the platform. You can replace or remove this at any time in your account settings |
| Authentication tokens | To maintain your authenticated session. Tokens are managed entirely by Firebase and are automatically refreshed or revoked on sign-out |
We do not use Google user data for:
- Serving advertisements or ad targeting/personalization
- Building user profiles for advertising purposes
- Selling or licensing to third parties
- Training machine learning or AI models
- Any purpose unrelated to providing and improving the Ethiopian Maids platform
15.3 How We Share Google User Data
We do not sell, rent, license, or trade Google user data to any third party. Google user data may only be shared in the following limited circumstances:
| Recipient | Data Shared | Purpose |
|---|---|---|
| Firebase (Google Cloud) | Authentication tokens, email, profile data | Authentication infrastructure and session management |
| Hasura Cloud | Email, display name, profile photo URL | Secure storage of your account profile data |
| Other platform users | Display name, profile photo | Visible as part of your public platform profile. You can update or remove this in your account settings at any time |
| Law enforcement / legal authorities | As required by applicable law | Only when required by law, subpoena, court order, or to protect the safety of users or the public |
We do not share Google user data with data brokers, advertisers, ad networks, or any parties for purposes unrelated to our Platform services.
15.4 How We Store & Protect Google User Data
Google user data is stored and protected as follows:
| Data | Where Stored | Security Measures |
|---|---|---|
| Authentication tokens | Firebase Authentication (Google Cloud infrastructure) | Managed by Firebase SDK; automatically rotated; not stored in our database, local storage, or cookies |
| Email, display name, profile photo URL | Hasura Cloud (PostgreSQL database) | AES-256 encryption at rest; TLS 1.2+ encryption in transit; role-based access controls |
| Firebase user record | Firebase Authentication | Google Cloud security infrastructure; encrypted at rest and in transit |
Human access to Google user data: Access to Google user data is strictly limited. Our development and support team members may only access your data when:
- You have given explicit consent (e.g., by submitting a support request)
- It is necessary for security purposes (e.g., investigating unauthorized access to your account)
- It is required to comply with applicable law
- The data has been aggregated and anonymized so it is no longer personally identifiable, for internal analytics only
All personnel with potential access to user data are bound by confidentiality obligations.
15.5 Data Retention & Deletion of Google User Data
We retain Google user data only for as long as your account is active and as necessary to provide our services:
| Data Type | Retention Period |
|---|---|
| Google profile info (name, email, photo) | Duration of active account; deleted within 30 days of account deletion request |
| Authentication tokens | Automatically expired and refreshed by Firebase; immediately revoked on sign-out or account deletion |
| Account data after deletion request | Permanently deleted from all systems (Firebase + Hasura) within 30 days of request |
How to delete your Google user data:
- In-app: Delete your account from your Profile Settings page. This removes all data, including Google-sourced information, from both Firebase and our database.
- By email: Send a request to privacy@ethiopianmaids.com with the subject line "Google Data Deletion Request". Include the email address associated with your account.
- Via Google: Revoke our app's access from your Google Account permissions page. This revokes our access to your Google data. To also delete data already stored on our platform, please contact us or delete your account.
Upon receiving a deletion request, we will remove all Google user data from our systems within 30 days and confirm the deletion via email.
15.6 Google API Services Limited Use Disclosure
Ethiopian Maids' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we affirm that:
- We only use Google user data to provide and improve user-facing features that are prominent in our application's user interface (authentication and profile management).
- We do not transfer Google user data to others unless it is necessary to provide or improve user-facing features, you provide affirmative consent, or it is necessary for security, legal compliance, or as part of a merger/acquisition with equivalent privacy protections.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations with aggregated and anonymized data.
15.7 YouTube API Services
Ethiopian Maids publishes short videos on its own YouTube channel. Our internal publishing tool uses YouTube API Services to upload those videos to that channel. This is the only use we make of YouTube API Services, and it works as follows:
- The tool acts on our own YouTube account only. It is authorised once by the owner of our channel. It never asks for, receives or accesses any YouTube data belonging to you or to any other user of our Platform.
- The only information it retrieves from YouTube is the identifier and address of each video we upload, and the name and subscriber count of our own channel. We keep the video identifier in our own systems, for as long as the video remains on our channel, so that the same video is never uploaded twice. We share it with no one.
- It retrieves nothing about viewers, comments, subscribers as individuals, other channels or other people's videos, and it does not use any YouTube data for advertising, profiling or analytics.
- Every video is reviewed and approved by a member of our staff before it is uploaded. The people appearing in them have agreed to appear.
By using YouTube API Services we are bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. Our channel owner can revoke the tool's access at any time from the Google Account permissions page, and we delete the stored video identifiers when the corresponding videos are removed from the channel, or on request to privacy@ethiopianmaids.com.
15.8 TikTok
Ethiopian Maids publishes short videos on its own TikTok account. Our internal publishing tool uses TikTok's Content Posting API, authorised through TikTok Login Kit, to post those videos to that account. This is the only use we make of TikTok's developer services, and it works the same way as our YouTube use above:
- The tool acts on our own TikTok account only. It is authorised once by the owner of our account. It never asks for, receives or accesses any TikTok data belonging to you or to any other user of our Platform.
- The only information it retrieves from TikTok is our own account's display name and the identifier of each video we post, kept in our own systems so that the same video is never posted twice. Where TikTok permits it, we also read the total view, like, comment and share counts of our own posts — totals only, never who watched or interacted.
- It retrieves nothing about viewers or other accounts, and it does not use any TikTok data for advertising, profiling or analytics.
- Every video is reviewed and approved by a member of our staff before it is posted. The people appearing in them have agreed to appear.
TikTok's handling of data is described in the TikTok Privacy Policy. Our account owner can revoke the tool's access at any time in the TikTok app (Settings and privacy → Security & permissions → Apps and services), and we delete the stored identifiers when the corresponding videos are removed from the account, or on request to privacy@ethiopianmaids.com.