Privacy Policy,

Last updated: August 2026 · Applies to the Element Real Estate website and mobile apps

What changed in this version. The Element mobile app now requires an account. This policy has been updated to say exactly what we collect at registration (your name, email address and phone number), why we need each one, where it is stored, who it is shared with, how long we keep it, and how to withdraw your consent or delete your account. To delete your account, go to element-realestate.com/delete-account.

Who we are

Element Real Estate ("Element", "we") is an Egyptian real-estate brokerage, and is the party responsible for the personal data described here. This policy explains what we collect when you use our website or mobile apps, and what we do with it. You can reach us at hello@element-realestate.com, on the hotline 17488, or on WhatsApp at +20 128 320 0598.

What we collect

Your account details. When you create an account in the Element mobile app, we collect your name, email address and phone number. All three are required. You also choose a password, which we never store in readable form: we keep only a salted scrypt hash of it. To confirm the email address is yours, we email you a 6-digit code, and we store only a SHA-256 hash of that code, which expires after 10 minutes.
Contact details you choose to share. Your name and phone number when you submit an inquiry form, book a consultant call, request a valuation, or send us your shortlist. We only receive these when you actively submit them.
Messages to Laila. Conversations with our AI consultant are processed to generate replies and, when you share contact details in chat, to route your inquiry to a human consultant.
Push notification tokens. If you allow notifications, your device gives us an anonymous token that lets us send you a notification. It identifies a device, not a person, and after you sign in we store it against your account so that we do not send you the same thing twice.
Basic usage and device data. Which screens and listings are opened, the app version, device model and operating system version, and the IP address your request came from. This is collected automatically as you use the app or site.
On-device preferences. Your shortlist, compare picks, and display currency are stored locally on your device, not on our servers, unless you are signed in and choose to sync them.

We do not collect your location, contacts, photos, calendar, health data, financial account details, or any other data from your device beyond what is listed above. We do not ask for your national ID or passport unless and until you reach the stage of signing a reservation with a developer, which happens offline with a consultant, not in the app.

Why we need your name, email and phone

Name. So that a consultant knows who they are speaking to, and so we can address you properly in the app and in correspondence.
Email address. It is your login identity. We use it to verify that the account belongs to you, to send the 6-digit sign-up code, to let you reset a forgotten password, and to send service messages about your account, including the confirmation of a deletion request. It is not used for marketing email unless you separately ask for it.
Phone number. Property in Egypt is transacted by phone. It is how an Element consultant calls or messages you back about a unit you asked about, and it is our fallback if we cannot reach you by email.

If you do not want to provide these, you can still browse the Element website at element-realestate.com and contact us on the hotline or WhatsApp without an account.

How we use it

To create and secure your account, verify your email address, sign you in, and let you reset your password.
To respond to your inquiries and connect you with an Element consultant about properties you asked about.
To prepare valuations and availability checks you requested.
To send push notifications about listings, price changes and appointments, if you allowed notifications. You can turn them off at any time in your device settings.
To measure and improve our advertising, so that we spend on ads that actually reach people who want what we list. This is described under "Who we share it with" below.
To detect and prevent fraud, abuse, and attacks on our systems.
To improve our catalog and service quality.

We do not sell your personal data. We do not use the content of your Laila conversations to train an AI model of our own.

How we store and protect it

Account records are held in a database on a server we control, hosted with DigitalOcean, and are not held on your device.
Everything travels over HTTPS with TLS. There is no unencrypted path between the app and our servers.
Passwords are stored only as a salted scrypt hash. Nobody at Element can read your password, and we will never ask you for it.
Verification and password-reset codes are stored hashed, expire after 10 minutes, are limited to 5 attempts, and are deleted the moment they are used.
Sign-in tokens are cryptographically signed, expire after 30 days, and stop working the instant you delete your account.
Access to the live database is limited to the small number of Element staff who need it to run the service.

Who we share it with

We do not sell your personal data. We share it only with the following, and only for the purpose stated:

Who	What they get, and why
Meta (Facebook and Instagram), through the Conversions API	A hashed, non-readable version of your email address and phone number when you submit a lead, plus the fact that a lead happened. This lets us measure which of our ads actually produced an inquiry, and stop paying for the ones that do not. Meta also processes app and site activity through its advertising tools. This counts as tracking, and on iOS we only do it if you allow it when the app asks.
Zoho CRM	Your name, phone number, email address and the details of your inquiry, so an Element consultant can pick it up and follow up with you. Zoho processes it on our instructions only.
Google Analytics and Google Ads	Usage events and, for conversions, hashed contact details, used to measure site and app performance and ad results.
Apple and Google push services	Your device push token and the notification content, purely to deliver the notification to your handset.
Our email delivery provider	Your email address and the message, so that verification codes, password resets and deletion confirmations reach you.
Hosting and infrastructure providers	Whatever passes through the servers running our website, app API and databases.
Developers of projects you ask about	Your name and phone number, and only when you explicitly ask us to connect you with that developer or to reserve a unit.

We require every company named above, by contract, to protect your personal data to a standard at least equal to the one set out in this policy, to use it only for the purpose we engaged them for, to keep it no longer than needed, and to delete it when we ask. We do not give any of them permission to sell your data or to use it for their own unrelated purposes. We may also disclose data where the law or a competent Egyptian authority requires it.

WhatsApp and phone contact

When you tap a WhatsApp or call button, you are choosing to contact us through those channels; their own privacy policies apply to the transport of those messages.

How long we keep it

Data	Retention
Account record: name, email, phone, password hash	Until you delete your account. Removed from live systems immediately, and from rolling encrypted backups within 30 days.
Verification and password-reset codes	10 minutes, then deleted automatically. Deleted immediately once used.
Push notification tokens	Until you delete your account, uninstall the app, or turn notifications off.
Inquiry, valuation and consultant records	Up to 24 months from your last contact with us, then deleted.
Records of a completed reservation or sale	The period Egyptian tax and commercial law requires, currently 5 years. We cannot delete these on request.
Server and security logs (IP, time, page)	90 days, then removed on rotation.
Email delivery logs	Up to 30 days, held by our email provider.
Analytics data	Up to 14 months at event level, aggregated after that.
Advertising events already sent to Meta or Google	Governed by their own retention policies. We stop sending new events about you as soon as you delete your account or withdraw consent.

Deleting your account, and withdrawing consent

You can close your Element account at any time, and you do not need our permission or our help to do it.

In the app: open the More tab, go to Account, and tap Delete account. It is permanent and it happens the moment you confirm.
On the web, including after you have uninstalled the app: go to element-realestate.com/delete-account, enter the email address on the account, and confirm from the link we email you.

The deletion page lists exactly what is erased, what is retained and why, and how long it takes. You can also ask us in the same request to delete your inquiry and CRM records, and we will delete everything we are not legally obliged to keep.

You can withdraw consent for specific things without closing your account:

Push notifications: turn them off in your device settings under Notifications, or in the app.
Ad tracking on iOS: Settings, Privacy and Security, Tracking, and turn Element off. You can also decline the prompt when the app first asks.
Ad personalisation on Android: Settings, Google, Ads, and delete or reset your advertising ID.
Meta ad personalisation: manage it in your Facebook or Instagram ad preferences.
Marketing contact from us: reply STOP to a message, or email hello@element-realestate.com.

Withdrawing consent does not undo processing that already happened lawfully before you withdrew it.

Your rights

You can ask us to give you a copy of the personal data we hold about you, correct anything that is wrong, delete it, restrict or object to how we use it, or provide it in a portable format. Email hello@element-realestate.com and we will action it within 30 days. We may need to verify your identity first, which is why deletion requests from the web are confirmed by email. If you are unhappy with how we handled a request, you may complain to Egypt's Personal Data Protection Centre.

Security incidents

If a breach of our systems puts your personal data at real risk, we will notify you and the relevant Egyptian authority without undue delay, and tell you plainly what happened and what to do about it.

Children

Our services are intended for adults. You must be 18 or over to create an Element account. We do not knowingly collect data from anyone under 18, and if we learn that we have, we delete it.

Changes

If this policy changes, the date above will be updated. Material changes will be highlighted on this page.

Contact us

Questions about this policy, or about anything we hold on you: hello@element-realestate.com, hotline 17488, WhatsApp +20 128 320 0598. See also our support page and account deletion page.