Privacy
Privacy policy
Effective 07 Oct 2026
Heartbeat Homes shows Dubai property prices from public records. Most people use it without signing in, and we collect as little as we can. This page lists what we do collect, and why.
In short
- We count page views and a few actions without knowing who you are.
- Google Analytics needs your consent in the European Economic Area, the UK and Switzerland. Anyone can turn it off in Cookie settings.
- There is no advertising, and advertising signals to Google are always off.
- Signing in is optional. If you sign in with Google, we keep your name, email address and profile picture for your session, and the properties you save.
Who we are
Freedom! Family Limited runs Heartbeat Homes and is responsible for the personal data described here. Contact details are below.
- Responsible for your data
- Freedom! Family Limited
- Privacy requests
- Freedom! support at freedom.support.tm
Where the market data comes from
Prices, sales, rent contracts, buildings and units come from public Dubai Land Department (DLD) records and other Dubai government open data. They describe properties, not you, and each page shows its source and date. Broker pages show entries from DLD's public broker register as DLD publishes them.
When you browse
Every public page works without an account. Cloudflare sits in front of the site, so it and our servers receive the usual details of each request: your IP address, your browser and the page you asked for. Cloudflare uses them to deliver the site and protect it from attacks. Our app does not store your IP address or browser details.
To decide whether to ask for analytics consent, the site reads the country Cloudflare detects for your connection. It uses the answer once and does not keep it.
Our own visit counts
We keep our own daily counts of page views and of five actions: searches, searches that found nothing, property page views, saves and shares. A count holds the date, the page path, the search words or the property, and a number. It holds no name, account, IP address or cookie, so it cannot be tied to you.
Because no one is identified, these counts run whatever you choose in Cookie settings. We keep them for 400 days. Search words are stored as typed, so please do not type personal details into the search box.
Google Analytics
We use Google Analytics 4, loaded through Google Tag Manager, to see which pages and searches people find useful. It runs with Google Consent Mode v2:
- In the European Economic Area (the EU, Iceland, Liechtenstein and Norway), the UK and Switzerland, analytics cookies stay off until you choose Accept. Until then, Google Tag Manager still loads and Google Analytics may send Google signals that a page was viewed, without setting or reading any cookie.
- Everywhere else, analytics cookies are on until you turn them off in Cookie settings.
- Advertising signals are always off. The site shows no ads, and Google Analytics is not used for advertising.
What we send to Google: the page address without its query string, the page title, search words (cut at 100 characters), the number of results, the property you looked at, the filters you picked, whether you shared a page, and whether you are signed in. We never send your name, email address or account ID. Google's own privacy policy, at policies.google.com/privacy, covers what Google does with it.
Signing in
You only need an account to save properties. You sign in with your Google account through Heartbeat's sign-in service, Auths.
We receive your name, email address, profile picture and Heartbeat account ID. We keep them, with any admin permissions your account has, in a session record that lasts up to 7 days or until you sign out. We never see your Google password, and we do not keep Google's sign-in tokens.
Properties you save are stored against your Heartbeat account ID, with the date you saved them, until you remove them.
Brokers and admins
Brokers do not fill in any form on Heartbeat Homes. Our admins link a broker from DLD's public broker register to a property, and can add a note.
An admin can also upload proof that the broker may market the property, as JPEG or PDF files. The files go from the admin's browser straight to Heartbeat's upload service, which stores them in a Google Drive folder that Heartbeat controls. We keep a link to the file with the assignment.
We record which admin made an assignment or corrected a property's details, by their Heartbeat account ID.
Who else handles data
Your browser contacts these services directly while you use the site:
- Google runs Analytics and Tag Manager, serves the fonts and icons, shows the map on property pages, handles Google sign-in, serves your profile picture, and stores proof-of-authority files in Google Drive.
- Cloudflare delivers and protects the site and tells us your country for the consent check. It may also count visits with Cloudflare Web Analytics, which sets no cookies.
- Heartbeat runs the sign-in service (Auths) and the upload service.
Google and Cloudflare process data in many countries, including outside the UAE and the European Economic Area.
Your rights
The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to this site, and the GDPR also applies if you are in the European Economic Area or the UK. You can ask us to:
- See the personal data we hold about you, and get a copy.
- Correct it.
- Delete it. There is no delete button yet, so ask Freedom! support at https://freedom.support.tm and we will remove your saved properties and end your sessions.
- Object to how we use it, or ask us to limit it.
Contact Freedom! support at https://freedom.support.tm and say what you want. We may ask you to confirm the request from the email address on your account.
To withdraw analytics consent, open Cookie settings and choose Decline. It stops Google Analytics cookies from then on.
If you think we have handled your data wrongly, you can complain to the UAE Data Office, or to the data protection authority where you live.
Changes to this policy
When what we collect changes, we update this page and the date at the top.