Legal

Privacy policy

Effective Date: March 15, 2026

Last Updated: 28 October 2026 (the changes take effect on 11 November 2026)

Welcome to JFit Connect (“JFit,” “we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information across our website and mobile application (the “Platform”). JFIT Personal Training L.L.C (Licence No. 1224837), Dubai, United Arab Emirates, is responsible for your personal data.

1. DATA WE COLLECT

We collect several types of information to provide a seamless connection between clients and fitness professionals:

Identity & Contact Data: Name, email address, phone number, and physical address (required for home-service bookings).
Communication Preferences: Whether you have agreed to receive WhatsApp messages from us, when and how you gave or withdrew that choice, your email unsubscribe status, and a record of the messages we send you.
Health & Fitness Data (Sensitive): Fitness goals, weight, height, known injuries, and medical history. By providing this, you give explicit consent for JFit and your selected trainer to use this info to personalize your sessions.
Location Data: We request permission to access your device’s precise GPS location. This permission is requested at the time of your first booking or trainer search. You may grant or deny this permission at any time through your device settings. We collect your location solely to help you find nearby trainers, enable “on-site” session verification, and improve our trainer recommendation engine.
Financial Data: Payment card details are processed by our third-party payment gateways (e.g., Stripe/Apple Pay). JFit does not store your full credit card information on our servers.
Usage & Technical Data: IP address, device type, and app usage patterns collected via cookies and SDKs.

2. HOW WE USE YOUR DATA

We process your data on these bases: Contractual Necessity (to create your account, manage bookings and payments, and send you service messages); Consent (for health data, WhatsApp messages, and news and offers on WhatsApp); and our Legitimate Interests (to keep the Platform safe, prevent fraud and improve our services), where the law allows:

Service Delivery: To facilitate bookings, payments, and communication between you and the fitness professional.
AI Recommendations: We use automated processing to suggest trainers based on your location, goals, and previous bookings.
Safety & Security: To verify the identity of trainers and clients for home-visit safety.
Service Messages: To send account and booking updates, reminders, payment receipts and support replies and, for Experts, messages about your application, documents, verification, listing and payouts. See section 10.
Marketing: We may email you news and offers, such as new trainers or local fitness events. Each email has an unsubscribe link. We send news and offers on WhatsApp only if you have opted in.
Location-Based Services: Your location data is used only while the app is in use (foreground access), unless you have explicitly enabled background location for session check-in features. We do not track your location continuously or share it with third parties beyond your selected trainer during an active booking.
Device identifiers. Operating system, device model, app version, language and region, time zone, and a randomly generated device identifier used to deliver push notifications.
Advertising identifier (IDFA, iOS only). With your explicit permission, granted through Apple’s App Tracking Transparency prompt, we collect Apple’s Identifier for Advertisers (IDFA) for marketing attribution. If you decline the App Tracking Transparency prompt or later turn off tracking in iOS Settings, we do not collect IDFA and you continue to use the app normally.
Push notification tokens. When you grant notification permission, your device’s push token is stored on our servers so we can send you booking reminders, message alerts, and account notifications. You can disable notifications at any time from your device settings.
Photos and camera content. If you grant camera or photo library permission, the specific photo you select is uploaded to our servers and used only for the purpose you chose (your profile photo, or, for Experts during onboarding, an image of a verification document or professional certification). We do not access other photos in your library, and we do not run any background scan of your library.
Location. See the dedicated “Location” section below.

3. DATA SHARING & DISCLOSURE

We do not sell your personal data. We share your information only with:

Service Providers (Trainers): When you book a session, we share your name, location, and relevant fitness/health notes with the professional you selected.
Payment Processors: To facilitate secure transactions, including the 3% Admin Fee described in clause 13.4 of our Terms & Conditions.
Messaging and Customer-Management Providers: To send you the messages described in section 10 and to keep track of our relationship with you (see section 8).
Regulatory Authorities: When required by UAE law or to protect the safety of our users.

4. DATA STORAGE & RETENTION (UAE REGION)

Localization: Your data is primarily stored on secure servers located within the United Arab Emirates.
Retention Period: We retain your personal data for one (1) year after your account becomes inactive. After this period, data is deleted or anonymized, unless financial records must be kept longer (5 years) for tax/legal compliance. Records of the messages we send you and of your WhatsApp and email choices follow the same one-year period, except that a record of an opt-out is kept for as long as we need it to respect your choice.
Transfers outside the UAE: Some of the service providers listed in section 8 process data outside the UAE. Where they do, we rely on the safeguards required by UAE Federal Decree-Law No. 45 of 2021.

5. MINORS & PARENTAL CONSENT

JFit Connect is intended for users aged 13 and over. Users between 13 and 18 (or the age of majority in their jurisdiction, whichever is higher) must use the app under the supervision of a parent or legal guardian. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, please contact support@jfitconnect.com and we will delete the data.

6. YOUR RIGHTS

Under the UAE PDPL, you have the right to:

Access: Request a copy of the data we hold about you.
Correction: Amend any inaccurate personal or health information.
Account deletion: You can delete your JFit Connect account at any time directly from within the app — tap “Delete my account” on the onboarding screens, or, after onboarding, open the Account tab → Privacy & Security → “Delete account permanently.” Once you confirm deletion, your account enters a 30-day grace period during which it can be reactivated by contacting support; after the 30 days, your personal data is permanently deleted or anonymized, except where retention is required by law. Sessions are signed out on all devices and stored push notification tokens are removed.
Withdrawal of Consent: Opt-out of location tracking or marketing at any time. To stop WhatsApp messages, reply STOP to any WhatsApp message or turn WhatsApp off in your app settings. To stop marketing emails, click “Unsubscribe” in any email.

7. SECURITY

We implement industry-standard encryption (SSL/TLS) and multi-factor authentication to protect your data. However, no method of transmission over the internet is 100% secure. By using the Platform, you acknowledge this inherent risk.

8. THIRD PARTY SERVICES

We rely on the following third-party services to operate the app. Each is bound by a written data-processing agreement with us, and you can review their privacy practices on their own websites:

Stripe, Inc. (United States) — payment processing for client purchases (sessions, programs, and one-off payments). Payment card details are collected by Stripe directly and are never stored on our servers. https://stripe.com/privacy
Apple Inc. (United States) — Sign in with Apple authentication; App Store In-App Purchase for Expert subscription plans; push notification delivery (APNs). https://www.apple.com/legal/privacy/en-ww/
Google LLC (United States) — Sign in with Google authentication. https://policies.google.com/privacy
AppsFlyer Ltd. (Israel) — install attribution, in-app event analytics, deep-link routing (OneLink), and uninstall measurement. AppsFlyer processes a hashed device identifier, your IDFA (only if you grant App Tracking Transparency permission), install and click timestamps, and the in-app events listed at the end of this policy. AppsFlyer does not receive your name, email, phone number, or any health information. https://www.appsflyer.com/legal/services-privacy-policy/
Twilio Inc. (United States) — sending and receiving WhatsApp and SMS messages. Twilio processes your phone number, the content of messages between you and JFit Connect, and delivery status. https://www.twilio.com/en-us/legal/privacy
Meta Platforms (WhatsApp) — delivery of WhatsApp messages you have opted in to receive, under WhatsApp’s business terms. https://www.whatsapp.com/legal/business-policy
Resend (United States) — delivery of our emails, including whether an email was delivered, opened or bounced. https://resend.com/legal/privacy-policy
Supabase, Inc. (United States) — hosting of our customer-relationship database, which holds your name, contact details, account and booking status, and communication preferences. It does not hold your health data or card details. https://supabase.com/privacy

9. MARKETING

App Tracking Transparency (iOS). On iOS, we ask for your permission before any third-party (currently AppsFlyer) is allowed to associate your activity in JFit Connect with your Apple Identifier for Advertisers. You can change this choice at any time in iPhone Settings → Privacy & Security → Tracking, by toggling JFit Connect on or off. Denying this permission does not affect your ability to use the app or any paid features.

10. HOW WE CONTACT YOU

Channels. We contact you by in-app notification, email, SMS and, if you opt in, WhatsApp, using the phone number and email you give us.
What we send. Account and booking updates, reminders, payment receipts, support replies and, for Experts, messages about your application, documents, verification, listing and payouts.
Messages based on your activity. We use information about your activity on the Platform to send relevant reminders, for example whether you have completed sign-up, booked a session or uploaded your documents. We do not use your health data for this.
WhatsApp consent. We message you on WhatsApp only if you opt in: at sign-up, in your app settings, on our website forms, or by messaging us on WhatsApp. We keep a record of when and how you opted in.
Stopping messages. Reply STOP to any WhatsApp message, turn off WhatsApp in your app settings, or click “Unsubscribe” in any email. We stop within 48 hours. Essential service messages about your bookings and account may still be sent by in-app notification or email.

11. CONTACT US

For any privacy-related inquiries or to exercise your rights, please contact our Data Protection Officer at:

Email: support@jfitconnect.com

Address: Dubai, UAE