Privacy policy

Fitlink is operated by SquareOne for Computer Systems & Communication Equipment Software Design, a business licensed in Dubai, United Arab Emirates. We are the data controller for the personal data described below, and you can reach us at support@fitlinkuae.com.

This policy covers the Fitlink app and the Fitlink website. It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

1. What we collect

Account details: your name, email address and password. Sign in with Google or Apple and we receive the name and email those services share with us.

Profile details you add: photo, bio, languages, goals or specialisations, packages, and, if you set one, your location. Coaches also upload certificates and identity documents for verification.

Activity in the app: bookings, reviews, events you create or join, favourites, messages you send and receive, reports you make, and a record of which profiles you have viewed and when.

Technical information: device type, operating system and app version, so we can keep the app working and deliver notifications. If you turn on push notifications we store a device token, which identifies your device to the notification service but tells us nothing else about it.

2. Why we are allowed to use it

UAE law requires us to have a lawful basis for processing your data. Ours are:

Your consent, which you give when you create an account and can withdraw at any time. Withdrawing it does not undo processing that already took place.

Performing our agreement with you: we cannot show you coaches, take a booking or deliver a message without processing the data involved.

Our legitimate interests in running a safe marketplace: verifying coaches, acting on reports, enforcing blocks, and preventing fraud and abuse.

Compliance with the law, where a UAE authority requires us to retain or produce something.

3. Location

Location is used only with your permission, to show coaches and facilities near you. A member's home area is never shown to other users. A coach's base location appears on their public profile and on the map. You can withdraw location permission at any time in your device settings.

4. How we use it

To run the service: show profiles, take bookings, deliver messages, send the notifications you have turned on, and answer support requests. To keep people safe: verify coaches, act on reports, and enforce blocks. To improve the app: understand which features are used. We do not sell your data, we do not share it for anyone else's marketing, and we do not show advertising.

5. Payments

Fitlink does not process payments. You pay your coach directly, and we never see your card or bank details.

6. Who we share data with

Providers that run the service on our behalf, each receiving only what it needs: Supabase hosts the database; Google Maps and Places power maps and address search; Apple and Google handle sign-in if you choose it; Firebase delivers push notifications.

Other users see only what you choose to show on your public profile.

We share data with authorities, courts or regulators only where UAE law requires it.

7. Where your data is stored, and when it leaves the UAE

Your data is stored in the European Union (Frankfurt), which the UAE recognises as offering an adequate level of protection.

Some of the providers above are based outside the UAE and the European Union, principally in the United States. That means limited categories of your data are transferred internationally: your device token and notification content reach Firebase so a push can be delivered, and your approximate location or a search term reaches Google when a map or address lookup loads. Where a destination country has no adequacy decision, we rely on contractual safeguards with that provider and on your consent to use these features, and we transfer only what the feature needs.

You can avoid the location transfers entirely by declining location permission, and the notification transfers by turning push notifications off.

8. How long we keep it

For as long as your account exists. Delete your account in the app (Profile, Account, Delete account) or through the deletion page on the website. Your profile is removed or anonymised straight away. Bookings and reviews that other people rely on remain, attributed to "Deleted user". We keep records we are legally required to keep, for as long as that obligation lasts.

9. Your rights

Under UAE data protection law you may: ask what we hold about you and get a copy; receive your data in a portable, machine-readable form; correct anything inaccurate; ask us to delete your data; ask us to restrict or stop a particular use; object to processing based on our legitimate interests; and withdraw consent you previously gave.

Most of this you can do yourself in the app at any time. For anything else, write to support@fitlinkuae.com. We will respond within one month. If a request is complex we may extend that, and we will tell you why before the month is up.

We will not charge you for exercising these rights, and we will not treat you differently for having done so.

If you are not satisfied with how we have handled your data, you may complain to the UAE Data Office.

10. Keeping data safe

Access to your data is restricted by the database itself, so one user cannot read another's private information even if they try. Identity and certificate documents uploaded for verification are kept separately from public profile content.

If a breach occurs that puts your data at risk, we will notify the UAE Data Office, and we will tell you directly where the risk to you is high.

11. When our staff can see your account

To investigate a support problem we may need to view your account as you see it. Every such session is time-limited, recorded in an internal audit log, and cannot be used to change your password or email or to delete your account. We do this only when it is necessary to resolve an issue you have raised or to act on a safety report.

12. Children

Fitlink is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to support@fitlinkuae.com and we will remove it.

13. Changes and contact

We update this policy when the service changes, and post the new version here with the date it took effect. For anything about your data, open Help & support in the app or write to support@fitlinkuae.com.