Privacy Policy
Last updated: 22 October 2026
About this policy
This policy explains:
- what personal data Sportify Hub LLC ("Sportify Hub", "we") collects
- why we collect it
- who we share it with
- the rights you have
Who we are. Sportify Hub LLC is licensed by the Sharjah Media City (Shams) Free Zone Authority (licence no. 2218787.01) and registered at Sharjah Media City, Sharjah, United Arab Emirates. We are the controller of your personal data under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). The PDPL applies to us because Sharjah Media City has no separate data protection law.
Privacy contact: support@sportifyhub.com, subject "Privacy".
1. The short version
- We collect what we need to run your training: your account, your training and health data, and your purchases.
- We don't sell your data, and we don't use advertising networks or advertising cookies.
- Health data is processed only with your explicit consent, given when you enter it. Coaches see only what you choose to share, and you can change that at any time.
- You can delete your account in the app. Your training and health data is erased. We keep your name, email, phone and payment records because the law requires it.
2. What we collect
Account
- your name, email address and phone number (if you add one)
- how you sign in (managed by our sign-in provider, Clerk)
- your time zone and country
Training and health data (sensitive data), only what you choose to enter
- goals, experience level, training days, location and equipment
- injuries or limitations
- sex and birth year
- body weight, water, sleep and other check-ins
- workouts you plan and log (exercises, sets, weights, times, results)
- your progress, personal records, routines, and the programs you follow and techniques you mark as practised
Coaching
- the coaches you connect with
- what you let each coach see
- the feedback and plans they give you
- a coach's private notes about your training
Purchases
- what you bought or subscribed to, the amounts, and refunds and disputes
- card payments are handled by Stripe: we never see or store your full card number
Coaches only
- your coach application: name, bio, city, certificates, social links, and the agreements you accepted
- your payout bank details, stored encrypted
- the videos and files you upload
Technical
- how the app is used and which pages are opened (product analytics, linked to an anonymous id, never your name or email)
- error reports
- basic security logs such as IP address and device type
3. Why we use it (and our legal basis under the PDPL)
| Purpose | Basis |
|---|---|
| Run your account, workouts, plan, progress and programs | Performing our contract with you |
| Process payments, refunds and coach payouts; keep accounting and tax records | Contract, and our legal obligations (tax and commercial record-keeping) |
| Health and body data (weight, sleep, injuries, assessments) | Your explicit consent, given when you enter it. You can withdraw it by deleting the data or your account. |
| Share your data with a coach you connected with, per category you allow | Your explicit consent, per coach and per category, which you can withdraw at any time |
| Keep the Service secure, prevent fraud and abuse, fix errors | Our legitimate interests in a safe and working Service |
| Improve the product with anonymous usage analytics | Our legitimate interests. No name, email or advertising identifiers are used. |
| Service emails (receipts, renewal reminders, account notices) | Contract |
| Coach weekly summaries | Legitimate interests; you can unsubscribe at any time |
- We don't use your data for advertising or sell it.
- We don't make automated decisions that have legal or similarly significant effects on you.
- Withdrawing consent doesn't affect processing that already took place.
4. Who can see your data
- You.
- Coaches you connect with. They see only the categories you allow: workouts, plan, progress, body weight, assessments, health check-ins. When you end a connection, they lose access straight away.
- When you buy a coach's program, the coach sees only how many members and sales the program has, not who you are. They see nothing about you unless you connect with them.
- Sportify Hub staff, only as needed to run the Service: support, program review, payments, safety. Staff are bound by confidentiality.
- Our service providers, who process data on our instructions under written contracts with confidentiality and security obligations:
| Provider | Role | Where data is processed |
|---|---|---|
| Supabase | Database and file storage | India (Mumbai) |
| Railway | Application servers | Singapore |
| Vercel | Website hosting | Global edge network |
| Clerk | Sign-in and accounts | United States |
| Stripe | Payments | United States, European Union |
| Mux | Video hosting and streaming | United States |
| Resend | Email delivery | United States, European Union |
| PostHog | Product analytics | European Union |
| Sentry | Error monitoring | United States |
- Authorities, when UAE law or a lawful order requires it.
- A buyer of our business, if Sportify Hub is sold or merged. Your data would stay protected under this policy, and we would tell you first.
5. Transfers outside the UAE
Some providers process data outside the UAE. We transfer only what each provider needs, and only as the PDPL allows (Articles 22 and 23):
- to a country with adequate data protection, or
- under a contract that requires the provider to protect your data to at least the PDPL's standard.
Your consent to transfers. When you enter health data, we ask your explicit consent to process it, including on the providers above. You can ask us for details of the safeguards at any time.
6. Security
- Data is encrypted in transit.
- Payout bank details are additionally encrypted at rest.
- Access is limited to people who need it, and financial and admin actions are logged.
- No system is perfectly secure. If a breach is likely to affect your privacy, we tell you and the UAE Data Office as the PDPL requires.
7. Your rights
Under the PDPL you have the right to:
- get a copy of your personal data and information about how we process it
- correct inaccurate data, and complete incomplete data
- erase your data, which you can do yourself with You → Delete my account (see §8 for what the law requires us to keep)
- restrict or object to processing, including objecting to processing based on our legitimate interests
- move your data to another provider, where the PDPL gives this right
- withdraw consent at any time:
- per coach, in You → Coaches & sharing
- for health data, by deleting it or your account
How to use them. Email support@sportifyhub.com with the subject "Privacy". We may ask you to confirm your identity. We answer within 30 days. If you're not satisfied, you can complain to the UAE Data Office.
8. How long we keep data
- While your account is open: we keep your data so the Service works.
- When you delete your account:
- We erase at once your training and health data: workouts, plan, routines, check-ins, assessments, practice records and coach connections.
- We keep your name, email and phone number, and your records of purchases, payments, refunds, disputes and accepted agreements. UAE tax and commercial record-keeping rules require these to be kept for at least 5 years after the end of the financial year they relate to, and we may also need them to defend or bring a legal claim. After that period we delete or anonymise them.
- Your account is closed (archived), so these records stay linked. Only our support team can restore it, at your request, and erased data does not come back.
- Coaches' application, payout and statement records: kept for the same legal period.
- Security logs and error reports: kept for a short time, usually under 90 days.
9. Cookies
- We use only:
- cookies that are strictly needed to sign you in and keep you signed in
- a setting that remembers your theme
- We use PostHog to understand how the product is used, linked to an anonymous id. It doesn't track you across other sites.
- We don't use advertising or cross-site tracking cookies.
10. Children
The Service is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has an account, tell us and we will delete it.
11. Changes
We will update this policy when the Service or the law changes. If a change is significant, we tell you in the app or by email before it applies.
12. Contact
Sportify Hub LLC · Sharjah Media City (Shams) Free Zone, Sharjah, UAE · Licence no. 2218787.01 · support@sportifyhub.com (subject "Privacy")