Privacy policy

Who we are

AjlaFit runs the AjlaFit mobile app and the website ajlafit.sa: a marketplace that connects people with certified personal trainers across Saudi Arabia, for sessions at the gym, at home or outdoors. In this policy, "AjlaFit", "we" and "us" mean the operator of the app and the website.

We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. By creating an account or using the service, you confirm you have read this policy.

The data we collect

• Account details: your name, mobile number, email address, password (stored only in hashed form), preferred language, gender and city.
• Fitness questionnaire: the answers you give when you sign up, such as your goals, weight, fitness level, preferred training place and times, and any health notes you choose to share so a trainer can plan safely.
• Location: your precise location, only when you allow it, to show trainers near you and the distance to them. For trainers, the area they train in and how far they travel.
• Bookings and payments: the sessions, packages and store orders you make, their dates, prices and invoices. Card payments are handled by our licensed payment provider; we never receive or store your full card number or CVV.
• Messages and reviews: the messages you exchange with trainers in the app, and the ratings and reviews you write.
• Trainer verification: for trainers, the certificates, identity documents, photos and bank details needed to verify them and pay them.
• Device and usage data: device type, operating system, app version, push notification token, IP address, and logs of errors and activity that keep the service working and secure.
• Cookies on the website: cookies needed for sign-in and your language choice, and a Google advertising tag that measures how many visitors come from our ads.

How we use your data

• To create and run your account, and to verify your phone number with a one-time code.
• To show you suitable trainers, and to let you book, pay for, reschedule and cancel sessions.
• To issue invoices and keep the financial records the law requires.
• To let you and your trainer message each other, and to send you booking confirmations, reminders and service notices by app notification, WhatsApp, SMS or email.
• To verify trainers and keep the platform safe, including preventing fraud and misuse.
• To answer you when you contact support.
• To understand how the service is used and improve it, and to measure our advertising.
• To meet our legal obligations and respond to lawful requests from authorities.

Who we share it with

We do not sell your personal data. We share it only as far as needed to run the service:

• The trainer you book sees your name, the session details and location, and the questionnaire answers relevant to training you. Clients see a trainer’s public profile.
• Our payment provider processes card payments and refunds.
• Messaging and email providers deliver verification codes and notifications.
• Google Maps shows maps and places; Google Ads measures visits from our ads.
• Our hosting and infrastructure providers store the data on our behalf.
• Government authorities, when the law requires it.

How we protect it

Data travels over encrypted connections (HTTPS). Passwords are stored hashed, access to personal data is limited to the staff who need it for their work, and our providers are bound to keep it confidential and secure.

How long we keep it

We keep your data while your account is open. When you delete your account, we delete or anonymise your personal data within 30 days, except records the law requires us to keep, such as invoices and payment records, which we keep only for the period the law sets.

Your rights

Under the PDPL you have the right to:

• Be told how your personal data is collected and used.
• Access your personal data and get a copy of it.
• Have inaccurate or incomplete data corrected.
• Have your data deleted when it is no longer needed.
• Withdraw your consent, for example by turning off location access or notifications in your phone’s settings.
• Complain to the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.

Deleting your account

You can delete your account yourself at any time: in the app, go to Profile and tap Delete account; on the website, go to your account settings. If you have sessions still to come, cancel them first. Deleting signs you out everywhere and removes your personal data within 30 days, as described above. If you cannot sign in, email support@ajlafit.sa from the email or phone number on your account and we will delete it for you.

Children

AjlaFit is meant for adults. People under 18 may use it only with the consent and supervision of a parent or guardian, who books on their behalf.

Changes to this policy

We may update this policy as the service changes. The date at the top shows the latest version, and we tell you in the app or by email about any important change.

Contact us

Questions or requests about your personal data: support@ajlafit.sa, or the Help & support page at ajlafit.sa/support.