Privacy policy

Who is responsible for your data

Enti Fit is the controller of your personal data. For any question or request about your privacy, write to privacy@entifit.com.

What we collect and why

We collect what the service needs to work, and nothing beyond it:

• Your account: your name and mobile number, and your email if you add one. Your number is how you sign in, and we send a temporary code to it to confirm it is you.
• Your health answers: menopause stage, goals, fitness level and training history, the days you can train, where you train and what equipment you have, areas needing care such as knees or lower back, and safety questions such as chest pain on exertion, dizziness, or recent surgery.
• Your training: what you completed, your weights, reps, session length and how hard it felt. This is what lets your programme progress with you week by week.
• Your membership: subscription and invoice records. Card details are handled by the payment gateway; they never reach us and we do not store them.
• Your notifications: a device token for push, only after you allow notifications, and it is disabled when you sign out.
• Crash reports: if the app stops, we receive a technical report with device model, operating system, app version and the error trace, linked only to your account id, never your name or number.
• Funnel measurement on the website: we measure which step of the web questionnaire you reached. We do not send your answers, any health data, your name or your number.

Your health data

Your health answers are used for one purpose: building and adjusting your programme, and keeping you away from movements that do not suit you. We do not sell them, we do not use them for advertising, and we do not share them with any advertiser or data broker.

The safety questions may stop the programme and ask you to see your doctor first. This is not medical advice, and the app is not a substitute for your doctor.

If you request a personal coach, the information she needs to train you safely is shared with your assigned coach alone: what you told us about injuries, health conditions and medical notes. No coach sees the data of a member who is not assigned to her.

Who sees your data

We use providers who process data on our behalf and only on our instructions:

• Hosting and database: a cloud hosting provider that runs our servers.
• Push notifications: to deliver a notification to your device it receives the device token and the notification text. That is why we never put any health detail in a notification.
• Crash reporting: we run it on our own domain, so reports do not leave our infrastructure.
• Payment gateway: it handles your card directly once payments are live.
• Funnel measurement on the website: a measurement provider in the European Union, which receives questionnaire steps but not the answers.

How long we keep it

We keep your data while your account exists. When you ask for deletion the account is locked at once and you are signed out, and you have 30 days to change your mind by signing in with the same number and choosing to keep the account.

After those 30 days everything is deleted for good: your profile, your health answers, your programme, your training history and your notifications. The only exception is purchase records, which we keep as Saudi commercial and tax rules require, unlinked from your identity.

Your rights

Under the Saudi Personal Data Protection Law you may:

• Know what we hold about you and ask for a copy.
• Correct anything inaccurate.
• Delete your account and your data, from inside the app or by writing to us.
• Withdraw your consent to processing your health data at any time; that means the programme stops, because we cannot build it safely without it.
• Complain to the Saudi Data and Artificial Intelligence Authority if our answer does not satisfy you.

How we protect it

• Every connection between your app and our servers is encrypted.
• Sign-in uses a temporary code sent to your number, not a password that can be stolen or reused.
• Every request to our interface checks who you are and that the data asked for is yours.
• We keep health details out of notification text, because it appears on your lock screen.

Age

The service is for adults. We do not offer it to anyone under eighteen and do not knowingly collect their data; if we learn of such an account we delete it.

Changes to this page

For a substantive change we update the date at the top of this page and tell members in the app. Questions: privacy@entifit.com.