Getquwwa

1. Introduction

Quwwa Information Technology Company, operating under the trade name Getquwwa ("we", "us", "our"), is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share data when you use the Getquwwa platform (the "Platform").

Our registered address is: Jeddah, Saudi Arabia.

2. Information We Collect

We collect the following categories of information:

Account data: Your name, email, phone number, gym name, city, and country when you register.
Usage data: How you interact with the Platform (pages visited, features used, session timestamps).
Gym member data: Information you enter about your gym members (names, phones, membership details, attendance records, measurements). You act as the data controller for this data; Getquwwa acts as a data processor on your behalf.
Payment data: Transaction records, subscription metadata, and payment method references processed through Moyasar (online payments), or recorded manually for bank transfer and cash payments. We do not store full card numbers on our servers.
Device data: IP address, browser type, operating system, and mobile device identifiers for security and push notifications.

3. How We Use Your Information

We use collected data to:

Provide, operate, and improve the Platform.
Process subscription payments and manage billing (Moyasar, bank transfer, or cash as applicable).
Send transactional communications (OTP codes, payment receipts, trial reminders, membership expiry alerts).
Deliver push notifications and optional WhatsApp/SMS messages configured by your gym.
Ensure Platform security and prevent fraud.
Comply with applicable legal obligations under Saudi Arabian law.

4. Data Storage and Security

Your data is stored on secure infrastructure using PostgreSQL databases hosted on our cloud servers, with encryption in transit (TLS) and access controls that ensure each gym can only access its own data.

We retain your data for the duration of your subscription plus 90 days after termination. Data is permanently deleted upon your written request, subject to any legal retention obligations.

5. Third-Party Processors

We do not sell your personal data. We share data only with the following trusted sub-processors:

Moyasar — Online payment processing for gym subscriptions and member renewals. See moyasar.com/privacy.
Expo (push notifications) — Delivering mobile push notifications to gym members.
Email and SMS providers — Sending OTP codes, password resets, and transactional emails.
WhatsApp Business API providers — Delivering automated notifications that you configure for your members.
Legal authorities — When required by applicable Saudi or international law.

6. Saudi PDPL Compliance

We process personal data in accordance with the Saudi Arabian Personal Data Protection Law (PDPL) and its implementing regulations. As a data controller, we are committed to:

Collecting personal data only for specified, explicit, and legitimate purposes.
Not processing personal data beyond what is necessary for those purposes.
Ensuring the accuracy of personal data we hold.
Implementing appropriate technical and organisational safeguards.
Honouring data subject rights as outlined in Section 7 below.

7. Your Rights

Under the Saudi PDPL and applicable law, you have the right to access, correct, delete, export, object to, or restrict processing of your personal data, and to withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at help@getquwwa.com. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication session management only. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, but doing so may affect Platform functionality.

9. International Data Transfers

Some of our sub-processors may store or process your data outside Saudi Arabia. Where such transfers occur, we take steps to ensure appropriate safeguards are in place consistent with the requirements of the Saudi PDPL.

10. Children's Privacy

The Platform is intended for business use by adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via the Platform or email at least 14 days before changes take effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related questions, requests, or complaints, contact us at help@getquwwa.com or write to Quwwa Information Technology Company, Jeddah, Saudi Arabia.