1. Scope and controller
This policy applies to the Muscle Tailor website, accounts, subscriptions, forms, and communications. The data controller is مؤسسة حياكة العضلات, unified national number 7053684598, at جدة، حي النزهة، شارع وديعة بن عمرو.
2. Information we collect
We collect information needed to operate accounts, deliver services, process orders, and provide support.
- Identity and contact details, nationality, residence, region, city, and gender.
- Account and sign-in information, including a Google profile image when Google sign-in is selected.
- Orders, subscriptions, invoices, coach interactions, and support messages.
- Technical information such as IP address, device, browser, visited pages, and operational events.
3. Health and fitness information
You may provide goals, weight, height, activity level, training experience, injuries, restrictions, and notes needed to tailor a plan. We use this information to make the service safer and more relevant and do not ask for medical records we do not need.
4. Accounts and Google sign-in
When you choose Google sign-in, we receive the account identifier, name, email, and profile image covered by the permissions you approve. We do not receive your Google password, and you can manage app access in your Google Account.
5. Purposes and legal bases
We process data to perform the subscription contract, manage accounts, payments and invoices, tailor coaching, communicate, prevent fraud, improve performance, and meet legal obligations. Depending on the context, processing relies on contract, consent, legal obligation, or a legitimate interest that does not override your rights.
6. Payments and invoicing
Payments are handled by a specialist electronic payment gateway. We do not store complete card details. We retain transaction identifiers, status, amount, invoice information, and records needed for reconciliation, refunds, and fraud prevention.
7. Cookies and analytics
We may use essential cookies for sessions, security, and carts, plus tools such as Google Analytics and Microsoft Clarity when enabled under the applicable consent settings. You can control non-essential cookies through the available consent controls or your browser.
8. Sharing and service providers
We do not sell personal data. We may share the minimum necessary information with hosting, email, analytics, sign-in and payment providers, the selected coach, professional advisers, or public authorities where disclosure is legally required.
9. International transfers
Some technology providers may process limited data outside Saudi Arabia. We select providers carefully and seek appropriate legal and contractual safeguards for the type and location of processing.
10. Retention and security
We retain data for service delivery, support, accounting and tax obligations, and disputes, then delete or anonymize it when no legal need remains. We apply access controls, encryption, backups, and monitoring, while no online transmission can be guaranteed risk-free.
11. Your rights
Subject to applicable law, you may request information about your data, access, correction, completion, deletion or restriction where justified, and withdraw consent without affecting earlier lawful processing. Send requests to [email protected].
12. Minors, updates, and contact
The service is not intended for anyone who cannot legally contract without guardian consent. We may update this policy as services or laws change and will publish the update date. Contact us at [email protected] or +966565479056.