Privacy Policy

How we collect, use, and protect your personal information when you use SanoobFit. Written in plain English.

Sanoobfit FZE LLC ("SanoobFit," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data when you use our website, app, or services.

By accessing our website or using our services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

1. Who We Are

Sanoobfit FZE LLC is a free zone company with limited liability, licensed in the Ajman NuVentures Centre Free Zone, Ajman, United Arab Emirates (licence number 2622218834888), and operating from Dubai, UAE.

Founder & Lead Coach: Muhammed Sanoob

Registered office: BC-893164, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates

Operational office (UAE): in5 Design District, D3 - Zaa'beel Second - Dubai Design District - Dubai

Contact email: [email protected]

Phone (UAE): +971 56 321 6697 / +971 56 138 1575

2. Information We Collect

We collect only the information necessary to provide our services, communicate with you, process payments, and improve your experience.

2.1 Information you provide directly

• Account information: Name, email address, phone number, country, date of birth, gender
• Health and fitness data: Height, weight, body measurements, fitness goals, training experience, medical history (when voluntarily provided), dietary preferences, progress photos, and photos of meals you choose to log through the food scanner, used to estimate nutrition information
• Apple Health data: if you use our iPhone app and allow it, we read from Apple Health your steps, sleep (including sleep stages), weight, BMI, body fat, waist size, height, lean body mass, walking and running distance, flights climbed, exercise minutes, active and resting calories, stand hours and workouts, plus heart rate, resting heart rate, heart rate variability, VO2 max, blood oxygen and respiratory rate if you have an Apple Watch. We store them with your account to show your progress in the app, and we use your heart rate and steps during an activity you record (section 2.4). We never write anything back to Apple Health, and Apple Health data is never used for advertising or shared with third parties for their own purposes.
• Health Connect data: if you use our Android app and allow it, we read from Health Connect your steps, sleep (including sleep stages), weight, body fat, height, lean body mass, distance, floors climbed, active calories, exercise sessions, heart rate, resting heart rate, VO2 max, blood oxygen and respiratory rate. With your permission the app also reads your history from before you installed it, and reads new readings about once an hour in the background, so your steps stay up to date without opening the app. We store them with your account to show your progress in the app, and we use your heart rate and steps during an activity you record (section 2.8). We never write anything back to Health Connect, and Health Connect data is never used for advertising or shared with third parties for their own purposes. The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You can change or remove the app's access at any time in Health Connect.
• Payment information: Billing name, billing address, payment method. In our iPhone app, purchases are processed by Apple through its own in-app purchase system, and purchase and subscription status is shared with RevenueCat, the service we use to manage subscriptions. We do not store your full card numbers.
• Google Play purchases: in our Android app, purchases are processed by Google through Google Play's own billing system, and purchase and subscription status is shared with RevenueCat, the service we use to manage subscriptions. We never see your card details.
• Communication content: Messages sent via WhatsApp, email, contact forms, in-app chat, and comments
• Enquiries: when you send us an enquiry through a form on our website, or tap a WhatsApp or call button there, we ask for your name and phone number (and on some forms your email address) and save them before WhatsApp or your phone opens, together with what you wrote, the page you used, the button you tapped and how you reached our website (section 2.2).
• Testimonials and reviews: Feedback, before/after photos, or video testimonials you submit

2.2 Information collected automatically

• Device and browser data: IP address, browser type, device type, operating system, language
• Usage data: Pages visited, time spent, clicks, referring URLs
• How you reached our website: the website or app that sent you (for example Google, Instagram or ChatGPT), the first page you visited and, if you came from an advert, the advert, campaign, search keyword and the advert's click reference. Our website keeps this in your browser for 30 days and sends it to us only with an enquiry or a newsletter sign-up.
• Cookies and tracking technologies: See Section 7 below

2.3 Information from third parties

• Payment processors: Apple/RevenueCat share transaction confirmations and fraud-prevention data
• Social media platforms: Basic profile data when you interact with us via Facebook, Instagram, X, YouTube, LinkedIn, or TikTok
• Analytics partners: Aggregated visitor behaviour from Google Analytics, Meta Pixel, and TikTok Pixel

2.4 Activities you record in the iPhone app

• Location: when you record an activity, such as a run, walk, hike or ride, the app uses your phone's location to measure its distance and draw its route. Recording carries on with the screen locked until you finish, and iOS shows that your location is in use. Your location is not used at any other time, and you can refuse or turn off location access in your iPhone's Settings.
• Precise Location: an accurate distance and route need Precise Location. If it is off for SanoobFit, the app asks iOS to allow precise location for that one activity only. If you decline, the activity is still recorded, but its distance and route are less accurate.
• What is saved: when you save an activity, we store its type, start and end time, route (the positions recorded while you were moving, with their times), distance, moving time, split times, climb, estimated calories (worked out from your most recent weight), and, when Apple Health has them, your average and maximum heart rate and your steps during the activity, plus how it felt and any note you add. An activity is saved to your account only when you tap Save. Until it is sent it stays on your phone, and Discard deletes it.
• Who can see it: your activities and routes are shown only to you in the app. The distance of a run counts toward any run challenge you have joined, where other members can see your total but never your route. Our team can access activity records only to support you, keep challenges fair, and keep the service secure.
• Share cards: a card you share is made on your phone. The first and last 200 metres of the route are always left off, so the card does not show where you started or finished, although it can still show the area. To draw the map and, for some card designs, name the area, the app asks Apple Maps using points from your route. Some designs show a milestone, streak or personal best, worked out by our server from your own saved activities and Apple Health workouts. A photo you choose for a card stays on your phone and is never uploaded, and a caption you type is drawn on the card without being saved by us. Anything you then share is shared by you, with whoever you choose.

2.5 Photos and camera

• Camera: the app uses your camera only when you use a feature that needs it, such as a posture check, movement form review, or logging a meal by photo. The app explains why before iOS asks, and nothing is recorded or shared without your action.
• Saving to Photos: when you save a card, such as an activity or challenge card, the app asks iOS for permission to add photos. That permission only adds the images you choose to save. The app cannot see the photos already on your phone.
• Photos you choose: a photo you pick for a share card stays on your phone. Progress and posture photos you upload are stored with your account and are not shown to other members. Meal photos are handled as described in section 2.1.

2.6 Motion & Fitness

While you record an activity, the app reads your phone's barometer, with your permission, to measure how much you climb. With the same permission it also reads your phone's motion activity, used only during a ride, to notice if you are in a car or bus rather than on a bicycle and offer to pause. Nothing else is read from Motion & Fitness. The climb is saved as part of the activity.

2.7 Permission reports and app diagnostics

The iPhone app reports which permissions you have allowed, refused or not yet been asked for (notifications, whether Apple Health access has been requested, location and whether Precise Location is on, Motion & Fitness, camera, and adding to Photos), and the choices you make on the app's own explanation screens before iOS asks. A report is sent when one of these changes. When you record an activity, the app also reports technical details such as its distance and time, GPS accuracy, how many position readings were kept, and whether saving worked, but never your route or your position. These reports carry the app version and a one-way coded version of your account ID, not your name or email, and we use them only to find problems and improve the app, including how it asks for permissions.

2.8 The Android app

Our Android app works the same way as the iPhone app described in sections 2.4 to 2.7, with these differences:

• Location: the app asks for your location only while you use it, when you start recording an activity. While an activity records, Android shows a notification, and recording carries on with the screen off until you finish. Your location is not used at any other time. If you allow only approximate location, the activity is still recorded, but its distance and route are less accurate. You can change location access at any time in your phone's Settings.
• Heart rate and steps during an activity: read from Health Connect when you have allowed it (section 2.1), instead of Apple Health.
• Share cards: the map is drawn by Google Maps, and the area is named by your phone's own location service (provided by Google), using points from your route, never its first or last 200 metres. Everything else about share cards is as described in section 2.4.
• Physical activity: when you record a ride, the app can ask for Android's Physical activity permission, so it can notice if you are in a car or bus rather than on a bicycle and offer to pause. It is used only while a ride is recording. If you refuse, the check uses your speed alone.
• Climb: on a phone with a barometer, the app reads it while you record an activity to measure how much you climb. No permission is needed for this and nothing else is read.
• Camera and photos: the camera is used as described in section 2.5. A card or video you save goes into a SanoobFit folder in your phone's gallery; the app cannot see the other photos on your phone.
• Notifications: if you allow notifications, your phone gives the app a notification address through Google's Firebase Cloud Messaging, which we store with your account so we can send you coach messages and reminders. You can turn notifications off in the app or in your phone's Settings.
• Permission reports and app diagnostics: as in section 2.7, for the Android app's own permissions (notifications, Health Connect, location, Physical activity and camera).

3. How We Use Your Information

3.1 To deliver our services: create and manage your account, build personalized fitness, nutrition, and lifestyle programmes, process payments and deliver paid programmes, provide customer support, track your progress and adapt your programme, and record the activities you choose to record and show them to you.

3.2 To communicate with you: send transactional emails, reply to your enquiries via email, WhatsApp, or contact forms, send programme reminders, check-ins, and coaching follow-ups. If you contact us more than once, or later join our newsletter or create an account, with the same phone number or email address, we link these records so that we treat you as one person.

3.3 For marketing (only with your consent): send newsletters, fitness tips, and promotional content, share new programmes, free resources, and special offers, run remarketing ads on platforms such as Meta and TikTok, showcase client testimonials and transformations (only with explicit consent - see Section 10). You can opt out of marketing at any time via the unsubscribe link in our emails or by contacting us.

3.4 To improve our services: analyze how visitors use our website and app, identify which content, programmes, and features are most valuable, learn which pages, websites and adverts bring enquiries, fix bugs and improve performance, develop new programmes based on aggregated user behaviour.

3.5 For legal and security reasons: comply with applicable laws and regulations, prevent fraud, unauthorized access, and abuse, enforce our Terms and Conditions, respond to legal requests or court orders.

4. Legal Basis for Processing

We collect and process personal data based on the following legal grounds (relevant for users in jurisdictions such as the EU/UK under GDPR): contractual necessity to deliver the coaching programmes and services you have purchased, consent for marketing communications and non-essential cookies, legitimate interest to improve our services, prevent fraud, and protect our website, and legal obligation to comply with tax, accounting, and other regulatory requirements.

For users in the UAE, applicable provisions of UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law) apply.

5. How We Share Your Information

We do not sell your personal data. We share data only with trusted partners who help us deliver and improve our services.

We require all third-party processors to handle your data securely and in line with applicable data protection laws. We may also disclose information when legally required.

6. International Data Transfers

Sanoobfit FZE LLC is registered in Ajman, United Arab Emirates, with operations in Dubai, UAE. Our servers and service providers may be located in the UAE, the European Union, the United States, or elsewhere.

When we transfer your data internationally, we ensure appropriate safeguards are in place, including contractual clauses with our processors, compliance with applicable data protection laws, and reasonable security measures during transmission. By using our services, you consent to such international data transfers.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate, improve, and personalize our website.

7.1 Categories of cookies: necessary cookies, required for the website to function (secure logins, cart, consent preferences), always active; functional cookies, enabling features like social sharing and chat tools; analytical cookies, helping us understand visitor behaviour (e.g., Google Analytics); advertising cookies, delivering personalized ads and measuring performance (Meta Pixel, TikTok Pixel).

7.2 Managing cookies: when you first visit our site, you'll see a cookie consent banner. You can accept all, reject non-essential, or customize your preferences at any time. You may also adjust or block cookies via your browser settings, though doing so may affect website functionality.

8. Data Retention

• Account data: retained while your account is active. Deleted or anonymized within 90 days of account closure unless legal obligations require longer retention.
• Transaction records: retained for as long as UAE tax and accounting law requires.
• Marketing data: retained until you unsubscribe or withdraw consent.
• Enquiries: Enquiries are kept for as long as we need them to follow up with you and serve you, unless you ask us to delete them sooner.
• Health and fitness data: retained while your coaching engagement is active; deleted within 90 days of programme completion unless you request earlier deletion.
• Recorded activities and routes: kept with your account while it is active, and deleted with your account.
• Permission reports and app diagnostics: linked only to a one-way coded version of your account ID, and kept to find problems and improve the app.
• Website analytics: retained per Google Analytics defaults (typically 14 months) in anonymized form.

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data: right to access a copy of the personal data we hold about you, right to correction of inaccurate or incomplete information, right to deletion of your data (subject to legal retention requirements), right to object to processing for marketing purposes, right to data portability (a machine-readable copy of your data), right to withdraw consent for marketing or non-essential processing at any time, and right to lodge a complaint with your local data protection authority (e.g., the UAE Data Office, or your national supervisory authority under GDPR).

To exercise any of these rights, email [email protected] with your request. We will respond within 30 days.

10. Use of Client Photos, Testimonials, and Before/After Images

If you provide us with before/after photos, written testimonials, or video reviews, we may use them publicly on our website, our mobile/web app, social media accounts, marketing materials and advertisements, and blog posts and case studies.

We will only use your images, testimonials, or transformation content publicly if you have given us explicit written consent (via signed consent form, email confirmation, or in-app acknowledgment). You may withdraw consent at any time by emailing us at [email protected] - we will remove your content from future publications, though previously distributed materials (e.g., already-published social posts) may remain in archives.

11. Children's Privacy

SanoobFit is used by members aged 13 and older, including minors. There is no separate parent-purchased programme for younger members, and no parent or guardian account management. Anyone creating an account, including a minor, enters their own date of birth during sign-up, and the app determines from that date whether they are a minor.

We do not collect parental consent before a minor creates an account. A minor's account information, health and fitness data, training logs, and messages are collected, used, and stored the same way as any other member's, for the same purposes described elsewhere in this policy.

If you are a parent or guardian and want to review, correct, or delete your child's information, contact us at [email protected] and we will act on that request the same way we act on any member's request under Section 9.

SanoobFit is not intended for children under 13. If we become aware that someone under 13 has created an account, we will delete it.

12. Security

We use industry-standard measures to protect your personal data, including HTTPS/SSL encryption for all data transmitted to and from our site, secure password storage (hashed, not plain text), access controls limiting who on our team can view personal data, and regular security audits and software updates.

However, no system is 100% secure. We cannot guarantee absolute security and you share information with us at your own risk. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

13. Third-Party Links

Our website may contain links to third-party websites and integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing any information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered users by email and/or via a notice on the website. Your continued use of our services after such changes constitutes acceptance of the updated Policy.

15. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates, as applied in the Emirate of Ajman. Any disputes arising from or relating to this Policy will be subject to the exclusive jurisdiction of the courts of Ajman, United Arab Emirates.

For users in the EU, UK, or other jurisdictions outside the UAE, applicable local consumer-protection and data-protection rights are preserved where required by law.

16. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, get in touch with us directly:

Email: [email protected]
Phone (UAE): +971 56 321 6697 · +971 56 138 1575

Registered office: BC-893164, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
UAE Office: in5 Design District, D3 - Zaa'beel Second - Dubai Design District - Dubai

We aim to respond to all enquiries within 7 business days.