Privacy Policy
What SanoobFit collects, why, who it goes to, how long we keep it, and what you can do about it. Written in plain English, and describing what our website and apps actually do today.
This policy covers the SanoobFit website (sanoobfit.com), the SanoobFit iPhone and Android apps, and our coaching services. It replaces version 3.1 of the same day.
1. Who we are
Sanoobfit FZE LLC ("SanoobFit", "we", "us") is a free zone company with limited liability, licensed in the Ajman NuVentures Centre Free Zone, Ajman, United Arab Emirates (licence number 2622218834888), and operating from Dubai, UAE. We decide how your personal data is used.
Founder and Lead Coach: Muhammed Sanoob
Registered office: BC-893164, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
Operational office (UAE): in5 Design District, D3 - Zaa'beel Second - Dubai Design District - Dubai
Contact for privacy questions and requests: [email protected] · Phone (UAE): +971 56 321 6697 / +971 56 138 1575
2. The short version
- We use your data to run your account and coach you. We do not sell it.
- Your data is stored with Supabase, in Frankfurt, Germany.
- The AI Coach, Coach Voice and the AI Food Scanner send some of your data, including health information, to Anthropic in the USA, which runs the artificial intelligence model behind them (section 5).
- We measure our Google ads, and for that we can send Google your email and phone in coded form (section 7).
- You can delete your account in the app. It is deleted 7 days after you ask (section 11).
- The rules for UAE, India and EU users are in sections 13 to 15.
3. What we collect
3.1 Your account
- Your name or display name, email address and password (stored in coded form, never readable), or your Apple or Google sign-in.
- Your WhatsApp number if you give it, so your coach can reach you.
- Your date of birth, gender and country, and how you heard about us if you tell us.
3.2 Health and body information
- At sign-up: we ask whether any of these apply to you: high blood pressure, diabetes, a heart condition, asthma, arthritis or joint pain, recent surgery, pregnancy (and which trimester), postpartum, PCOS, perimenopause or postmenopause. You can answer that none apply. We also keep any injuries and notes you add.
- As you use the app: height, weight, body measurements, body fat, goals, training experience, sleep, stress, food preferences, your workouts, the food and water you log, your steps and how you feel.
- Apple Health: if you use our iPhone app and allow it, we read from Apple Health your steps, sleep (including sleep stages), weight, BMI, body fat, waist size, height, lean body mass, walking and running distance, flights climbed, exercise minutes, active and resting calories, stand hours and workouts, plus heart rate, resting heart rate, heart rate variability, VO2 max, blood oxygen and respiratory rate if you have an Apple Watch. The app reads new readings in the background about once an hour. We store them with your account to show your progress, and use your heart rate and steps during an activity you record (section 3.4). We never write anything to Apple Health, and Apple Health data is never used for advertising or given to anyone for their own purposes.
- Health Connect: if you use our Android app and allow it, we read from Health Connect your steps, sleep (including sleep stages), weight, body fat, height, lean body mass, distance, floors climbed, active calories, exercise sessions, heart rate, resting heart rate, VO2 max, blood oxygen and respiratory rate. With your permission the app also reads your history from before you installed it, and new readings about once an hour in the background. We store them with your account to show your progress, and use your heart rate and steps during an activity you record (section 3.4). We never write anything to Health Connect, and Health Connect data is never used for advertising or given to anyone for their own purposes. The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You can change or remove the app's access at any time in Health Connect.
3.3 Photos and the camera
- The camera is used only while you use a feature that needs it: a posture check, a movement scan, a movement form check, or logging a meal by photo. The app explains why before your phone asks.
- Posture and movement scans: your body position is worked out on your phone. The photos are then saved privately with your account, together with the results. Other members never see them; the SanoobFit coaches who coach you can.
- Movement form check: runs on your phone only. Nothing from it is uploaded.
- Progress photos you upload are saved privately with your account. Other members never see them; SanoobFit staff with permission can.
- Meal photos: when you use the AI Food Scanner, the photo is sent to Anthropic to estimate the meal (section 5). The photo is kept privately with that meal so your coaching team can review your nutrition with you, and is deleted within 3 days of you deleting the meal or your account.
- Share cards: a photo you pick for a card stays on your phone and is never uploaded. Saving a card to your photos only adds that image; the app cannot see your other photos.
3.4 Activities you record (runs, walks, rides)
- Location is used only while you record an activity, to measure distance and draw the route, including with the screen locked until you finish. It is never used at any other time. An accurate route needs precise location; if you only allow approximate location, the activity is still recorded but less accurately.
- Motion: while you record, the app reads your phone's barometer to measure climb, and during a ride it can use motion or Physical activity to notice when you are in a vehicle and offer to pause.
- What is saved when you tap Save: the activity type, times, route, distance, moving time, splits, climb, estimated calories, and your heart rate and steps during it when Apple Health or Health Connect has them, plus how it felt and any note. Discard deletes it from your phone.
- Who sees it: your activities and routes are shown only to you. A run's distance counts toward any run challenge you joined, where other members see your total, never your route.
- Share cards: the first and last 200 metres of the route are always left off. To draw the map and name the area, the app asks Apple Maps (iPhone) or Google Maps and Google's location service (Android), using points from your route.
3.5 Messages
- Your chats with the AI Coach and with our coaching team, Community chat messages, and emails and WhatsApp messages you send us.
- When we send you a notification, its first words (for example the start of a coach message) pass through Apple's or Google's notification service.
3.6 Purchases
In the apps, Apple or Google take your payment; we never see your card. Apple or Google tell RevenueCat, the service we use to manage subscriptions, what you bought, and RevenueCat tells us your plan and when it renews or ends. If you pay us directly for coaching, we keep a record of that payment.
3.7 Enquiries and newsletter on our website
- Enquiries: when you tap a WhatsApp or call button, or send a consultation form, we ask for your name and phone number (and on some forms your email, goals and anything you want to tell us) and save them before WhatsApp or your phone opens, with the page, the button and how you reached our website.
- Newsletter: your name and email address.
- A copy of each enquiry, newsletter sign-up and new account (name, phone and email) is kept in our Google Sheets.
3.8 Collected automatically
- Device and usage: IP address, device and browser type, operating system, language, the pages and app screens you open.
- How you reached us: the website, app or advert that sent you, including the campaign, search keyword and the advert's click reference.
- App diagnostics: crash and performance reports, which permissions you allowed or refused, and technical details of recorded activities (never your route). These carry a one-way coded version of your account ID, not your name or email.
- Notification addresses: the address Apple or Google gives your phone for notifications. On Android we also store your phone's Android device ID with it.
- How you installed the app: on iPhone, Apple tells us whether you came from an Apple Search Ads advert and which one. On Android, Google Play tells us the link or advert that led to the install, including a Google ad click reference. We store this with your account.
4. How we use it
- To run your account and coach you: your plan, progress, challenges, nutrition, activities, messages and support. Our coaching team can see your profile, logs and photos to coach you.
- For the AI Coach, Coach Voice and AI Food Scanner, when you use them (section 5).
- To contact you: emails about your account, plan, trial and coaching, replies on WhatsApp, and the notifications you allow. If you contact us more than once, or later join our newsletter or create an account, with the same phone number or email, we link these records so we treat you as one person.
- To measure our adverts (section 7).
- To improve SanoobFit and fix problems.
- For safety and the law: preventing fraud and misuse (including repeat free trials), keeping challenges fair, and meeting legal duties.
We do not sell your data, and we never use your health information for advertising.
5. The AI Coach, Coach Voice and the AI Food Scanner
These features use an artificial intelligence model, Claude, made by Anthropic PBC in the United States. Some coach replies are written by fixed rules without the model. When the model is used:
- AI Coach: we send Anthropic your message, your last 10 chat messages, and your coaching details: your sign-up answers (including date of birth, gender, phone number, health conditions, injuries, medical notes, and pregnancy, postpartum or menopause answers), your plan and progress, membership, nutrition targets, body measurements, today's logs, the last 7 days of daily and food logs, the last 14 days of workouts and the last 30 days of weight.
- Coach Voice: a line about today's session and your first name.
- AI Food Scanner: the photo of your meal.
Under Anthropic's commercial terms, it does not use this data to train its models. Answers from these features can be wrong. They are not medical advice.
6. Who we share data with
Only these services, each to do its job for us:
| Service | What it gets | Why |
|---|---|---|
| Supabase (data stored in Frankfurt, Germany) | Everything in your account | Our database, file storage, sign-in and server |
| Anthropic (USA) | What section 5 lists | The AI Coach, Coach Voice and AI Food Scanner |
| Cloudflare | Website visits, IP address | Hosting the website, and Turnstile, which checks that a form or sign-up comes from a person |
| Resend (USA) | Your email address, name and the emails we send you | Sending our emails |
| RevenueCat (USA) | Your account ID and purchases | Managing subscriptions |
| Apple | Purchases, notification addresses, map points, Apple sign-in | Payments, notifications, maps on activity cards, Apple Search Ads install reports |
| Purchases, notification addresses, map points, Google sign-in, website and app usage, advert results, coded email and phone (section 7), copies of enquiries and sign-ups | Google Play payments, Firebase notifications, Google Maps, Google Analytics, Google Ads, Google Sheets | |
| Microsoft (USA) | How visitors move, scroll and tap on three of our website pages | Microsoft Clarity (section 8) |
| WhatsApp (Meta) | The messages you send us there | Talking with you |
| Our coaching team | Your profile, logs, messages and photos | Coaching and supporting you |
We may also share data when the law requires it.
7. Advertising and how we measure it
- Google Ads: when someone who clicked one of our Google ads sends an enquiry, taps WhatsApp or call, or becomes a paying client, we tell Google, using the advert's click reference. When there is no click reference, we send Google the email address and phone number from the enquiry in coded (hashed) form, so Google can match it to the ad (Google calls this enhanced conversions). On our website, the Google tag also receives the email and phone you enter in an enquiry, for the same purpose.
- App installs: see section 3.8. We do not use your phone's advertising ID, and the apps do not track you across other companies' apps or websites.
- Meta and others: we also advertise on Meta (Facebook and Instagram). We do not put a Meta or TikTok tracking pixel on our website and do not send Meta your data.
8. Cookies and similar technologies
- Necessary storage: signing in, and remembering your cookie choice.
- Google Analytics records the pages you view, how you arrived, and taps on our App Store, Google Play, WhatsApp and enquiry buttons, with your device type and an approximate location Google works out. It runs on our website and also inside the apps, where it records which screens load.
- Microsoft Clarity records how visitors move, scroll and tap on three pages: our home page, our personal trainer in Dubai page and our online personal trainer in the UAE page. It runs for every visitor to those pages, including before a cookie choice is made.
- Advert details: when you arrive from an advert or a tagged link, your browser keeps how you reached us for 90 days, and our website sets a cookie with the Google ad click reference for 90 days.
Your choice: visitors from the European Economic Area, the United Kingdom or Switzerland see a cookie banner. It controls Google Analytics cookies on our website pages: until you accept, Google Analytics stores no cookie (Google may still receive basic signals it cannot link to you). The banner does not control Microsoft Clarity, the advert click cookie, or Google Analytics inside the apps. Your choice is kept in your browser for 12 months, and you can change it here: . Visitors from other regions do not see the banner. Anyone can block or delete cookies in their browser settings.
9. Our legal reasons for using your data
- To provide what you signed up for (contract): your account, plan, coaching, activities, purchases and support.
- Your consent: the health information you choose to give us, including what the AI Coach and AI Food Scanner use; the permissions you allow on your phone (Apple Health, Health Connect, location, camera, motion, notifications); the newsletter; and, in the EEA, UK and Switzerland, Google Analytics cookies on our website. You can withdraw consent at any time (section 12).
- Our legitimate interests: measuring our adverts, emails about your account and coaching, improving the service, security and preventing fraud.
- The law: tax, accounting and other legal duties.
10. How long we keep data
| Data | How long |
|---|---|
| Your account, health answers, logs, activities, chats and photos | Until you delete your account (section 11) |
| Meal photos | Deleted within 3 days of you deleting the meal or your account |
| Posture and movement scan photos | Deleted within about 2 days of their scan or your account being deleted |
| Enquiries (website forms, WhatsApp and call buttons) | No end date is set; deleted when you ask |
| Newsletter sign-up | Until you unsubscribe; we keep a record that you unsubscribed |
| Copies in Google Sheets | Enquiries and newsletter sign-ups: no end date, deleted when you ask. Your account's row is removed when your account is deleted |
| Records of emails we sent you (address, delivered, opened) | No end date is set yet |
| What we sent Google Ads (coded email and phone) | No end date is set yet in our records; Google keeps it under its own terms |
| App diagnostics and usage events (coded account ID) | App heartbeats, sessions and screen opens: 90 days. Other events: no end date is set yet. They are not linked to your name and stay after your account is deleted |
| App store purchase history | Until you delete your account |
| Payments made to us directly | As long as UAE tax and accounting law requires |
| Database backups | Taken daily and kept for about 7 days |
| Google Analytics | Event data 2 months, user data 14 months (Google's settings in our account) |
| Microsoft Clarity | Kept by Microsoft under its own terms |
11. Deleting your account
How: in the app, go to Profile, Personal information, Delete my account. Or email [email protected] from the address on your account.
When: your account and its data are deleted 7 days after you ask, whichever way you ask. You are signed out straight away. If you sign in again within those 7 days, the deletion is cancelled.
Subscriptions: deleting your account does not cancel a subscription with Apple or Google. Cancel it first in your Apple ID or Google Play settings.
What is kept after deletion, and why:
- A short record of the closed account (name, email and phone), so we know it was closed and when. No end date is set yet.
- Your email in our free trial record, so the same person cannot start repeat free trials. No end date is set yet.
- App diagnostics and usage events with a coded account ID (section 10).
- Enquiries and newsletter sign-ups you made separately from your account, until you ask us to delete them.
- Payments made to us directly, as the law requires.
- Progress photo files: these are not yet removed automatically when an account is deleted. Ask us and we delete them.
- A copy of some coach chats made during a system change on 12 September 2026, which deletion does not yet reach. Ask us and we delete it.
- Backups, for up to about 7 days.
12. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to send it to you in a machine-readable form, to stop or limit using it, and to stop marketing. Where we rely on your consent, you can withdraw it at any time: turn off a permission in your phone's settings, delete the information in the app, unsubscribe from our emails, or email us. Withdrawing consent does not affect what we did before.
Email [email protected]. We reply within 30 days. You can also complain to your data protection authority (sections 13 to 15).
13. Users in the UAE
We process personal data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Health information is sensitive personal data, and we use it only to coach you and for the features in section 5. Your data is stored in Germany and some services are in the USA (section 6); they protect it under their data processing terms. You have the rights in section 12, and you can complain to the UAE Data Office.
14. Users in India
For users in India, we process digital personal data under the Digital Personal Data Protection Act, 2023.
- What and why: the data in section 3, for the purposes in sections 4 and 5. Your data is processed outside India, in Germany, the USA and the UAE (section 6).
- Your rights: to a summary of your data and of who we share it with, to correct, complete or erase it, to withdraw your consent as easily as you gave it, and to nominate someone to act for you if you die or cannot act yourself.
- Grievances: email [email protected] with "Grievance" in the subject. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
- Age: SanoobFit is for people aged 13 and over; members aged 13 to 17 use it only with a parent's or guardian's agreement (section 16).
15. Users in the European Union, the UK and Switzerland
- Who is responsible: Sanoobfit FZE LLC (section 1).
- Legal reasons: section 9. Health information is special category data; we rely on your explicit consent for it.
- Transfers: your data is stored in Frankfurt, Germany. It is also handled in the UAE, where we are based, and by services in the USA (section 6), under each provider's data processing terms, which use the European Commission's Standard Contractual Clauses for transfers out of the EU.
- Your rights: section 12, plus the right to object to processing based on our legitimate interests.
- Complaints: you can complain to the data protection authority where you live or work.
16. Age: 13 and over, with a parent's or guardian's agreement under 18
Under 13: SanoobFit is not for anyone under 13. Children under 13 may not create an account or use the apps, and we do not knowingly collect their personal data. If we learn that someone under 13 has an account, we will close it and delete their data.
Aged 13 to 17: you may use SanoobFit only with the agreement of your parent or guardian. A parent or guardian who lets you use SanoobFit agrees to this Privacy Policy and to our Terms on your behalf. We use your date of birth to give members under 18 more cautious training and nutrition settings. Apart from that, your data is collected, used and kept in the same way as any other member's, as this policy describes.
Parents and guardians: to see, correct or delete your child's data, or to close their account, email [email protected]. We act on it in the same way as a member's own request (section 12).
17. Client photos and testimonials
If you give us before and after photos, written testimonials or video reviews, we use them publicly (on our website, apps, social media, adverts and blog) only with your explicit written consent (a signed form, an email or an in-app confirmation). You can withdraw it at any time by emailing [email protected]; we then remove your content from future use, though posts already published may remain in archives.
18. Security
All data travels encrypted (HTTPS). Passwords are stored in coded form. Access to member data inside SanoobFit is limited by role and permission, and staff views of member profiles are logged. No system is completely secure. If a breach affects your data, we will tell you and the authorities as the law requires.
19. Other websites
Our website and apps link to other websites and services. Their own privacy policies apply to them.
20. Changes to this policy
When we change this policy, we update the date and version at the top, and we tell members about important changes by email or in the app. Earlier versions are available on request.
21. Governing law
This policy is governed by the laws of the United Arab Emirates, as applied in the Emirate of Ajman, and the courts of Ajman have jurisdiction. If you live in India, the EU, the UK or anywhere else outside the UAE, the data protection and consumer rights your local law gives you still apply.
22. Contact us
Email: [email protected]
Phone (UAE): +971 56 321 6697 · +971 56 138 1575
Registered office: BC-893164, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
UAE Office: in5 Design District, D3 - Zaa'beel Second - Dubai Design District - Dubai