Privacy Policy — Mudrib App

1. Who We Are

"Mudrib" (مدرب) is an AI-powered fitness application that creates personalized workout plans. The app is owned and operated by Saiel Almutairi ("we," "us," "the App").

2. Data We Collect

a. Data You Provide:

• Gender (male/female) — to personalize workout plans
• Weight and height — to calculate appropriate exercises and track progress
• Fitness goal (muscle building, weight loss, etc.) — to design your training program
• Preferred training days per week — to schedule your plan
• Injuries and health conditions — to avoid harmful exercises and protect your safety
• Workout data (weights, sets, days completed) — to track progress and adapt your plan
• Body measurements (optional) — to track body changes

b. Data Collected Automatically:

• Device identifier — for account management
• Device type and OS version — for compatibility
• App usage data (screens visited, session duration) — to improve the app
• Crash and error reports — to fix technical issues

c. Data We Do NOT Collect:

• Your real name or government-issued identity
• Precise GPS location
• Contacts, photos, or files
• Financial data or credit card information (payments are handled by Apple/Google)
• Biometric data (fingerprint, face ID)

3. How We Use Your Data

• Generating personalized workout plans: Your physical data and goals are sent to an AI service (Anthropic Claude API) to generate a customized training plan
• Adapting your plan: We use your workout history to adjust your plan weekly
• Tracking progress: Displaying workout statistics, weight changes, and measurements
• Notifications: Workout reminders and coach tips (you can disable these)
• Improving the app: Analyzing anonymized usage patterns to enhance the service

4. Legal Basis for Processing

Under the Saudi PDPL, we process your data based on:

• Your consent: Provided when you create your account and accept this policy
• Contract performance: Delivering the subscription service you signed up for
• Legitimate interest: Improving the app and ensuring its security

5. Third-Party Data Sharing

We share your data only with the following parties, only to the extent necessary:

Important: We do not sell your personal data. We do not share your data with advertisers. We do not use your data for third-party marketing purposes.

6. International Data Transfers

Some service providers listed above are located outside the Kingdom of Saudi Arabia. In accordance with the PDPL and its Implementing Regulations, we ensure that:

• Transfers are necessary to provide the requested service
• Transferred data is protected at a level no less than that required by the PDPL
• All data is encrypted in transit and at rest
• Data sent to the AI service does not include personally identifiable information

7. Your Rights

Under the Saudi PDPL, you have the following rights:

• Right of access: Know what personal data we hold about you
• Right to rectification: Update or correct your data at any time
• Right to erasure: Request deletion of your personal data
• Right to destruction: Request destruction of data when collection purpose is fulfilled
• Right to withdraw consent: Stop processing of your data at any time
• Right to object: Object to any processing of your data
• Right to lodge a complaint: File a complaint with the Saudi Data and AI Authority (SDAIA)

To exercise any of your rights, contact us at: [email protected] — we will respond within 30 days.

8. Data Security

• Data encrypted in transit using TLS/SSL
• Data encrypted at rest in the database
• Secure authentication for account access
• Access restricted to authorized systems only
• Passwords are never stored in plain text
• Regular security audits and reviews

9. Sensitive Data

We consider health data (injuries and health conditions) as sensitive personal data under the PDPL. We process this data with additional care:

• Collected only with your explicit consent during registration
• Used solely to avoid harmful exercises
• Not shared with any third party except the AI service for plan design
• You can delete it at any time from the app settings

10. Data Retention

• Account and workout data: Retained for the duration of your subscription
• After account deletion: Data deleted within 90 days
• Analytics data: Retained in anonymized form for up to 24 months
• You may request immediate deletion at any time via settings or email

11. Children

Mudrib is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that data from a minor has been collected, we will delete it immediately.

12. Marketing Communications

We may send notifications related to your workouts and progress. We do not send third-party advertisements. You can disable all notifications from your device settings or app settings at any time.

13. Subscriptions and Payments

All payments are processed through Apple App Store or Google Play Store. We do not collect, store, or access your credit card or banking information. To manage or cancel your subscription, please use your device's store settings.

14. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you via an in-app notification at least 30 days before the changes take effect. Your continued use of the app