1. What we collect

• Account — your name, email address and phone number. If you sign in with Google we receive your name, email, profile picture and a Google account ID instead of a password.
• Learning and bookings — the courses you enrol in, your progress and results, and the sessions you book and with whom.
• Payments — handled by UPayments. Your card number never reaches our servers. We keep the amount, date, order number and status.
• Technical — IP address, device model, app version, and a push notification token so we can send class reminders.

We do not collect your location or contacts, and the app does not use your camera, photos or microphone unless you choose to upload something.

2. Why we use it

To run your account, deliver the courses and sessions you paid for, take payment and issue invoices, send booking confirmations and reminders, answer your support requests, prevent fraud and the sharing of paid content, and meet our tax and legal obligations.

We do not sell your data, and we do not use it for advertising.

3. Who sees it

• The instructor of a session you book — your name and that booking.
• UPayments, to take payment and process refunds.
• Our hosting, email and notification providers, some of them outside Kuwait, all contractually bound to protect it.
• Google, only if you sign in with Google. It confirms who you are and learns nothing about what you do here.
• Authorities, where the law requires it.

Nobody else, and never for their own marketing.

4. How long we keep it

For as long as your account is open. When you delete your account we remove your personal data — see Delete Your Account. Invoices are the exception: tax law in Kuwait requires us to keep them, in a restricted archive used for nothing else.

5. Your rights

You can view and correct your details in your dashboard, turn off notifications on your device, unsubscribe from non-essential email, ask for a copy of your data, and delete your account. Write to [email protected] and we reply within 30 days.

6. Security and children

Traffic is encrypted with HTTPS and passwords are stored hashed, never in plain text. Access to live data is limited to the staff who need it. If a breach affects your data we will tell you and the relevant authority without undue delay.

The service is not intended for children under 16. If a child has given us information, write to [email protected] and we will delete it.

7. Changes and contact

If we change this policy we update the date above, and tell you by email or in the app when the change affects you. Questions: [email protected] — , Kuwait.