Privacy policy

Who we are

WarriorFit is operated by Warrior Fitness LLC, Doha, Qatar ("we"). This policy explains what personal data the WarriorFit website and app collect, why, who processes it for us, and the choices you have. It is written to meet the Qatar Personal Data Privacy Protection Law (PDPPL). Questions and requests: hello@warriorfit.com.

What we collect and why

Account and contact details: name, email, phone number, date of birth, gender, profile photo, language and time zone. Used to run your membership, sign you in, and contact you about your bookings.

Bookings and purchases: classes booked, attendance, credits, packs, orders and payment status. Used to deliver the service, for receipts, and for the studio's accounting.

Payment details are entered on the pages of our payment provider, Fatora. We never see or store your card number; we receive only the result of the payment and a transaction reference.

Health and fitness data, only if you turn it on: heart rate during a session from Apple Watch, a Bluetooth heart-rate monitor, Apple Health or Health Connect; daily steps, workouts and calories from Apple Health or Health Connect; the weight, measurements, goals and food photos you choose to log in Pulse; the results you log in sessions (weights, reps, times). Used to show your zones, calories, progress, personal bests and achievements to you and, where you choose to share them, to your coach and class. Health data is never used for advertising and is never sold.

Photos: a profile picture, and photos you send to the assistant for a food estimate. Food photos are kept privately in your account and are only readable by you.

Device and usage data: the device token for push notifications, the pages you use and errors that occur. Used to send the notifications you asked for and to keep the app working.

Messages you send us on WhatsApp, email or in the app, so we can answer them.

Apple Health, Health Connect and your watch

Reading from Apple Health or Health Connect happens only after you grant permission in the app, and you can revoke it at any time in the Health app (iOS) or Health Connect (Android). We read heart rate, workouts, steps and active energy. With your permission we write the sessions you complete with us as workouts.

Data obtained from Apple Health is used only to provide the features you see in the app. It is not shared with third parties for advertising, data brokerage or any purpose unrelated to the service, and it is not used to make decisions about your eligibility for anything.

Assistant and AI features

Our in-app assistant, food estimates, the stylised avatar and the end-of-session summary use AI models from OpenAI, Google and Anthropic. Only the text or photo you send, and the parts of your profile needed for the answer, are sent to the model for processing. These providers process the data on our behalf and do not use it to train their models under our agreements.

Who processes data for us

Supabase (database and authentication, hosted in Frankfurt, EU); Vercel (web hosting); Fatora (payments); Meta (WhatsApp messages and, if you choose to share a card, Instagram); Resend (email); Firebase Cloud Messaging and Apple Push Notification service (push notifications); OpenAI, Google and Anthropic (AI features above). Each processes data only on our instructions.

We do not sell personal data. We share it with authorities only when the law requires it.

Sharing you control

Your results appear on the class screen and leaderboards only when you choose to share them. Friends see what your visibility setting allows (public, friends or private). The session card you share to Instagram or any other app leaves our service when you share it.

Your choices and rights

In your profile you can change your details, your notification channels, your visibility, and disconnect Apple Health or Health Connect. Reply STOP on WhatsApp to withdraw marketing consent.

You can ask for a copy of your data, a correction, or deletion of your account by writing to hello@warriorfit.com. We answer within 30 days.

Retention

Accounts are anonymised 30 days after a deletion request. Heart-rate and health readings are deleted with the account. Financial records are kept for 10 years as Qatari law requires. Server logs are kept for 30 days.

Children

Members under 18 (for example in Teens Warrior) join through a parent or guardian, who holds the account and gives the consents on their behalf.

Changes

When this policy changes materially we show the new version in the app and update the date above.