At AthloCode, privacy is not an afterthought — it is a core part of our platform design. We handle your health and personal data with the care it deserves. This Privacy Policy explains exactly what information we collect, why we collect it, and how it is protected.
Table of Contents
AthloCode ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use the AthloCode platform at athlocode.com and any associated services ("Platform"). This policy applies to all users of the Platform, including clients, coaches, and visitors. By using our Platform or creating an account, you consent to the data practices described in this Privacy Policy. If you have questions or concerns about this policy or our data practices, please contact us at support@athlocode.com.
We collect information in the following categories: Account & Profile Information • Full name, email address, phone number • Date of birth and gender • Profile photo (optional) • Language preference (English or Arabic) Health & Fitness Information (provided voluntarily for coaching purposes) • Body measurements (weight, height, body fat percentage) • Fitness goals and activity level • Dietary preferences, restrictions, and allergies • Health conditions and medical history (relevant to fitness) • Progress photos and InBody scan PDFs (uploaded by you) Payment Information • Billing name and address • Payment card details (processed and stored securely by our payment processor — we do not store full card numbers on our servers) • Transaction and subscription history Usage & Technical Data • IP address and device type • Browser type and operating system • Pages visited, time spent, and platform interactions • Log files and error reports Communications • Messages exchanged with your assigned coach via the platform • Support requests and email correspondence
We use the information we collect to: Core Service Delivery • Create and manage your AthloCode account • Assign a coach and deliver personalised meal and workout plans • Enable real-time communication between you and your coach • Track and display your fitness progress Subscription & Billing • Process membership payments and one-time purchases • Manage subscription renewals, upgrades, and cancellations • Issue invoices and billing notifications • Handle payment disputes and refund requests Platform Improvement • Monitor and improve platform performance and user experience • Detect and prevent fraud, abuse, and security threats • Conduct internal analytics to enhance our coaching services • Fix technical issues and bugs Communications • Send account notifications (signup, billing, plan updates) • Respond to support requests • Deliver important service updates and policy changes We do NOT use your data for unsolicited marketing, and we do NOT sell your personal information to any third party.
AthloCode handles health and fitness data with the highest level of care. The health information you provide — including body measurements, dietary restrictions, medical history, and progress photos — is: • Collected solely for the purpose of delivering personalised coaching services • Accessible only to you and your assigned coach (and, in aggregate/anonymised form, to platform administrators for service management purposes) • Never sold, shared, or disclosed to third parties for commercial purposes • Stored with encryption and access controls in compliance with our security standards You have the right to delete your health data at any time by contacting us at support@athlocode.com. Deletion requests will be processed within 30 days.
Your data is stored using Supabase, a secure cloud database platform hosted on AWS infrastructure with enterprise-grade security standards. Key security measures include: • Row-Level Security (RLS): Database-level access controls ensure users can only access their own data • Encryption at rest and in transit (TLS/SSL) • Secure authentication managed by Supabase Auth • Regular automated database backups • Access logging and audit trails Payment data is handled by our payment processor (Stripe or equivalent). Cardholder data is transmitted directly to the payment processor and is subject to PCI DSS compliance standards. AthloCode does not store, process, or transmit full card numbers on our own servers. Despite our robust security measures, no online platform can guarantee absolute security. We encourage you to use a strong, unique password and to report any suspicious activity immediately.
AthloCode uses cookies and similar technologies to improve your experience on our platform. Types of cookies we use: Essential Cookies Required for the platform to function correctly — including authentication sessions, language preferences, and security tokens. These cannot be disabled. Preference Cookies Store your settings such as language selection (English/Arabic) and display preferences. Analytics Cookies Help us understand how users interact with the platform so we can improve it. We use privacy-respecting analytics tools and do not track you across third-party websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using certain platform features.
We share your information only in the following limited circumstances: With Your Coach Your assigned coach can view your profile, health data, meal plan history, workout history, and messages to deliver coaching services. With Payment Processors Payment details are shared with our payment processor (e.g., Stripe) solely for the purpose of processing transactions. With Service Providers We may share limited data with trusted third-party service providers (e.g., cloud infrastructure, email delivery) who assist us in operating the platform. These providers are bound by strict data processing agreements. For Legal Compliance We may disclose information if required by applicable law, court order, or government authority, or if necessary to protect the rights, safety, or property of AthloCode or its users. Business Transfer In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change. We do NOT share your personal or health information with advertisers, data brokers, or any other commercial third parties.
You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you. Correction: Update or correct inaccurate information via your account settings or by contacting us. Deletion: Request deletion of your account and associated personal data. Health data deletion requests are processed within 30 days. Portability: Request your data in a machine-readable format where technically feasible. Objection: Object to the processing of your data for specific purposes. Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at support@athlocode.com. We will respond within 30 days. Identity verification may be required before we can process your request. Language Rights: You may communicate with us in either English or Arabic. Our platform fully supports both languages.
We retain your personal data for as long as your account is active or as needed to provide services. Specifically: • Active account data is retained for the duration of your membership plus 12 months after account closure. • Payment records and invoices are retained for 7 years for tax and legal compliance purposes. • Coach–client message history is retained for 24 months after the coaching relationship ends. • Progress photos and health documents are deleted upon request or automatically 12 months after account closure. • Anonymised, aggregated analytics data may be retained indefinitely. You may request early deletion of your data at any time, subject to our legal retention obligations.
AthloCode is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal data from a minor without appropriate parental consent, we will take steps to delete that information promptly. If you believe a minor has registered on our platform, please contact us at support@athlocode.com.
AthloCode operates primarily within the UAE and GCC region. However, our infrastructure providers (Supabase, Stripe, and others) may process data on servers located in other countries, including the United States and European Union. Where data is transferred internationally, we ensure that appropriate safeguards are in place — including data processing agreements and compliance with applicable cross-border data transfer regulations. By using the Platform, you consent to the international transfer of your data as described in this Policy.
The AthloCode platform may contain links to third-party websites or services (such as WhatsApp, social media platforms, or external resources). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit. AthloCode is not responsible for the privacy practices or content of external sites.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will: • Update the "Last Updated" date at the top of this page. • Notify you via email or a prominent notice on the platform. • Where required by law, seek your renewed consent. We encourage you to review this Policy periodically. Your continued use of the platform following any update constitutes acceptance of the revised Policy.
AthloCode is the data controller responsible for your personal information. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: Email: support@athlocode.com Contact Form: athlocode.com/contact WhatsApp: Available through the platform for active members We are committed to resolving all privacy concerns promptly and will respond to enquiries within 30 days.
Privacy Questions or Data Requests?
Contact our team at support@athlocode.com. For data deletion, access, or correction requests, include "Data Request" in your subject line. We respond within 30 days.