Privacy Policy

1.1KAMOVIN ("KAMOVIN", "we"), operated by Karim El Ayoubi, its founder, as an individual, until a company is formed to run it, is the controller of the personal data described here. If KAMOVIN is transferred to a company formed to run it, that company becomes the controller under this Policy, and we will tell you before the transfer.

1.2For data a coach records about the athletes they train outside KAMOVIN (athletes the coach adds themselves), the coach is also responsible for having a lawful reason to record it and must tell those athletes. When you buy from an academy, its owner receives the data described in section 4 about that purchase and its sessions, and is responsible for how they use it outside KAMOVIN.

1.3We process personal data in accordance with Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data and, where they apply to you, other data protection laws such as the EU and UK General Data Protection Regulation (GDPR).

2.1Account and identity:

1. (a)email address, password (stored only as a secure one-way hash by our authentication provider), confirmed mobile phone number, account type, and your name,
2. (b)if you sign in with Google or Apple: the name and email address they share with us, and an identifier for your account with them,
3. (c)for a parent: their name, country and city,
4. (d)for a child under 13: the child's details filled in by their parent, the username if the parent gives the child a login, and the parent's email.

2.2Athlete profile and training:

1. (a)date of birth, sex, country and city, where you would like to train (a point you place on the map, your device's location when you choose to share it, or the centre of your town if you choose that, for a child under 13, placed by their parent) and how far you will travel to a coach if you say so, sport, positions, dominant side, years played, level, goals and the qualities or skills you want to work on, profile photo, team practice and game schedule, equipment, and your Player CV,
2. (b)body and health-related information you choose to give: weight, height, injury history and pain notes,
3. (c)training data: sessions, bookings, workouts and what you actually did, test and assessment results, daily readiness check-ins (sleep, soreness, energy, stress, pain), coach notes and comments.

2.3Coach profile:

1. (a)name, photo, sports, specialty, bio, certificates you upload (photos or PDFs), prices, packages, availability and blocked dates, the places you train (up to three, each with its name and the spot you confirmed on the map), whether you travel to athletes, how far and where, your plan, ratings and reviews, and the athletes you add yourself with the details you enter for them.

2.4Academy:

1. (a)its name, kind, city, description and logo, its owner's name and the phone number they give, its packages and prices, its team of coaches (with the specialty each covers for it and whether the owner checks their workouts), the places it runs, and what it sold and to which coach it gave each package's sessions.

2.5Messages and activity:

1. (a)chat messages, offers, help requests and reports between you and other users,
2. (b)support and change requests you send to KAMOVIN, reports and disputes,
3. (c)purchases, bookings, payouts, credits and their status (KAMOVIN does not store full card numbers, when payments are connected, card details are handled by the payment provider).

2.6Device and usage:

1. (a)a push notification token for your phone, the app version, device model, operating system and language,
2. (b)usage analytics: which screens you open and which features you use (for example "booked a session", "logged a workout"), linked to your account number, see section 6,
3. (c)which coach and academy pages you open, and when, linked to your account number, see section 6,
4. (d)technical logs needed to keep the Service secure and working (for example sign-in times and errors), and crash reports when the app or website fails, see section 6,

2.7Location: if you let KAMOVIN use your phone's or browser's location, showing how far coaches are from you and moving the map to you happen on your device only, and your location is not sent to us for that. When you choose to use it to set where you would like to train, that point is saved to your profile as described above. When you choose to use it to fill in your city, it is sent to us once to find the nearest town and is not stored, only the town is.

2.8We do not collect your contacts, microphone or camera data. If you turn on calendar sync, your sessions are written to a calendar on your own phone, KAMOVIN does not read your calendar.

1. (a)To provide the Service you asked for, your account, matching athletes and coaches, booking, planning and recording training, messaging, notifications and support (performance of our contract with you).
2. (b)To process purchases, pay coaches, keep financial records and handle refunds and disputes (contract, and our legal obligations, for example tax and accounting).
3. (c)To keep KAMOVIN safe, confirming one account per person, protecting minors, reviewing coaches and certificates, preventing fraud and fee avoidance, handling reports, and securing the Service (our legitimate interests in a safe marketplace, and legal obligations).
4. (d)To understand how the app is used and improve it (usage analytics, our legitimate interest in improving the Service, under the safeguards in section 6).
5. (e)Health-related information (injuries, pain, readiness, body measurements) is used only so the coaches you train with can train you safely, and only with your explicit consent, which you give by entering it. You can delete it from your profile at any time.
6. (f)For a child under 13: the consent of their parent or legal guardian, given when they set up the child's account.

3.1We do not sell your personal data, and we do not use it for advertising or share it with advertisers.

4.1Other users, as part of how KAMOVIN works:

1. (a)Coaches see on a map how many athletes are in each city. If you are 18 or over, approved coaches see where you would like to train only roughly (rounded to about 1 km) and how far it is from them. Athletes aged 13 to 17 are never shown on a map: approved coaches see only a distance range from their training place (for example "2 to 5 km"). Children under 13 are never shown to coaches who don't train them. The exact place you chose is seen only by you and the coaches you train with.
2. (b)Approved coaches can see the public part of the profile of athletes aged 13 and over, age, sex, sport, level, positions, years played, dominant side, the coaching you are looking for and whether you already have a coach on KAMOVIN for S&C or for Skills development (never who that coach is), coaches on a paid plan also see your name, photo, city and the clubs in your Player CV, and may send a first message. Once you write to a coach, that coach sees your name, photo, city and Player CV too, whatever their plan. You can block or report any coach.
3. (c)Your phone number, exact date of birth, weight, height, injuries, practice schedule, test results and training data are seen only by coaches you train with (through a purchase or because they added you), and by you.
4. (d)If you ask to be told when a coach starts coaching near you, we keep the specialty you chose with your sport and city (or the place you would like to train) until you leave the waitlist or a coach is found. Coaches do not see it, KAMOVIN sees only how many people are waiting in each city.
5. (e)Contact details are hidden in chat until you have a purchase together, phone numbers, emails and social links are masked before then, and always in a child's conversations. This does not apply between an academy's owner and a coach on its team, who can share contact details in their messages.
6. (f)A coach's public profile (name, photo, sports, specialty, bio, prices, reviews, the places they train and whether they travel to athletes) is visible to signed-in users once the coach is approved, a short intro card can be shared by link. Each training place has its own page listing the approved coaches who train there, with details about the place (such as its logo, address and opening hours) that KAMOVIN may add. A place's owner can ask us to correct or remove its details or logo at any time.
7. (g)How far you will travel to a coach is seen only by you and the coaches you train with, Find a coach uses it on your device to show the coaches you can reach.
8. (h)Each booked session records where it happens. If a coach comes to your home, the address you give is seen only by that coach, for that session (and by the parent of a child under 13). Calendar links show the place's name, never a home address.
9. (i)An academy's page (its name, logo, description, the places it runs and its approved coaches) is visible to signed-in users once KAMOVIN approves it. A coach who joins an academy's team is shown on its page and on their own profile as part of it.
10. (j)When you buy from an academy, its owner sees you like a coach you train with: your full profile (including the exact place you chose to train, your date of birth and injuries) and your daily check-ins, as well as what you bought and for which specialty, the note you wrote to the academy, and your sessions (with which coach, when and whether they took place). The coaches it gives your sessions to see you like any coach you train with, but never the price or your note. If the owner checks a coach's workouts, the owner also sees the workouts that coach plans for you.
11. (k)You and an academy can message each other in KAMOVIN: its owner and the coaches on its team, and its owner and anyone who bought from it (the parent, for a child under 13), while a package runs and for 90 days after. Those messages are seen by the two of you, and by KAMOVIN's team as described in this policy. An academy's owner sees a parent as the parent of the child who bought, not by the parent's own name. When a child's account is deleted, the parent's messages with each academy that child bought from are deleted too.
12. (l)A parent of a child under 13 can see the child's profile, sessions, tests, workouts and coach conversations until the child turns 13, and after that only the sessions already booked, until the teenager adds their own email address. A coach a parent writes to about their child sees the child's profile, and the parent's messages are marked as the parent's.
13. (m)AI assistant for coaches: a coach may choose to connect their own AI assistant (such as Claude or ChatGPT) to their KAMOVIN account, under their own account with that AI company and its own privacy terms. It then works only with that coach's exercises, templates and programs, sees the first name, last name, age, sex, sport, positions and level of the coach's athletes aged 13 and over, how the coach trains them (online or in person, and whether on an online plan) and whether they see the workouts, and, for the sessions that coach planned for them, what was planned next to what was actually done (the sets, repetitions and weights logged by the athlete or recorded by the coach, without any written notes), so it can help the coach judge their level and progress. It plans sessions, sends programs, changes or removes coming sessions and changes an exercise in sessions the coach names (its values, description and a video link) when the coach asks. The athlete is told a session changed and, where they see the workout, sees what was changed. It never receives health answers, injuries, daily check-ins, test results, the notes written in a workout log, sessions with other coaches, conversations, contact details, payment records or anything about children under 13, apart from what a coach writes themselves in a program or template. It is available only to coaches whose plan includes it. The coach can remove it at any time on their AI assistant page, and Sign out everywhere or resetting a forgotten password also removes it.

4.2KAMOVIN's team: authorised staff can access accounts, activity and conversations when needed to run the Service, review coaches, handle reports, disputes, payments and support requests, and keep users safe. Administrator access requires two-step sign-in, and sensitive administrator actions are logged.

4.3Service providers who process data for us, under contract and only on our instructions:

1. (a)Supabase, database, authentication, file storage and server functions,
2. (b)PostHog (EU hosting), usage analytics,
3. (c)Sentry (EU hosting), crash and error reports,
4. (d)Expo, Apple and Google, delivering push notifications,
5. (e)Google and Apple, sign-in, if you choose it, and the website's sign-in and sign-up pages load Google's button from Google, which receives your device's IP address and any cookies Google has in your browser,
6. (f)Apple Maps and Google Maps, showing maps in the app, they receive the area of the map you are looking at and your device's IP address, not your account,
7. (g)Google Places, when a coach searches for a training place by name, the words typed are sent to Google through our server (never with the coach's name or account), we keep only Google's identifier of the place picked,
8. (h)our SMS and email providers, sending confirmation codes and account emails,
9. (i)when payments are connected, our payment provider, processing payments.

4.4We may also disclose data where the law requires it, to respond to valid requests from authorities, to protect the safety of a person (especially a child), or to establish or defend legal claims, and to a buyer or successor if KAMOVIN's business is transferred, under the same protections.

5.1KAMOVIN is designed with young athletes in mind and protects their data more strictly:

1. (a)Children under 13 cannot sign up by themselves. Their account exists only with a parent's or legal guardian's consent, given through the parent's own account.
2. (b)Children under 13 cannot be found or contacted by coaches they do not train, cannot buy anything themselves, and can only send text messages to their own coaches. Only their parent contacts a new coach for them. Their contact details, and their parent's, are always hidden in chat.
3. (c)A photo of a child under 13 is published only after the parent approves it.
4. (d)We never collect usage analytics about children under 13, or about a 13-year-old who has not yet added their own email address.
5. (e)A parent can see, correct and delete their child's data, reset the password and delete the child's account at any time.

5.2If you believe a child under 13 is using KAMOVIN without a parent's consent, contact us and we will delete the account.

6.1To learn which features help athletes and coaches and where people get stuck, KAMOVIN records which screens are opened and which actions are taken in the app (for example "message sent", "session booked"). We use PostHog, hosted in the European Union.

1. (a)Events are linked to your account number and to general labels: your account type, sport, level, age band (teen or adult) and, for coaches, specialty, plan and approval status.
2. (b)We never send your name, email, phone number, messages, what you type, or any health information to analytics.
3. (c)IP addresses are discarded and not stored. There is no screen recording and no automatic recording of taps.
4. (d)No analytics at all are collected for children under 13, for a 13-year-old who has not yet added their own email, or for KAMOVIN's administrators.
5. (e)Analytics data is kept for up to 12 months.

6.2Page visits: when you open a coach's or an academy's page, KAMOVIN records in its own database that you opened it, when, and how many times, so we can measure how often a visit leads to a message or a purchase. It is never recorded for children under 13, for a 13-year-old who has not yet added their own email, for coaches, academy owners or administrators, or for anyone who objected to analytics, and it is kept for up to 12 months.

6.3Business statistics: KAMOVIN's team builds statistics from the data described in this policy (for example how many athletes book a second time, by age band, sex, sport, level or city, or how often each coach's and academy's visits lead to a purchase) to run and improve the Service. They are prepared on KAMOVIN's own server, seen only by KAMOVIN's team, and never include athletes' or parents' names, contact details, exact dates of birth, messages, training content or health answers. Children under 13 appear only in totals, never with their city or exact age.

6.4Analytics are part of how KAMOVIN runs and improves the Service. If you object to them, contact us through Contact support and we will stop collecting analytics and page visits for your account.

6.5Crash reports: when the app or website fails, a report is sent to Sentry, hosted in the European Union, so we can fix the problem. It contains technical details only, what failed, on which screen, the app version, device model and operating system, and at most your account number. Emails, phone numbers and other identifiers are removed before it is sent, it never contains your messages, what you type or health information. Reports about children under 13, a 13-year-old who has not yet added their own email, or KAMOVIN's administrators carry no account number. IP addresses are not stored, and reports are kept for up to 90 days.

7.1Your data is stored on servers of our service providers, which may be located outside Lebanon (for example in the European Union or the United States). When we transfer data abroad, we use providers that commit by contract to protect it to a standard at least equivalent to this policy and to the laws that apply to you.

1. (a)Account, profile, training data and messages: for as long as your account exists. When you delete your account, they are deleted, normally within 30 days, and from backups within a further 90 days.
2. (b)Payment, payout and purchase records: kept after deletion, for as long as tax, accounting and anti-fraud laws require (typically up to 10 years), and seen only by KAMOVIN.
3. (c)Records that you accepted these Terms and this Privacy Policy: kept as proof for as long as needed to establish or defend legal claims.
4. (d)Reports, disputes and safety decisions: for as long as needed to protect users and handle claims.
5. (e)Usage analytics and page visits: up to 12 months.
6. (f)Photos and videos sent in chat before chat became text only remain part of that conversation until it is deleted with the account.

9.1We use encryption in transit, access rules enforced by the database itself (so each person can only reach the data they are allowed to), private file storage with short-lived links, encryption of your sign-in and personal data stored on your phone, two-step sign-in for administrators, logging of sensitive administrator actions, and regular security testing. No system is completely secure, if a breach affects your data in a way that puts you at risk, we will inform you and the competent authorities as the law requires.

10.1Depending on the law that applies to you, you have the right to:

1. (a)access the personal data we hold about you and receive a copy,
2. (b)correct inaccurate data (most of it directly in the app, name, phone and email through a change request),
3. (c)delete your data, you can delete your account from Settings, unless the Terms say what must be settled first, and a suspended account through Contact support,
4. (d)object to processing based on our legitimate interests, including usage analytics,
5. (e)withdraw consent (for example to health information, by deleting it) without affecting processing done before,
6. (f)restrict processing, and receive your data in a portable format,
7. (g)complain to the competent data protection authority.

10.2To exercise a right, use Contact support in the app or email [email protected]. We may need to confirm your identity first, and we reply within 30 days. Parents can exercise these rights for their child under 13.

11.1If we make an important change, we will ask you to accept the updated policy in the app before you continue using it. The version and its effective date are shown at the top of this page.

12.1You may contact us at any time from the app (Settings → Contact support) or by email at [email protected].

12.2Data controller: KAMOVIN, operated by Karim El Ayoubi, its founder, as an individual, until a company is formed to run it.