Privacy Policy

1. General Provisions

• 1.1 This Privacy Policy (the Policy) defines how personal data are processed by Graff Ventures FZC LLC, a company registered in the United Arab Emirates, Business Centre, Sharjah Publishing City Free Zone, Sharjah (the Company), when providing online fitness and wellness services under the brand HeeyaFit (the Services) through the website https://heeyafit.com/ and mobile application https://heeyafit.app/ (the Website).
• 1.2 The Company may process the personal data of users, customers, candidates, and service providers (the User, you). If you provide information about other natural persons, you take full responsibility to inform them of this Policy before doing so.
• 1.3 The Services are intended for users aged 14 years and above. If you are under 14, you must provide written consent from a parent or legal guardian to use the Services.
• 1.4 Personal data are processed in accordance with applicable UAE data protection laws, the EU General Data Protection Regulation (Regulation (EU) 2016/679), and other relevant legislation ensuring lawful and transparent data handling.
• 1.5 By using the Website or Services, you confirm that you have read, understood, and agreed to this Policy.

2. Principles of Personal Data Processing

• 2.1 The Company ensures that your personal data are:
  • 2.1.1 processed lawfully, fairly, and transparently;
  • 2.1.2 collected for specific, legitimate purposes and not processed further in a manner incompatible with those purposes;
  • 2.1.3 adequate and relevant to the purposes of processing;
  • 2.1.4 accurate and kept up to date;
  • 2.1.5 stored no longer than necessary for the purposes stated;
  • 2.1.6 processed securely using appropriate technical and organizational measures.
• 2.2 The Company is responsible for compliance with these principles and must be able to demonstrate such compliance.
• 2.3 All processors and partners handling your data on behalf of the Company are required to follow the same standards.

3. Lawful Basis for Processing

• 3.1 The Company processes your data only when one or more of the following lawful bases apply:
  • 3.1.1 you have given consent for one or more specific purposes;
  • 3.1.2 processing is necessary for performing a contract or taking steps prior to entering into one;
  • 3.1.3 processing is required by legal obligation;
  • 3.1.4 processing is necessary for legitimate business interests pursued by the Company;
  • 3.1.5 processing is required for tasks carried out in the public interest or under official authority.
• 3.2 The Company may use automated tools (including profiling) to personalize Services, recommend programs, and optimize your experience based on your consent and preferences.

4. Personal Data Collection

• 4.1 The Company collects your data when you:
  • 4.1.1 register or log in on the Website or mobile app;
  • 4.1.2 subscribe or purchase a membership;
  • 4.1.3 use HeeyaFit programs and features;
  • 4.1.4 communicate with our support team;
  • 4.1.5 participate in promotions or challenges;
  • 4.1.6 interact with us on social media;
  • 4.1.7 apply for employment or collaboration opportunities.
• 4.2 The Company may also receive information about you from trusted third parties to provide and improve the Services.

5. Purposes and Scope of Processing

• 5.1 We process your data for the following purposes:
  • 5.1.1 Account creation and access — name, email, password, date of birth, country, profile photo (optional), device information, and login data.
    Legal basis: legitimate interest.
    Retention: while your account is active and up to 7 days after deletion request.
  • 5.1.2 Workout and nutrition history — exercise and meal tracking, preferences, and in-app activity.
    Legal basis: legitimate interest.
  • 5.1.3 Personalized recommendations — height, weight, goals, activity level, dietary preferences, and health-related choices.
    Legal basis: consent and legitimate interest.
  • 5.1.4 Membership management and billing — name, email, billing details, payment history, and invoices.
    Legal basis: contract performance, legal obligation.
  • 5.1.5 Marketing and communication — newsletters, campaign engagement, preferences, and consent tracking.
    Legal basis: consent and legitimate interest. You may withdraw consent or unsubscribe anytime.
  • 5.1.6 Analytics and service improvement — aggregated usage data to enhance product quality and user experience.
    Legal basis: legitimate interest.
  • 5.1.7 Recruitment and collaboration — job application and partnership data.
    Legal basis: consent and legitimate interest.
• 5.2 Data are processed only for as long as necessary to fulfill the specified purpose or as required by law.

6. Data Sharing

• 6.1 Your data may be shared with:
  • 6.1.1 payment processors and banking partners;
  • 6.1.2 email and marketing automation providers;
  • 6.1.3 analytics and cloud hosting services;
  • 6.1.4 customer support and communication tools;
  • 6.1.5 professional advisors (legal, accounting, compliance).
• 6.2 The Company ensures that any third party processing your data provides adequate protection and signs data processing agreements where applicable.
• 6.3 Data may be transferred internationally only when adequate safeguards exist, such as standard contractual clauses or recognized adequacy decisions.

7. Information Security

7.1 The Company employs strong technical and organizational security measures, including encryption, restricted access, and monitoring, to protect your personal data. While we take all reasonable precautions, no system can be guaranteed completely secure, and you should take appropriate steps to protect your information when using the Website and Services.

8. Cookies

• 8.1 We use cookies to improve your browsing experience, remember your preferences, and analyze traffic. Cookies fall into these categories:
  • 8.1.1 Essential cookies — required for core functionality and login access.
  • 8.1.2 Functional cookies — remember preferences such as language or layout.
  • 8.1.3 Analytical cookies — help us understand usage and improve performance.
  • 8.1.4 Marketing cookies — personalize offers and measure campaign effectiveness.
• 8.2 You can manage cookies in your browser settings or through our cookie consent banner. For more details, see: allaboutcookies.org.
• 8.3 Deleting or blocking cookies may affect your ability to use some features of the Website.

9. Your Rights

• 9.1 You have the right to:
  • 9.1.1 access and obtain a copy of your data;
  • 9.1.2 request correction or deletion of inaccurate or outdated data;
  • 9.1.3 restrict or object to certain processing activities;
  • 9.1.4 withdraw consent where processing is based on consent;
  • 9.1.5 request data portability where applicable.
• 9.2 Requests can be submitted by email to support@heeyafit.com. We will respond within 30 days.
• 9.3 You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. Final Provisions

• 10.1 This Policy is governed by the laws of the United Arab Emirates.
• 10.2 The Company may update this Policy periodically. Updates take effect upon publication on the Website. Continued use of the Services constitutes acceptance of the updated Policy.
• 10.3 For questions about this Policy, contact us at support@heeyafit.com.