SabaiFit Privacy Policy

1. Scope

This policy explains how SabaiFit handles personal data in its website and mobile apps. SabaiFit connects customers with independent fitness coaches. Coaches handle customer payments directly; SabaiFit does not collect or hold customer payment funds.

2. Data we collect

• Account data such as name, email, language, role, and profile photo
• Customer profile data such as fitness goals, age, weight, notes, and addresses
• Coach profile, qualifications, service areas, availability, rates, and payment instructions
• Bookings, coach-specific package balances, attendance, cancellations, and reviews
• Messages, invoices, receipts users choose to upload, community posts, and reports
• Workout logs, templates, progress photos, and sharing preferences
• Device and app data such as push tokens, diagnostic events, and security logs
• Location only when a user chooses a location feature, such as an address or one-time arrival estimate

Camera, photo-library, and microphone access is used only when you choose to capture or upload profile, workout, progress, receipt, or chat media.

3. How we use data

• Authenticate users and maintain accounts
• Match customers and coaches and operate booking, package, workout, and messaging features
• Send service notifications and provide support
• Protect users, moderate content, prevent abuse, and investigate incidents
• Maintain reliability, fix errors, understand feature use, and meet legal obligations

4. Sharing

We share relevant booking and profile information between a customer and their coach. Coaches see only the information needed to provide and schedule training. We also use service providers for hosting and authentication (Supabase), web hosting (Vercel), app notifications (Expo), email delivery, maps, diagnostics, and sign-in providers such as Apple and Google. They process data under their own terms and our service arrangements. We may disclose data when required by law or necessary to protect users.

5. Coach-direct payment information

A coach may provide a PromptPay QR code or other payment instructions through SabaiFit. Customers pay the coach directly. SabaiFit may retain package, invoice, and receipt status records so the parties can manage their training relationship, but SabaiFit does not receive or store card details and does not hold the payment funds.

6. Retention

We keep personal data while your account is active and as needed to provide the service. Content and optional fitness data are removed when you delete your account. Limited booking, package, invoice, safety, dispute, fraud-prevention, and legally required records may be retained in anonymized or pseudonymous form for as long as reasonably necessary for those purposes.

7. Your choices and rights

Depending on applicable law, including Thailand’s PDPA, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some rights have legal exceptions. You can edit profile information in the app and control optional sharing features.

Delete your account in the mobile app under Profile → Delete account, or use our web account deletion request.

8. Security and international processing

We use access controls, encryption in transit, restricted administrative access, and monitoring appropriate to the service. No system is completely secure. Some providers process data outside Thailand; where required, we use appropriate transfer safeguards.

9. Children

SabaiFit is not intended for anyone under 18, and we do not knowingly create accounts for children.

10. Contact

For privacy questions or requests, email privacy@sabaifit.com. If you cannot access your account, contact us from the email address associated with it so we can verify ownership.