Privacy Policy

• We do not track you. Koapath contains no analytics SDK, no advertising SDK and no third-party tracking SDK of any kind.
• We do not advertise to you. We collect no advertising identifier and show no ads.
• We do not sell your data, and we share nothing with third parties for tracking or advertising purposes.
• We do collect health information — such as your measurements, allergies, medications and medical conditions — because a coach cannot build a safe plan without it. You choose what to enter.
• You can delete your account from inside the app at any time.

Koapath is a marketplace that connects trainees with independent private fitness coaches and gives both sides the tools to manage plans, progress and communication. Koapath is the data controller for the personal data described in this policy and is established in the United Arab Emirates.

You can reach us at any time at team@koapath.com.

We collect only what the service needs in order to work. Everything below is entered by you, or generated by your use of the app.

This section describes verified properties of the apps, not intentions.

• No analytics SDK. Neither app includes a product-analytics or usage-analytics SDK.
• No crash-reporting or attribution SDK. Neither app includes Sentry, Firebase Analytics, Amplitude, Mixpanel, Segment, AppsFlyer, Branch, the Meta SDK, or any comparable tool.
• No advertising identifier. We do not collect the IDFA or any equivalent device advertising id, and we do not ask for App Tracking Transparency permission, because we have nothing to track you with.
• No advertising. Koapath shows no ads, and none of your data — least of all your health data — is used to target advertising anywhere.
• No tracking across other companies' apps or websites, and no sharing of your data with data brokers or with anyone else for tracking purposes.
• No sale of personal data.

• To run the service: coach discovery and matching, plans, progress tracking, chat and subscriptions.
• To control access, so that your coaching data reaches only you and the coach currently working with you.
• To verify coach certifications, which is what makes the marketplace trustworthy.
• To send notifications you have asked for.
• To take payment, process refunds and disputes, and pay coaches.
• To keep the service secure and to prevent fraud and abuse.
• To meet legal obligations and to enforce our Terms of Service.

Where the UAE Personal Data Protection Law, the GDPR or a comparable law applies, we rely on the following bases.

• Performance of a contract — to provide the coaching service you signed up for.
• Consent — for health and fitness information and for progress photos. You decide whether to provide these, and you can withdraw consent by removing the information or closing your account.
• Legitimate interests — security, fraud prevention and improving the product.
• Legal obligation — where a law requires us to keep or disclose something, most often for tax and accounting.

We use a small number of processors, each for a single, named purpose. None of them receives your data for tracking or advertising.

Your core account, coaching and health data is held in Koapath's own database rather than with a third party. Some processors operate outside your country; where a transfer requires a safeguard, we rely on an appropriate one such as standard contractual clauses.

• Your coach. While you have an active subscription with a coach, that coach can see the profile, plans, progress, transformation photos and chat needed to coach you. That access ends when the coaching relationship ends.
• The processors listed above, each only for its stated purpose.
• Authorities, where the law requires it or where it is needed to protect someone's rights or safety.

That is the complete list. We do not share your data with anyone else, and we do not share it for tracking or advertising in any circumstances.

Depending on where you live, you have the right to:

• Access your data and request a machine-readable export of it.
• Correct anything that is wrong.
• Delete your account and your data.
• Withdraw consent to optional processing at any time.
• Object to or restrict certain processing.
• Complain to your data protection regulator.

To exercise any of these, email us at team@koapath.com. We will verify that the request really comes from you, respond within the deadline the law sets, and tell you plainly if a financial record has to be kept.

You can close your account from inside the app, at Profile → Account → Delete account. Closing your account ends any active billing before the account is disabled.

Full instructions, including what to do if you cannot sign in, are on our account deletion page.

• Access is enforced by authenticated guards and object-level ownership checks, so one account cannot reach another's data.
• All traffic is encrypted in transit over HTTPS.
• Session tokens are held in your device's secure store, not in ordinary app storage.
• Payment secrets stay on our servers; only a publishable key ever reaches the app.

Koapath is not intended for anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will remove it.

If we change this policy in a way that materially affects you, we will tell you in the app before the change takes effect. The effective date at the top of this page always reflects the current version.

Questions, requests or complaints about privacy go to team@koapath.com, and a person will read them.