Privacy Policy
Last updated: October 1, 2025
Pilatopia Mobile Application
Effective Date: October 1, 2025
Version: 1.0
Almakan Almithali Trading Company ("Pilatopia," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
1. Information We Collect
1.1 Information You Provide
When you register and use Pilatopia, we collect:
- Account Information: Name, email address, phone number, date of birth
- Payment Information: Payment card details (processed securely by our payment service provider)
- Health Information: Any health-related information you voluntarily provide during registration
- Communication Data: Information from your inquiries or support requests
1.2 Information Collected Automatically
When you use our app, we automatically collect:
- Usage Data: Class bookings, attendance history, app features used
- Device Information: Device type, operating system, unique device identifiers
- Analytics Data: App performance data, crash reports, usage patterns
- Location Data: General location (city level) based on IP address
1.3 Information from Third Parties
We may receive information from:
- Payment Processors: Transaction confirmations and payment status
- Analytics Providers: Aggregated usage statistics
2. How We Use Your Information
We use your personal data to:
- Provide Services: Process bookings, manage your account, provide customer support
- Process Payments: Complete transactions and send purchase confirmations
- Communicate: Send booking confirmations, class reminders, and important service updates via push notifications
- Improve Services: Analyze usage patterns to enhance app features and user experience
- Ensure Safety: Verify identity, prevent fraud, and maintain security
- Legal Compliance: Comply with legal obligations and enforce our Terms & Conditions
3. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: To provide the services you've requested
- Consent: For certain types of processing where we've obtained your explicit consent
- Legitimate Interests: To improve our services and ensure platform security
- Legal Obligations: To comply with Saudi Arabian laws and regulations
4. Data Sharing and Disclosure
4.1 Service Providers
We share your data only with:
- Payment Service Providers: To process your payments securely
- Cloud Infrastructure Providers: To host our application and store data securely
- Analytics Providers: To understand app usage and improve services
4.2 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Investigate fraud or security issues
4.3 Business Transfers
If we undergo a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4.4 What We Don't Do
- We do not sell your personal data to third parties
- We do not share your data for third-party marketing purposes
- We do not send promotional emails or SMS messages
5. Data Storage and Security
5.1 Data Storage
- Your data is stored on secure cloud servers with industry-standard protection
- We implement appropriate technical and organizational measures to protect your data
- Data is encrypted both in transit and at rest
5.2 Security Measures
We use:
- Encryption for sensitive data transmission
- Secure access controls and authentication
- Regular security assessments and updates
- Limited access to personal data (need-to-know basis only)
5.3 Data Retention
- We retain your personal data only as long as necessary to provide services
- When you delete your account, we permanently delete all your personal data
- We do not retain any user data after account deletion
6. Your Rights Under PDPL
Under the Saudi Personal Data Protection Law, you have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Restriction: Request restriction of processing in certain circumstances
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to certain types of processing
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
7. Push Notifications
- We send push notifications for booking confirmations, class reminders, and important updates
- You can disable push notifications through your device settings at any time
- We do not send marketing or promotional notifications
8. Third-Party Services
8.1 Analytics
We use analytics services to understand app usage. These services collect anonymized data about:
- How often you use the app
- Which features you use
- App performance and crashes
8.2 Social Media
If you choose to connect through social media platforms:
- We may collect basic profile information
- Social media pixels help us understand the effectiveness of our advertising
- Each platform has its own privacy policy governing data use
9. Children's Privacy
- Our services are not intended for anyone under 17 years of age
- We do not knowingly collect data from children under 17
- If we discover we have collected data from someone under 17, we will delete it immediately
10. International Data Transfers
- Your data may be processed in countries other than Saudi Arabia
- We ensure appropriate safeguards are in place for international transfers
- All transfers comply with PDPL requirements
11. Your Choices
You can:
- Update Information: Edit your profile information in the app
- Delete Account: Permanently delete your account and all associated data
- Manage Notifications: Control push notifications through device settings
12. Changes to This Privacy Policy
- We may update this Privacy Policy from time to time
- We will notify you of significant changes through the app or email
- Continued use after changes constitutes acceptance of the updated policy
- Review date will be updated with each revision
13. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact:
Data Protection Officer
Almakan Almithali Trading Company
Email: [email protected]
Phone: +966 55 061 4150
Address: Riyadh, Saudi Arabia
14. Complaints
If you're not satisfied with our response to your privacy concerns, you have the right to file a complaint with:
Saudi Data & Artificial Intelligence Authority (SDAIA)
National Data Management Office
Website: https://ndmo.gov.sa
By using the Pilatopia app, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: October 1, 2025
Version: 1.0