سياسة الخصوصية

Information We Collect

When you use Dextra, we collect information to provide and improve our personalized fitness coaching services. This includes:

• Account Information: Your name, email address, and password when you create an account.
• Profile Data: Age, gender, height, weight, and fitness goals you provide to personalize your experience.
• Health & Medical Information: Pre-existing health conditions (e.g., diabetes, hypertension, cardiovascular issues), current or past injuries, medications you are taking, and physician clearance status. This information is collected during onboarding and check-ins to ensure your training and nutrition programs are safe and appropriate for your individual needs.
• Body Measurements: Body weight, body fat percentage, and other physical measurements you record to track your fitness progress over time.
• Progress Photos: Photos you voluntarily upload to visually track your physical progress. These images are stored securely and are only accessible to you and your assigned coach.
• Workout & Nutrition Data: Exercise logs, workout history, performance metrics, nutrition plans, meal logs, and progress data you record through the app.
• Check-in Data: Responses to periodic questionnaires sent by your coach, including feedback on training, recovery, nutrition adherence, and overall well-being.
• Device Information: Device type, operating system, app version, and unique device identifiers. We also collect crash reports and performance diagnostics through Firebase Crashlytics to improve app stability.
• Usage Data: How you interact with our app, including pages visited, features used, and session duration.
• Camera & Photos: When you choose to take or upload photos (e.g., progress photos or images shared with your coach), we access your device camera and/or photo library solely for that purpose. We never access your camera or photos without your explicit action.
• Microphone & Voice Messages: When you choose to send a voice message to your coach, we access your device microphone to record the audio. Voice recordings are uploaded securely and are only accessible to you and your coach. We never record audio in the background.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our personalized fitness coaching services.
• Enable your assigned coach to create and adjust training programs and nutrition plans tailored to your goals, health conditions, and progress.
• Personalize workout recommendations and meal plans based on your goals and health profile.
• Track your fitness progress over time through measurements, photos, and performance data.
• Facilitate communication between you and your coach through check-ins and notifications.
• Send you push notifications about workouts, check-ins, and coaching updates via Firebase Cloud Messaging (with your consent).
• Analyze usage patterns to enhance app performance and user experience.
• Process payments and manage your subscription.
• Detect, prevent, and address technical issues and security threats.

Data Sharing

We do not sell your personal information to third parties. We may share your data in the following limited circumstances:

• Your Fitness Coach: When you are assigned a coach through Dextra, your coach will have access to your profile data, health information, body measurements, progress photos, workout logs, nutrition data, and check-in responses. This access is necessary to provide you with personalized coaching services. Coaches are bound by confidentiality obligations and may only use your data for the purpose of delivering coaching services.
• Service Providers: We work with trusted third-party services that help us operate Dextra, including: cloud hosting (for data storage), payment processing (for subscriptions), Firebase (for push notifications and crash reporting), and analytics providers. These providers only access data necessary to perform their services and are contractually obligated to protect your information.
• Legal Requirements: We may disclose information when required by law, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• With Your Consent: We may share data when you explicitly authorize us to do so.

Third-Party Services We Use

Our app integrates the following third-party services. Each has its own privacy policy governing how they handle data:

• Firebase (Google): We use Firebase Analytics to understand how users interact with the app, Firebase Crashlytics to detect and fix crashes, Firebase Cloud Messaging (FCM) to deliver push notifications, and Firebase Remote Config to manage app features. Firebase may collect device identifiers and usage data. See Firebase Privacy Policy.
• Google Sign-In: If you choose to sign in with Google, we receive your name and email address from Google. See Google Privacy Policy.
• Sign in with Apple: If you choose to sign in with Apple, we receive your name and email address (or Apple's anonymized relay address) from Apple. See Apple Privacy Policy.
• Cloudflare: We use Cloudflare R2 for secure cloud storage of media files (voice messages, images) and Cloudflare Images for image delivery. See Cloudflare Privacy Policy.

بيانات منصات الصحة (Apple Health وHealth Connect)

إذا أذنت بذلك، يستطيع تطبيق Dextra قراءة بعض بيانات الصحة واللياقة من Apple Health على iPhone أو من Health Connect على Android، وحفظ التمارين التي تُنهيها في Dextra هناك. هذا الربط اختياري: يعمل Dextra من دونه، ويمكنك دائمًا تسجيل كل شيء يدويًا.

• القرار لك: لا يقرأ Dextra أي شيء قبل أن تضغط «ربط» داخل التطبيق. بعدها يعرض هاتفك شاشة الأذونات الخاصة بـ Apple Health أو Health Connect، وفيها تختار أنواع البيانات التي تسمح بها. ولا يستطيع Dextra أن يقرأ أو يسجّل إلا ما سمحت به هناك.
• البيانات التي نقرأها: عدد الخطوات؛ والنوم (المدة التي نمتَها فعلًا، لا المدة التي قضيتها في السرير)؛ والطاقة النشطة المحروقة؛ والمسافة؛ وعدد الطوابق التي صعدتها. على iPhone، المقصود بالمسافة هو ما قطعته مشيًا وجريًا. أما Health Connect فلا يفصل المسافة حسب نوع النشاط، لذلك نقرأ على Android المسافة كما هي مسجّلة فيه. وعلى iPhone وحده، يقرأ Dextra أيضًا التمارين المسجّلة في Apple Health، لغرض واحد فقط: معرفة الطاقة التي قاستها ساعتك خلال تمرين أدّيته في Dextra. ولا يقرأ Dextra أي تمارين على Android.
• البيانات التي نسجّلها: التمارين التي تُنهيها في Dextra، وتُحفظ كجلسات تمرين تتضمّن نوع التمرين ووقت بدايته ومدته. لا يسجّل Dextra المسافة، ولا يسجّل السعرات الحرارية أبدًا، ولا يسجّل أي بيانات صحية أخرى.
• ما يصل إلى خوادمنا: مجاميع يومية لكل نوع تسمح به، لا قراءات تفصيلية: حتى 30 يومًا إلى الوراء عند الربط أول مرة، ثم كل يوم جديد. وعن كل تمرين تؤدّيه في Dextra، يصلنا أيضًا رقم واحد للطاقة إذا قاسه هاتفك أو ساعتك، ونحتفظ بقائمة أنواع البيانات التي سمحت بها. وتنتقل هذه البيانات كلها عبر اتصال مشفّر إلى خوادم Dextra الخاصة.
• كيف نستخدمها: لنعرض لك نشاطك ونومك يومًا بيوم داخل Dextra مع تطوّرهما عبر الوقت، ولنعرض الطاقة المُقاسة في تمارينك على Dextra. وإن كان لك مدرّب مخصَّص في Dextra، فبإمكانه الاطلاع على هذه الأرقام ليتابع تقدّمك. لا نبيع أبدًا البيانات القادمة من Apple Health أو Health Connect، ولا نستخدمها للإعلانات، ولا نشاركها مع أي طرف ثالث.
• سحب الإذن وحذف البيانات: يمكنك سحب الإذن في أي وقت: على Android من Health Connect ضمن «أذونات التطبيقات»، وعلى iPhone من «الإعدادات» ثم «الخصوصية والأمن» ثم «الصحة». عندها يتوقف Dextra عن قراءة أي بيانات جديدة. أما البيانات التي وصلت إلى Dextra من قبل فتبقى مرتبطة بحسابك إلى أن تُحذف. ولحذفها، احذف حسابك من ملفك الشخصي داخل التطبيق، أو راسلنا على support@dextra.tn. ويتمّ الحذف وفق قواعد الاحتفاظ بالبيانات الواردة في هذه السياسة.
• الأمان: تُشفَّر البيانات القادمة من Apple Health وHealth Connect أثناء انتقالها بين التطبيق وخوادم Dextra.

أمان البيانات

نطبّق تدابير أمنية بمعايير الصناعة لحماية بياناتك الشخصية، منها تشفير البيانات أثناء انتقالها (TLS/SSL)، ومراجعات أمنية دورية، وضوابط للوصول. أمّا معلومات الملف الصحي والتقييم التي تشاركها معنا عند التسجيل وفي المتابعات الدورية، فتحظى إضافة إلى ذلك بتشفير إضافي على مستوى الحقل عند تخزينها. تُعامَل البيانات الصحية والطبية بعناية خاصة، ويقتصر الوصول إليها على الموظفين المخوَّلين فقط. ولأنّ لا طريقة نقل أو تخزين آمنة بنسبة 100%، فإننا نسعى لاستخدام وسائل معقولة تجاريًا لحماية بياناتك.

Data Retention

We retain your personal data for as long as your account is active and as needed to provide you with our services. If you request account deletion, we will permanently delete your personal data, including health information, progress photos, and workout data, within 30 days of your request. Some data may be retained longer where required by law (e.g., billing records for tax compliance).

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, including all health and medical information.
• Export your data in a portable format.
• Opt out of marketing communications and push notifications at any time.
• Withdraw consent for data processing where consent is the legal basis.
• Request that your data no longer be shared with your coach.

To exercise any of these rights, please contact us at support@dextra.tn.

Children's Privacy

Dextra is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at support@dextra.tn.

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies help us remember your preferences, understand how you use our platform, and improve our services. The mobile app does not use cookies but may use similar local storage technologies for session management. For more detailed information, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes affecting how we handle health data, we will provide additional notice through the app or via email.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

• Email: support@dextra.tn
• Company: Dextra Fitness SARL, Tunis, Tunisia (online service)