Legal

Privacy Policy

What we collect, why we collect it, who sees it, and how to get it deleted.

Last updated 27 September 2026. The controller of this data is Ali Abdallah, sole proprietor, El Shorouk City, Cairo, Egypt. Contact: support@coachlyeg.com.

1. What we collect

When you create an account

Your name, email address and mobile number.
Your password, stored only as a cryptographic hash. We never see it.
Your language and, if you set one, your profile photo.

If you are a coach

Your public storefront: biography, specialties, city, years of experience, cover photo, certificates.
Identity documents — images of a national ID or passport — used solely to verify that you are who you say you are.

When you use the service

Bookings: which package, which coach, the price, the dates, and the status of each step.
Your answers to the questions a coach asks before planning, which may include information about injuries, health limitations, schedule and equipment.
Messages between you and your coach, including voice messages.
Reviews you write.
Payment records: amount, date, status and a reference from the payment provider. We never receive or store your card number.
Technical data needed to run the app: device push token, app version, and server logs of requests and errors.

2. Why we use it

To run the service: create your account, show storefronts, take bookings, deliver messages, send notifications.
To take payment and pay coaches.
To verify that coaches are real people with the qualifications they claim.
To answer support requests and to resolve disputes about what was agreed and delivered.
To keep the platform safe: detect abuse, fraud and misuse.
To meet legal, tax and accounting obligations.

We do not sell your personal data. We do not use it for advertising.

3. Health information

What you tell a coach about injuries or health limitations is sensitive. It is visible to the coach you told, to you, and — only where it is necessary to resolve a dispute or a safety concern you or the coach raised — to Coachly support. It is not used for anything else and it is never shared with anyone outside the platform.

4. Who we share it with

Only with the services needed to run Coachly, and only what each one needs:

Payment provider: A licensed Egyptian payment service provider, to process card payments and refunds.
Hosting and database: Supabase, on servers in Frankfurt, Germany.
Application servers: Render, which runs the Coachly API.
Push notifications: Expo and the Google or Apple notification services, which deliver notifications to your device.
Email delivery: Our email provider, for account confirmation and support replies.

We also share data where the law requires it, or to establish or defend a legal claim.

Where your data is stored. Coachly's database is hosted in Frankfurt, Germany, so your data is transferred outside Egypt. It is protected by the security measures described below and by contract with our providers.

5. How long we keep it

Account data: While your account is open, and deleted when you close it, except where kept for the reasons below.
Identity documents: Deleted 30 days after your application is accepted or rejected, and immediately if you close your account. The decision itself is kept without the images.
Messages: Kept as the record of a coaching relationship. Voice recordings you sent are deleted when you close your account; the message itself remains, marked as removed.
Bookings and payments: Kept for as long as tax and accounting law requires, even after an account is closed.
Server logs: A short period, for security and debugging.

6. Your rights

Under Egypt's Personal Data Protection Law (Law No. 151 of 2020) you may:

ask what data we hold about you and get a copy;
correct data that is wrong or incomplete;
ask us to delete your data, subject to records we must keep by law;
object to or restrict certain uses of it;
withdraw consent where our use of the data rests on consent.

To use any of these, write to support@coachlyeg.com. We reply within two business days and complete verified requests within 30 days. To delete your account, see Delete your account.

7. Security

All traffic between the app and our servers is encrypted in transit.
Passwords are stored only as hashes.
Identity documents are stored in a private bucket that no client application can read. Access by our staff is limited to a specific application, requires a stated reason, and is recorded.
Access to the production database is restricted to the people who operate the service.
No system is perfectly secure. If a breach affects your data, we will tell you and the competent authority as the law requires.

8. Children

Coachly is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, write to support@coachlyeg.com and we will remove it.

9. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last changed.

10. Contact

Controller: Ali Abdallah, sole proprietor
Address: El Shorouk City, Cairo, Egypt
Email: support@coachlyeg.com
Phone: +20 101 592 9862