Who we are
Kinetic Test W.L.L, based in Qatar ("we", "us"), operates WeyFit and the WeyFit marketplace. This policy explains how we handle information when you visit our website, contact us, or use our fitness-management services.
Your fitness also determines how it uses records for its own membership and training services. For those records, WeyFit provides the platform on the fitness’s behalf. Contact your fitness about its practices; contact us about the platform or for help directing a privacy request.
Information we handle
- Identity and contact: name, email, mobile number, nationality, gender, profile photo, member number, Qatar ID information, and date of birth where provided.
- Membership and activity: fitness relationships, memberships, packages, bookings, attendance, trainer assignments, workout plans, competitions, and service history.
- Payment records: amounts, dates, payment methods, payment status, and invoices recorded by your fitness. These records are distinct from payment-card credentials.
- Health and fitness records: measurements, progress information, medical reports, and attachments that you or your fitness provide through relevant features. These can contain sensitive information.
- Account and technical information: authentication records, session cookies, security and audit events, and technical information processed by our hosting services, such as network and request information.
- Communications: enquiries, support requests, and messages associated with the services.
Information comes from you, your participating fitness and authorised staff, your use of the service, and external services you choose to connect. The information involved depends on the features you use.
Why we use information
We use information to provide accounts and membership services, recognise members across their linked fitness, manage bookings and training, maintain payment and service records, deliver requested communications, respond to enquiries, and protect the service against misuse. A change to your universal member profile may be reflected at other fitness where you are linked.
We process information with consent where required, or where necessary for a lawful service or other legitimate purpose permitted by applicable law. Optional health information and external connections require particular care and appropriate permission. Contact us if you believe information has been supplied without authority.
Optional WHOOP connection
WHOOP is available for beta testing when enabled in the marketplace. Connecting is optional and requires your consent and authorisation through WHOOP.
The connection requests your WHOOP profile, recovery, heart-rate variability, resting heart rate, physiological cycles and strain, sleep, and workouts. The permissions shown by WHOOP identify the access requested. Your WHOOP account identifier is used to link the connection to your WeyFit member account.
We display your own fitness insights in your marketplace. WHOOP information is not made available through WeyFit to a fitness, trainer, or another member. We do not use it for advertising or sell it. Hosting providers process it only as needed to deliver the connection.
Connection tokens are encrypted in storage and sent over protected connections. During beta testing, you can authorize WHOOP from a selected member preview. An essential Secure HttpOnly browser cookie protects that preview’s WHOOP access for up to 30 days, and is cleared on logout. Clearing cookies or using another browser requires authorizing the same WHOOP account again. We store connection and consent timing, a pseudonymous account identifier, and synchronisation metadata. Health readings are retrieved directly from WHOOP for display, without a permanent health-data copy. Signed update notifications prompt the open portal to refresh; notification identifiers expire after one day and are removed when the next notification is processed.
You can disconnect in Wearables. We request revocation from WHOOP and remove the saved local connection. If WHOOP cannot confirm revocation, the portal explains how to remove the connection (which may still appear as Kinetic) through WHOOP’s connected-app controls. You can also contact us to withdraw permission or request deletion. If the portal displays Coming Soon, existing connections and update notifications may remain active. Contact us or use WHOOP’s connected-app controls to revoke an existing connection.
WeyFit never asks for your WHOOP password. WHOOP insights are fitness information, not a medical diagnosis. See WHOOP’s privacy policy for its handling of information.
Cookies and international processing
The service uses cookies and similar storage for sign-in, session security, and relevant preferences. Blocking essential cookies may prevent sign-in or other features from working.
Our service providers may process information outside Qatar. The locations depend on the provider and service involved; we do not promise Qatar-only storage. Contact us for information about providers, international processing, or the protections applicable to your records.
Retention and security
Records are retained while needed to provide the service and meet applicable legal, accounting, security, or dispute-resolution requirements. Retention depends on the type of record and your fitness’s obligations; there is no single retention period for all information. Contact us to ask about a particular record or request deletion.
We use account authentication, access controls, protected connections, and other safeguards appropriate to the service. No system can guarantee absolute security. If you suspect unauthorised access, contact us promptly. Where a record must be retained after a deletion request, we will explain the reason. Copies in backups may remain until those backups expire or are replaced.
Your choices and rights
Subject to applicable law, you may ask to access or receive a copy of your personal information, correct inaccuracies, withdraw consent, object to unnecessary processing, or request deletion when there is no lawful reason to retain it. Withdrawing consent does not undo lawful processing already carried out and may affect features that depend on that consent.
Email alanabi20@hotmail.com with your request and enough information to identify your account. We may need to verify your identity or coordinate with your fitness. Do not send passwords, verification codes, or a full Qatar ID document in your initial email. We will explain the next steps and any applicable limits.
If you remain concerned, you may contact Qatar’s competent personal-data protection authority. Information is available from the National Cyber Security Agency.
Children and guardian requests
Where a fitness provides services to a child, the fitness and the relevant guardian must ensure appropriate authority and consent for the information supplied. A parent or guardian may contact us about a child’s records. The proposed WHOOP connection must not be used to bypass age or consent requirements.
Changes to this policy
We may update this policy as the service or applicable requirements change. The date at the top identifies the latest revision. Where required, we will provide additional notice or obtain consent before materially different processing begins.