Privacy Policy — Nafas
Last updated: August 19, 2026
Nafas ("we", "our", "the app") respects your privacy. This policy explains what
data we collect, how we use it, who we share it with, how long we keep it, and
how you can delete it.
1. Information we collect
- Account information: the name, phone number, and email address you provide
when you create an account.
- Location: with your permission, your device location while you use the app,
used to show nearby coaches, clubs, and classes.
- Photos and camera: images you choose to upload, such as a profile picture.
- Bookings and purchases: the services, sessions, and products you book or buy
in the app, including order and payment status.
- Health and fitness data: with your explicit permission, Nafas reads your
daily step count and physical activity data from Health Connect on Android
and from Apple Health on iOS. When Health Connect is not available or has no
step source, the app may use the device's activity recognition sensor to
count steps. See Section 3 for full details.
- Device information: device identifiers and push notification tokens, used to
operate the app and deliver notifications.
- Usage data: basic analytics about app performance and feature usage.
2. How we use your information
- To provide and operate the app's features, including bookings, orders, and
challenges.
- To personalize results based on your location.
- To send you notifications related to your account, bookings, and challenges.
- To provide customer support and to improve our services.
3. Health and fitness data
Access
Nafas requests read access to your step count and physical activity data. On
Android this is through Health Connect (the READ_STEPS permission) and the
activity recognition permission; on iOS this is through Apple HealthKit. We
only request this access after you grant permission, and the app is fully
usable if you decline.
Collection and storage
Your step count, together with a device identifier and the name of the data
source, is transmitted to and stored on our servers. This is required so that
your daily progress and your ranking in step-based challenges remain accurate
and stay in sync across sessions and devices.
Use
We use health and fitness data solely to:
- display your daily step count and your progress toward your fitness goal in
the app; and
- calculate your participation, progress, and ranking in step-based challenges
you choose to join.
Restrictions
We do not use health or fitness data for advertising, marketing, or any
targeting purpose. We do not sell, rent, or transfer health or fitness data to
third parties, data brokers, or information resellers. Health and fitness data
is never used for any purpose other than the features described above.
Your control
You can revoke health data access at any time from Health Connect on Android or
from the Health app on iOS. Once access is revoked, the app immediately stops
reading any new health data. You can request deletion of previously collected
health data at any time by deleting your account or by contacting us.
4. Sharing your information
We do not sell your personal data. We share data with service providers only as
needed to operate the app, specifically for hosting and backend infrastructure,
payment processing, and push notification delivery. These providers are bound
to use the data only to provide services to us. We may also disclose data where
required by law or to protect our legal rights.
Health and fitness data is not shared with any third party. It is stored only
on our own backend and is used only for the in-app features described in
Section 3.
5. Data retention and deletion
We retain personal data only for as long as your account is active and for as
long as needed to provide our services, unless a longer period is required by
law. Our retention periods are:
- Account information (name, phone number, email): retained while your account
is active; deleted within 30 days of account deletion.
- Health and fitness data (step counts, activity data): retained for up to 12
months so we can display your history and challenge results, after which it
is automatically deleted; all health data is deleted within 30 days of
account deletion.
- Location data: used only during your session to show nearby results; it is
not retained on our servers after the session ends.
- Bookings and purchase records: retained for up to 5 years where required by
applicable tax and accounting law, after which they are deleted or
anonymized.
- Device identifiers and push notification tokens: deleted within 30 days of
account deletion.
- Uploaded photos: retained while your account is active; deleted within 30
days of account deletion.
- Usage analytics: retained in aggregated, non-identifiable form for up to 24
months.
You can delete your account at any time from Settings -> Delete Account, which
permanently removes your account and its associated data, including all health
and fitness data. You may also email us at support@example.com to request
deletion, and we will complete the request within 30 days.
6. Security
We use industry-standard measures to protect your data, including encrypted
connections (HTTPS/TLS) between the app and our servers and access controls on
our backend systems. No method of transmission or storage is completely secure,
but we work to protect your data at all times.
7. Children's privacy
Nafas is not directed to children under 13, and we do not knowingly collect
their data. If we learn that we have collected data from a child under 13, we
will delete it promptly.
8. Your rights
You may request access to, correction of, or deletion of your personal data, and
you may withdraw a permission you previously granted (location, photos, health
data) at any time through your device settings. To exercise these rights,
contact us at the address below.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the
"Last updated" date at the top of this page. Continued use of the app after
changes means you accept the updated policy.
10. Contact us
If you have questions about this policy or your data, contact us at:
hello@nafas.app