Privacy Policy

This Privacy Policy governs the processing of personal data by Dr. Abdallah Gamal ("we", "us", "our"), a registered medical doctor and sports nutritionist, operating the online coaching platform and the "Gamal Fitness" mobile application (collectively, the "Services"). This policy applies to all visitors, subscribers, and clients accessing our website (abdallahgamal.com), mobile apps on Apple iOS and Android OS, and direct coaching communications via WhatsApp and in-app systems.

To deliver evidence-based, medically sound fitness and nutrition coaching, we collect the following categories of data:

We process your data strictly on the lawful bases of contract fulfillment, legitimate interest, compliance with legal obligations, and your explicit informed consent for health-related data. We use this data to:

• Design, adapt, and update your personalized workout routines and evidence-based nutrition plans.
• Conduct periodic coaching check-ins (e.g., 10-day reviews) and adjust macronutrients or exercise volume.
• Facilitate 1-on-1 coach communication via dedicated WhatsApp support channels and in-app chat.
• Process subscription orders, invoicing, account renewals, and payment validation.
• Enforce our Terms & Conditions and maintain platform cybersecurity, fraud prevention, and uptime.
• Deliver critical operational notifications, program updates, and billing confirmations.

In strict compliance with Apple App Store Review Guidelines (Guideline 5.1) and Google Play Developer Program Policies, we maintain the following operational disclosures:

Security of online transactions is of paramount importance. Our payment ecosystem incorporates rigorous protections:

• PCI-DSS Level 1 Certification: All credit/debit card transactions are processed through world-class, PCI-DSS Level 1 compliant financial service providers (such as Stripe, Paymob, and authorized regional payment processors).
• Apple Pay & Google Pay: We support device-level tokenized payment rails where biometric verification (Face ID / Touch ID / Fingerprint) protects every checkout transaction.
• Zero Sensitive Storage: Full primary account numbers (PAN), expiration dates, and card verification values (CVV) are handled exclusively via encrypted tokenization pipelines and are never stored on our servers.
• End-to-End Encryption: All checkout sessions and payment webhooks are transmitted over encrypted TLS 1.3 connections.

We never sell, rent, trade, or monetize your personal data. We disclose your data only to trusted service providers who assist us in operating our platform under binding data processing agreements:

We retain your personal data only for as long as necessary to fulfill the coaching services you have requested, comply with statutory financial and tax obligations, or resolve disputes. Technical and organizational measures include:

• Military-grade AES-256 encryption for data at rest across all database systems.
• Mandatory HTTPS / TLS 1.3 encryption for all data in transit between your browser/app and our servers.
• Strict role-based access control (RBAC) ensuring only Dr. Abdallah Gamal and verified coaching personnel can view progress records.
• Routine security reviews, automated server patching, and continuous vulnerability monitoring.

Depending on your jurisdiction (including the EU/EEA, United Kingdom, United States, Saudi Arabia, United Arab Emirates, and Egypt under Law No. 151 of 2020 on the Protection of Personal Data), you hold comprehensive rights over your personal data:

• Right of Access: Request a copy of all personal, fitness, and financial records we hold about you.
• Right to Rectification: Correct or update any inaccurate or incomplete details in your client profile.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your profile, check-in photos, and personal data.
• Right to Restrict Processing: Request limitation of data processing under certain statutory circumstances.
• Right to Data Portability: Receive your personal workout/diet records in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke consent at any time where processing is based on consent (such as health metrics or notifications).

To comply fully with Apple App Store Guideline 5.1.1(v) and Google Play account deletion mandates, we provide two straightforward, permanent methods to delete your account and associated data:

Our coaching programs, website, and mobile applications are strictly intended for individuals who are at least 18 years of age (or the minimum age of contractual legal majority in your country of residence). Individuals aged 16 to 17 may enroll solely with explicit, verifiable consent from a parent or legal guardian. We do not knowingly collect personal information from children under 16. If we discover that a minor under 16 has submitted personal data without authorization, we will immediately purge that information.

We may update this Privacy Policy periodically to reflect enhancements in our coaching services, software features, or regulatory compliance standards. When modifications occur, we will revise the 'Last Updated' date at the top of this document. For material updates affecting your rights or how health data is handled, we will provide prominent notice via in-app banners or email notification prior to the change taking effect.

If you have questions, feedback, or wish to exercise any of your privacy rights, our Data Protection team is ready to assist you: