Privacy Policy — Defy Egypt

This policy covers the Defy Egypt mobile application, displayed as Defy on your device, and its connected membership and booking services. Defy Egypt operates the service in Egypt. The Android package and iOS bundle identifier are com.idea2app.defyegypt.

For privacy questions or requests, contact info@idea2app.tech.

1. Information we handle

• Member accounts: your name, phone number, email address, account identifier, sign-in credentials, selected branch, and, if provided, date of birth, profile photo and referral code. These support registration, login, password recovery and your member profile.
• Bookings and memberships: the services or packages you choose, branch, appointment date and time, number of attendees, attendance or cancellation status, session balances, purchases, promotional codes, loyalty points, referrals and reward redemptions. These let us arrange appointments and manage your benefits and history.
• Session measurements: where recorded by Defy staff during a session, your booking history may contain weight and body measurements. These are sensitive, health-related information used to support the service and show your session history. They are not used for advertising. The app displays these records; it does not import them from Apple Health or Health Connect.
• Payment records: invoice and transaction references, amounts, selected services or packages, payment status and related booking or membership references. Online card entry takes place on the payment provider’s hosted page, rather than in a Defy account form.
• Notifications and technical information: a Firebase Cloud Messaging installation token, notification subscriptions, delivery-related information and in-app notification read status. Network and hosting services may also process IP addresses, access times, app/browser information and error logs for operation, troubleshooting and security.
• Support: the contact details and contents of messages you send when asking us for help or exercising your privacy choices.

2. Photos, permissions and device storage

If you choose a profile picture, we process the image you select or provide. Camera or photo access may be requested where the device requires it for that action. Choosing a picture does not give us unrestricted access to your photo library.

Notifications require your device’s permission. You can decline them and continue using the app, or change the setting later in your device settings. Firebase messaging tokens are used for Defy notifications, including booking updates, account information and offers; they are not advertising identifiers.

The current app does not request GPS or background location access. Your selected branch is a booking preference. Opening an external map service is subject to that service’s own privacy practices.

The app stores authentication/session information and preferences such as language locally on your device. This keeps you signed in and preserves your choices. Signing out clears the active app session.

3. How information is used and shared

We use information to provide your account and booked services, manage memberships and rewards, process payments, send service communications, respond to requests and protect the service. Optional offers may also be sent through the communication features you use; contact us to ask to stop promotional messages.

• Defy staff: authorized personnel handle the member, branch, booking and session information needed for their work.
• Hosting and technical support: providers supporting the app and its PocketBase backend process the records needed to operate, maintain and secure the service.
• Google Firebase and platform push services: installation tokens and notification messages pass through these providers to reach your device. See Firebase’s privacy information.
• Fawaterak: when you choose online payment, the payment flow shares your name, email, phone number, invoice amount and service/package description with this payment processor. The provider handles the payment information you enter on its hosted page and has its own privacy and retention practices.

We may disclose relevant records when legally required, when addressing fraud or a dispute, or when necessary to protect people and the service. If the business is transferred, affected information may be transferred with it; we will provide notice of a change in the responsible operator or privacy practices where required.

4. Retention, security and international processing

Account, booking, membership and session records are kept while needed to run your account and provide the associated services. You can request deletion at any time using the options below. For support correspondence and retained technical/usage records, the previously published retention limit is up to 24 months after the relevant support case ends or record is created, unless a longer period is needed for a legal obligation, security investigation or dispute.

Some payment, accounting or dispute records may need to remain after account deletion for the applicable obligation. Retained records are limited to that purpose. Residual copies in routine backups, where used, may remain until those backups expire.

We use access controls and secure connections to help protect information, but no online service can guarantee complete security. Defy operates in Egypt; hosting, messaging and payment providers may process information in other countries. Required safeguards apply to those transfers.

6. Age, external services and policy changes

Defy Egypt is not directed at people under 16, consistent with our previous policy. If you believe a child under 16 has provided personal information, contact us so we can investigate and take appropriate removal steps.

External payment, map and communication services operate under their own policies. We will publish policy changes here with a revised date and provide an additional notice for material changes when required.

Privacy contact: info@idea2app.tech · Defy Egypt, Egypt.