Privacy Policy

1. Introduction

Welcome to Yalla MooV. We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws in the Middle East and North Africa region, including the laws of UAE, Saudi Arabia, Qatar, Bahrain, Kuwait, and Oman.

By using the Yalla MooV app, you explicitly consent to the collection and processing of your personal data as described in this policy.

2. Who We Are

Yalla MooV is a sports platform operated by a company registered in the UAE. We are the data controller of your personal data.

• Email: privacy@yallamoov.com
• Address: Dubai, UAE

3. Data We Collect

We collect the following types of information with your explicit consent:

• Account Information: Name, email, phone number when you create an account
• Profile Photo: A photo of your face for check-in verification at venues
• Booking Data: Activities booked, dates, attendance history
• Payment Information: Processed by Stripe - we do not store your card details
• Location Data: When permitted, to show nearby activities
• Device Information: Device type, OS version, device ID for app improvement

4. Legal Basis for Processing

We process your data based on:

• Your explicit consent: Provided when you create your account
• Contract performance: To provide booking and subscription services
• Legitimate interest: To improve our services and prevent fraud
• Legal obligation: To comply with applicable laws

5. How We Use Your Data

We use your information to:

• Create and manage your account
• Process and confirm bookings
• Verify your identity at venue check-in
• Send notifications about your bookings (with your consent)
• Improve our services and user experience
• Prevent fraud and unauthorized use
• Comply with legal requirements

6. Data Sharing

We share your data only with:

• Partner Venues: Your name and photo for check-in verification (in your country only)
• Stripe: For secure payment processing (US-based, PCI DSS compliant)
• Service Providers: Hosting and analytics (with data protection agreements)
• Legal Authorities: When required by law

We do not sell your personal data to any third parties.

7. International Data Transfers

Your data may be transferred and processed in countries outside your country of residence, including:

• United States (Stripe for payment processing)
• European Union (hosting services)

We ensure any data transfer is conducted under appropriate data protection agreements and in compliance with local laws in your country.

8. Profile Photo

Your profile photo is required for identity verification at venue check-in.

• Photos are reviewed by our team for clarity
• Partner venues and instructors can view your photo for verification purposes only
• We do not use automated facial recognition technology
• You can delete your photo at any time from your account settings

9. Data Security

We use advanced security measures to protect your data:

• Encryption in transit and at rest (TLS/AES-256)
• Restricted access policies for employees
• 24/7 security monitoring
• Regular security audits

10. Data Breach Notification

In the event of a data breach affecting your personal information:

• For users in Saudi Arabia: You will be notified within 72 hours
• For users in UAE: You will be notified as soon as practicable
• For all other users: You will be notified within 7 days

11. Your Rights

Under applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Withdraw Consent: Withdraw your consent at any time
• Object: Object to certain processing of your data

To exercise any of these rights, contact us at: privacy@yallamoov.com
We will respond to your request within 30 days.

12. Data Retention

We retain your data for the following periods:

• Account Data: Duration of your active account + 30 days after deletion
• Booking History: 3 years for legal and accounting purposes
• Payment Data: Retained by Stripe per their policy
• Security Logs: 1 year

13. Children

Our services are not directed to persons under 18 years of age. We do not knowingly collect data from children. If we become aware of data collected from a child, we will delete it immediately.

14. Policy Updates

We may update this policy from time to time. We will notify you of any material changes via:

• In-app notification
• Email (for significant changes)

Continued use of the service after updates constitutes acceptance of the revised policy.

15. Governing Law and Jurisdiction

This policy is governed by the following laws based on your country of residence:

• UAE: Federal Personal Data Protection Law
• Saudi Arabia: Personal Data Protection Law
• Qatar: Personal Data Privacy Protection Law
• Bahrain: Personal Data Protection Law
• Egypt: Personal Data Protection Law
• Other Countries: UAE Law

Disputes shall be resolved in the courts of your country of residence, or the courts of Dubai for users in countries without comprehensive data protection laws.

16. Contact Us

For any privacy inquiries or complaints:

• Email: privacy@yallamoov.com
• Address: Dubai, UAE
• Response Time: Within 30 days