PRIVACY POLICY

CoachOne

Last updated: 14. February 2026

This Privacy Policy explains how 1723 Ventures L.L.C, a limited liability company incorporated in the United Arab Emirates with its registered headquarters at Meydan Grandstand, 6th Floor, Meydan Street, Nad Al Sheba, Dubai, UAE (“CoachOne”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use the CoachOne mobile application, website, and related services (collectively, the “Platform”).

This Privacy Policy applies to all users of the Platform, including Trainers and Clients.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Role

CoachOne is a technology platform only.

This Privacy Policy governs data processed by CoachOne in its role as a platform operator.
Trainers and Clients may independently exchange data with each other outside CoachOne’s control. CoachOne is not responsible for such exchanges.

For the purposes of applicable data protection laws, including the GDPR where applicable, CoachOne acts as an independent data controller with respect to personal data processed through the Platform.

Trainers and Clients may also act as independent data controllers in relation to personal data they process outside the Platform or in the course of delivering training services. CoachOne does not act as a data processor on behalf of Trainers.


2. Data We Collect

We may collect the following categories of data:

2.1 Account and Profile Data

  • Name

  • Email address

  • Phone number

  • Profile photo

  • Trainer profile details (bio, pricing, availability)

2.2 Booking and Usage Data

  • Session bookings and schedules

  • Attendance and participation data

  • Platform usage data (features used, timestamps)

2.3 Payment-Related Data

  • Payment status

  • Transaction identifiers

  • Subscription status

Important:
CoachOne does not store or process full card numbers or sensitive payment credentials. All payment processing is handled by Stripe Connect.

2.4 Fitness and Activity Data

  • Self-declared training activity

  • Non-medical performance or consistency indicators

CoachOne does not collect medical records, diagnoses, or health data regulated as medical information.

2.5 Technical and Device Data

  • IP address

  • Device type

  • Operating system

  • App version

  • Log and error data

3. Data We Do Not Collect

We do not intentionally collect:

  • Medical records

  • Government ID numbers

  • Biometric identifiers

  • Raw payment card data

4. How We Use Data

We use personal data for the following purposes:

  • Creating and managing user accounts

  • Enabling bookings, scheduling, and reminders

  • Facilitating payments and receipts via Stripe

  • Operating, maintaining, and improving the Platform

  • Providing customer support

  • Ensuring security and preventing fraud

  • Analytics and performance monitoring

  • Developing aggregated, anonymized, and statistical insights

4.1 Analytics and Tracking Technologies
We use analytics and tracking technologies, including PostHog and Meta SDK, to understand how users interact with the Platform, improve functionality, measure performance, and enhance user experience.

These technologies may collect device information, usage data, IP address, and interaction events.

Where required under applicable law, including in the European Union, such tracking technologies are used based on consent or legitimate interests, as appropriate.

5. Aggregated and Anonymized Data

CoachOne may create and use aggregated, anonymized, or de-identified data derived from Platform usage.

This data:

  • Does not identify any individual

  • Cannot reasonably be re-identified

  • Is not considered personal data under GDPR

CoachOne may use such data for:

  • Analytics

  • Research

  • Market insights

  • Commercial and enterprise reporting

  • Product development

CoachOne does not sell identifiable personal data.

6. Legal Basis for Processing

Where required by law, CoachOne processes personal data based on one or more of the following legal bases:

  • Performance of a contract (providing the Platform)

  • Legitimate business interests

  • Legal obligations

  • User consent, where applicable

Some data is required to use the Platform. If you do not provide required data, certain features or access may not be available.

7. Data Sharing

We may share data only as follows:

7.1 Service Providers

With trusted third parties that help operate the Platform, including:

  • Payment processors (e.g. Stripe)

  • Cloud hosting providers

  • Analytics providers

These providers process data on our behalf under contractual safeguards.

7.2 Between Users

Trainers and Clients may share data with each other through the Platform. Such sharing is at the users’ own discretion and risk.

7.3 Legal Requirements

We may disclose data if required by law, regulation, or valid legal request by a competent authority. Disclosures are limited to what is legally required and, where possible, limited to specific users.

8. International Data Transfers

CoachOne operates internationally. Your data may be transferred to and processed in countries outside your country of residence, including the United Arab Emirates and the United States.

Where personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards in accordance with GDPR requirements, including the European Commission’s Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms, to ensure an adequate level of protection.

9. Data Retention

We retain personal data only for as long as necessary to:

  • Provide the Platform

  • Fulfill legal and regulatory obligations

  • Resolve disputes

  • Enforce agreements

Aggregated and anonymized data may be retained indefinitely.

10. User Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of personal data

  • Object to or restrict processing

  • Receive a copy of your data

Requests may be subject to legal limitations and verification.

Aggregated or anonymized data cannot be deleted as it does not identify individuals.

Additional Rights for EU Users (GDPR)
If you are located in the European Union, you have the following additional rights under the GDPR:

• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

We will respond to verified data subject requests within one (1) month, subject to extensions permitted under applicable law.

11. Security

We implement reasonable technical and organizational measures to protect personal data.

However, no system is completely secure. You acknowledge and accept that:

  • Data transmission over the internet is not risk-free

  • CoachOne cannot guarantee absolute security

12. Third-Party Services

The Platform may contain links to or integrations with third-party services. CoachOne is not responsible for the privacy practices of third parties.

13. Children’s Data

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be effective upon publication.

Continued use of the Platform constitutes acceptance of the updated policy.

15. Governing Law

This Privacy Policy is governed by DIFC Law. However, where users are located in the European Union, the processing of personal data is additionally subject to the General Data Protection Regulation (EU) 2016/679 (‘GDPR’). Nothing in this Policy limits any rights granted under the GDPR.”

16. Contact

For privacy-related requests or questions, contact:

CoachOne
1723 Ventures L.L.C
Meydan Grandstand, 6th Floor
Meydan Street, Nad Al Sheba
Dubai, UAE

support@coachone.org