Train With Gaff Privacy Policy

Last updated: 13 November 2026

Who we are

Train With Gaff ("we", "us") is run by TRAIN WITH GAFF - FZCO, a free zone company registered with the Dubai Integrated Economic Zones Authority (IFZA), United Arab Emirates (licence number 35526), at Unit 35526-001, IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.

The app gives members self-guided training programmes, workout plans, nutrition education and related resources, on a monthly or yearly subscription. It's available internationally.

Train With Gaff – FZCO is the data controller: it's responsible for the personal information used to run the app. The business is owner-managed. Abdullah Ghaffar, the founder, handles privacy questions, requests about your data and complaints himself.

Wherever you live, including the UK and EU, you can contact us to see, correct or delete your information, withdraw consent, or use any other right you have under data protection law.

• Data controller: Train With Gaff – FZCO
• Location: Dubai Silicon Oasis, Dubai, United Arab Emirates
• Responsible contact: Abdullah Ghaffar
• Email: info@trainwithgaff.com

We reply to valid requests within the time the law sets. Where a country's data protection law requires a local representative or another arrangement, we'll put it in place.

The short version

• We collect what we need to build your plan and track your progress, and nothing else.
• Some of it is health information. We only use it with your consent, and only to run your plan.
• Gaff can see your account so he can help you. Nobody else can.
• Your progress photos are private. Only you and Gaff can open them.
• We don't sell your data, and we don't show you ads.
• You can download everything we hold, or delete your account, from Profile in the app at any time.

What we collect

Account details

• Your name, email address and password. Your password is stored encrypted; we can't read it.

Your plan details (from the questions when you sign up)

• Date of birth, height, starting weight and goal weight, goal and target date
• How active your job and your week are
• Food: allergies, foods you don't eat, cooking time, budget and meals per day
• Training: days per week, which days, where you train, experience, equipment, and any injuries you tell us about
• The habits you choose to track

Health information (see "Health information" below)

• Your answers to the 5 eating screening questions
• Your weight entries and progress photos
• Your allergies and any injuries you tell us about
• Steps from Apple Health or Health Connect, but only if you connect them

What you log in the app

• Workouts: exercises, sets, weights, reps and how each session felt
• Meals you pick and tick off, favourite recipes and shopping list ticks
• Habits ticked, weigh-ins and progress photos

Messages you send us

• Feedback, ratings, recipe suggestions and, if you cancel, why

Subscription

• Whether you're on a trial, subscribed, cancelled or expired, which plan, and the renewal date. We get this from Apple or Google through RevenueCat. We never see your card or bank details.

How you use the app

• Simple usage events such as "onboarding finished", "workout started" or "coaching card tapped", with the time. These are stored in our own database, not sent to an advertising or analytics company.

Notifications

• If you allow notifications, the app sets reminders on your phone (rest timer, trial ending, coming back after a week off).

We don't collect your location, contacts or anything else on your phone.

Health information

Your weight, progress photos, screening answers, allergies, injuries and steps are health information. In the UK and EU this is "special category data", which needs extra protection.

• Our legal basis is your explicit consent. You give it by ticking the consent box on the "Quick check" step when you sign up. The app records when you ticked it.
• We use it only to build and adjust your plan, to keep the app safe for you, and so Gaff can support you.
• The screening questions never block you from using the app. If your answers suggest your relationship with food might need support, we show you a message and offer a free call with Gaff. Gaff is a fitness coach, not a doctor or a therapist.
• You can withdraw consent at any time by deleting your account. Because the app can't build your plan without this information, withdrawing means closing your account.

Why we use your data, and our legal basis

We don't make decisions about you with legal or similarly serious effects by automated means. The app works out your calories and adjusts them weekly from your weigh-ins, but it never goes below 1,400 kcal a day, and you can always change your details.

Who can see your data

Gaff. He uses an admin dashboard to see members' details, progress, screening answers and progress photos, so he can support you and offer coaching when it might help. Only accounts with the admin role can open it. Only Gaff has admin access.

Companies that run parts of the app for us (processors). They can only use your data to provide their service to us:

We don't sell your data or share it with advertisers.

We may share data if the law requires it, or to protect someone's safety.

International transfers

Some of these companies are in the USA or store data outside your country. Where data leaves the UK or EEA, we rely on the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the UK–US Data Bridge / EU–US Data Privacy Framework, as each company offers.

How long we keep it

• While you have an account: everything above, so your history and progress stay with you.
• If your subscription ends: we keep your account and history for 24 months so you can pick up where you left off, then delete it.
• When you delete your account: your profile, plan, logs and progress photos are deleted straight away. Feedback you sent is kept without your name. Copies in our backups are deleted as those backups are replaced.
• Payment and subscription records: Apple and Google keep payment records under their own policies. We keep our billing and subscription records for the periods the law requires, including UAE corporate tax and accounting rules. In practice that's at least 7 years after the end of the tax period they relate to, and longer if we need them to meet a legal obligation, settle a dispute or answer a regulator.
• Health information, progress records and other non-financial data follow the periods above, not this one.
• When we no longer need something, we delete it securely or make it anonymous, unless the law says we must keep it.

Your rights

You have the right to:

• get a copy of your data. In the app: Profile → Export my data.
• delete your account and your data. In the app: Profile → Delete account.
• correct your details. Most can be changed in the app; email us for anything else.
• object to us using your data for legitimate interests, or ask us to restrict it.
• move your data to another service (the export is a standard JSON file).
• withdraw consent for health information (see above).

Email info@trainwithgaff.com for anything you can't do in the app. We reply within one month.

If you're in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). In the EU, you can complain to your local data protection authority. In the UAE, USA, Canada or Australia, you have similar rights under local law (UAE PDPL, US state privacy laws such as the CCPA, PIPEDA, Australian Privacy Act). Contact us and we'll help.

Keeping your data safe

• Data is encrypted in transit and at rest.
• Each member can only reach their own data. This is enforced by the database itself (row-level security), not only by the app.
• Progress photos are stored privately and opened with links that expire.
• Admin access is limited to accounts with the admin role.

Children

The app is for adults. You must be 18 or over to use it. We don't knowingly collect data from anyone under 18. If you think a child has signed up, email us and we'll delete the account.

Changes to this policy

If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top shows the latest version.

Contact

TRAIN WITH GAFF - FZCO
Unit 35526-001, IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: info@trainwithgaff.com