← Back to Sanaa home

Health and wellness privacy notice

Privacy Policy

Effective date: 24 August 2026

Sanaa Fitness & Wellness Studio (“Sanaa”, “we”, “our”) collects and uses personal data to operate the Sanaa website, member portal, mobile experience, and backend services. Sanaa is a fitness, nutrition, wellness, activity-tracking, and menstrual-health app. It is a general wellness service, not a medical device or emergency service, and does not provide diagnosis, treatment, or medical advice.

What data we collect

We process the following categories of personal data:

• Account and identity details such as display name, email address, phone number, sign-in information, and role information.
• Profile and health information such as weight, height, date of birth, activity level, nutrition goals, dietary preferences, allergies, and health-related flags.
• Wellness and activity data such as workout history, gym logs, GPS activity, steps, wellness check-ins, nutrition logs, meal photos, and AI-generated recommendations.
• Health-platform data, if you enable it: Steps, Active calories burned, and Walking/Running distance from Android Health Connect, or equivalent activity data from Apple HealthKit. We do not read clinical records, medications, contacts, or unrelated health categories.
• Menstrual-health data such as period start/end dates and informational cycle estimates that you choose to record.
• Support, chat, and enquiry data submitted through the site, portal, or app.
• Payment and transaction data used to process memberships, events, or premium entitlements.
• Limited technical and authentication data needed to keep the service secure and functioning.

How we use your data

We use personal data to create and manage accounts, provide coaching and wellness services, synchronize permitted activity data to show steps, distance, and active-energy summaries, generate personalized plans, process bookings and payments, respond to enquiries, and maintain platform security.

Lawful basis

We rely on contract, legitimate interests, legal obligations, and consent where relevant. Health-platform access is optional and is used only after you authorize it. You can deny or revoke access in device settings. We do not sell health data, use it for advertising, or use it for credit, insurance, employment, or other eligibility decisions. The current platform uses essential authentication and session support cookies only.

Sharing and transfers

We may share personal data with service providers and processors that help us operate the platform, including hosting, identity, storage, payment, AI, communications, and support providers. We do not sell personal or health data. The current system uses Azure services and may process data in South Africa North. If you are in the European Economic Area or the UK, your data may be transferred to South Africa and we will apply appropriate safeguards and vendor terms.

Cookies and browser storage

The website and member portal use essential browser storage and authentication-related cookies to support sign-in and session continuity. We do not currently use analytics, advertising, or marketing cookies. If we add these in the future, we will obtain consent before loading them.

Health and wellness safeguards

Personalized fitness, nutrition, cycle, and wellness content is general information based on the data you provide. AI-generated content can be incomplete or wrong. Stop exercising if you feel unwell and consult a qualified healthcare professional before changing activity, nutrition, or care related to pregnancy, breastfeeding, an injury, or diabetes, hypertension, or PCOS. Do not use Sanaa for emergencies. Cycle estimates are not contraception, fertility, pregnancy, or diagnostic advice, and therapist or coach contact does not replace clinical care.

Your rights

You may be able to request access to, correction of, deletion of, or a copy of your personal data. You may also be able to object to certain processing or withdraw consent where consent is used. You can request an export or deletion from the profile controls in the app or by contacting us. Revoking Health Connect or HealthKit permission stops future reads; it does not automatically delete data already synced.

Retention

We keep personal data for as long as needed for the service, legal obligations, dispute resolution, fraud prevention, payment, and security purposes. Deletion requests are recorded and processed asynchronously. When an account is closed or a deletion request is accepted, we remove or anonymize personal data where reasonably possible and where retention is not required by law.

Changes and contact

We will update this policy when our data practices or legal obligations change and will publish the current, non-editable version at this URL. If you have questions or want to make a privacy request, contact us at hello@sanaafitness.co.ke.