HealthLynx← Back
Draft Document: This privacy policy is a draft and has not been reviewed by legal counsel. It must be reviewed by a qualified attorney before public launch, especially to ensure compliance with Kuwait's Personal Data Protection Law (PDPL) and applicable GCC regulations.

Privacy Policy

Last updated: June 2026 | Effective: To be determined

1. Who We Are

HealthLynx ("we", "our", "us") is a fitness coaching platform connecting personal trainers with clients in Kuwait and the GCC region. Our platform is accessible at healthlynx.app.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (managed by Clerk). You may optionally provide your phone number, city, and country.

Health & Fitness Data

As part of the coaching service, we collect and store: body weight, body measurements (waist, chest, hips, arms, thighs), progress photos and videos, workout logs, and notes provided by you or your trainer. This data is shared only with your assigned trainer.

Payment Information

Payment processing is handled by Tap Payments. We do not store card numbers or banking information. We store subscription records and payment status.

Usage Data

We collect analytics data through PostHog and error monitoring through Sentry to improve the platform. This data is anonymized where possible.

3. How We Use Your Information

  • To provide the coaching platform services
  • To facilitate communication between trainers and clients
  • To process subscription payments
  • To send transactional emails (check-in notifications, feedback alerts)
  • To improve platform performance and user experience
  • To comply with legal obligations

4. Data Sharing

We share your data with:

  • Your trainer: Check-in data, measurements, progress photos, messages
  • Clerk: Authentication and user management
  • Supabase: Database hosting (Bahrain region)
  • Tap Payments: Payment processing
  • Resend: Email delivery
  • Sentry: Error monitoring (anonymized)
  • PostHog: Analytics (anonymized)

We do not sell your personal data to third parties.

5. Data Storage & Security

Your data is stored on Supabase servers in the Middle East (Bahrain) region. We implement row-level security, encrypted connections (HTTPS/TLS), and authentication via Clerk. Progress photos and medical documents are stored in private, access-controlled storage buckets.

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Withdraw consent for marketing emails

To exercise these rights, contact us at privacy@healthlynx.app or use our Data Deletion Request form.

7. Data Retention

We retain your data while your account is active. Upon account deletion, personal data is removed within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

8. Cookies

We use essential cookies for authentication (Clerk session management) and analytics cookies (PostHog). You can opt out of analytics cookies. Essential cookies cannot be disabled as they are required for the platform to function.

9. Contact

For privacy-related inquiries: privacy@healthlynx.app