CLV Riyadh Privacy Policy
Who we are
The Collective Riyadh is operated by Twenty Four Riyadh Sports Company, the controller of customer and staff information used to provide The Collective services. Ignite provides the CoachOS software and publishes the mobile app on our behalf. This policy covers the The Collective Riyadh mobile app and our CoachOS web portal.
Information we use
We use your name, email, phone number, language preference, account role and optional profile photo; training packages, balances, bookings, attendance and session notes; offers, payment amounts, transaction references and any bank-transfer proof you submit. We also use sign-in and security records, including session identifiers, IP addresses, device information and audit records. If you enable notifications, we register a device push token and your notification preference. Information may come from you, The Collective staff or our payment provider.
Why we use it
We use this information to manage your membership and training, authenticate access, arrange sessions, record attendance, process payments, deliver service updates and renewal reminders, answer requests, prevent misuse and maintain business records. Required account details are necessary to provide these services. Optional profile photos, notifications and biometric unlock can be left off. We rely on the applicable basis for each purpose, including providing requested services, consent where required and legal obligations.
Payments
Card and Apple Pay payments are processed by Moyasar. Card details are handled through its payment service; CoachOS does not store full card numbers or security codes. We retain payment status, amounts and references to manage your package and financial records. Bank-transfer proofs you upload are stored as part of payment verification.
Camera, photos and biometrics
Camera access is requested only when a trainer opens the QR scanner. QR scanning does not record or upload photos or video. A customer’s session code changes, expires quickly and is validated by our server. Choosing a profile photo uploads the selected image to our hosting storage. Face ID, Touch ID and Android biometric authentication are performed by your device; The Collective and CoachOS do not receive your biometric templates. You can change these permissions in device settings.
Notifications
With your permission, we send relevant session, payment, offer and renewal notifications through Expo and the Apple/Google push networks, including Firebase on Android. You can turn notifications off in the app or your device settings. Notifications may appear on a lock screen according to your device preferences.
Who receives information
Authorized The Collective staff access information appropriate to their responsibilities. Ignite and service providers process information needed to operate the service, including hosting and storage providers such as DigitalOcean and Amazon Web Services, email delivery providers, Moyasar and notification providers. These providers may process information outside Saudi Arabia. We may disclose information when legally required or to protect the service and the rights of its users. The app does not include advertising or cross-app advertising tracking.
Storage and retention
Access is protected by authentication and company permissions; network requests use HTTPS, and private files use access-controlled storage. No system can eliminate every risk. We retain account and training information while it is needed to provide services and resolve related requests. Financial, attendance and audit records may need to remain for applicable legal obligations or disputes. Sign-in codes and session credentials expire according to their configured validity. Contact us to ask about the records and retention periods applicable to your account.
Your choices and rights
You may ask to access or receive a copy of your personal information, correct inaccurate information, withdraw consent where processing depends on consent, or request destruction of information, subject to applicable legal requirements and exceptions. To request account deletion, use the Account deletion link below or email us. We may need to verify your identity. Deleting an account can remove access to your packages and history; legally required records may be retained with restricted access. You may raise a personal-data complaint with the Saudi Data and Artificial Intelligence Authority through its Personal Data Protection platform.
Contact and changes
Contact info@thecollective-fit.com for privacy, account or data requests. We will update this page when our practices change and show the new effective date. Effective date: 6 October 2026.
Account deletion and data requests · info@thecollective-fit.com