Privacy Policy

Effective Date: February 23, 2024

Last Updated: February 23, 2024

SRS Gym ("we," "our," or "us") operates the SRS Gym mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you use our App:

  • Account Information: Email address, full name, phone number, and password (encrypted)
  • Profile Information: Profile picture (optional)
  • Shipping Information: Delivery addresses, including street address, city, and postal code
  • Order Information: Purchase history, cart contents, wishlist items
  • Review Information: Product reviews and ratings you submit

1.2 Automatically Collected Information

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: App features used, pages viewed, time spent on pages
  • Location Data: Approximate location based on IP address
  • Log Data: IP address, browser type, access times, and referring URLs

1.3 Third-Party Information

When you use third-party authentication services, we receive:

  • Google Sign-In: Name, email address, profile picture
  • Facebook Login: Name, email address, profile picture

2. How We Use Your Information

We use your information for the following purposes:

  • To create and manage your account
  • To process and fulfill your orders
  • To communicate with you about orders, updates, and promotions
  • To provide customer support
  • To personalize your shopping experience
  • To improve our App and services
  • To detect and prevent fraud and security issues
  • To send push notifications (with your consent)
  • To analyze usage patterns and trends
  • To comply with legal obligations

3. Third-Party Services

3.1 Firebase Services

We use Google Firebase for the following services:

  • Firebase Authentication: Secure user authentication and account management
  • Firebase Cloud Messaging: Push notifications for order updates and promotions
  • Firebase Analytics: App usage analytics and performance monitoring

Firebase may collect device information, usage data, and analytics data. For more information, see Firebase Privacy Policy.

3.2 Payment Processing

We use CyberSource Hosted Checkout for payment processing. We do not store your complete credit card information. Payment data is transmitted directly to CyberSource using secure encryption. For more information, see CyberSource Privacy Policy.

3.3 Social Media Authentication

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law or to protect our rights and safety
  • With Your Consent: When you explicitly agree to share your information

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit using HTTPS/TLS
  • Encrypted password storage using industry-standard hashing
  • Secure authentication using JWT tokens
  • Regular security audits and updates
  • Access controls and authentication for our systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your personal information through the App's profile settings.

7.2 Account Deletion

You can request account deletion by contacting us at sartawisrs@gmail.com. We will process your request within 30 days.

7.3 Marketing Communications

You can opt out of promotional emails by clicking the unsubscribe link in any marketing email.

7.4 Push Notifications

You can disable push notifications through your device settings or the App settings.

7.5 Cookies and Tracking

You can control cookies through your browser settings. Note that disabling cookies may affect App functionality.

8. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Palestine. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

  • Email: sartawisrs@gmail.com
  • Address: Biddya, Salfit, Palestine
  • Company: SRS Gym

12. Consent

By using our App, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.