Privacy Policy

Draft for legal review. Effective 2026-10-01 · Version 1.0

1. Who we are

IGNIS Elite is operated by [Company legal name — to be completed] (commercial register [Commercial register no. — to be completed], tax card [Tax card no. — to be completed]), [Registered address, Egypt — to be completed], under the brand Amrismailai.com ("we", "us"). You can contact our data protection officer at privacy@amrismailai.com.

2. What we collect

Account data: name, email address, password (stored hashed by our authentication provider), language, time zone and the date you joined.
Contact data: phone / WhatsApp number, email address, and the channels you choose for your daily plans.
Health and fitness data (sensitive data): age, sex, height, weight, your health-screening (PAR-Q+) answers, body measurements, InBody scan files and readings, the supplements, medicines and injections you tell us about, workouts, check-ins, diet preferences and water intake.
Payment data: plan, amount, status and payment references. Card numbers are handled only by our payment processor, Paymob; we never see or store them.
Usage data: points, levels, badges, delivery logs and security logs (IP address, device).
Website chat: the messages you send to our assistant. We keep your name, contact details and goal only if you submit the contact form yourself.

3. Why we use it and on what basis

To create and deliver your personal training and diet plans, reports and reminders. This is based on your explicit consent for health data and on our contract with you.
To take payments and keep financial records. This is based on our contract with you and on our legal obligations.
To keep the service secure and prevent abuse. This is based on our legitimate interest.
To send offers and bonus content. We do this only with your separate marketing consent, which you can withdraw at any time.
To produce an AI body analysis. We do this only when you buy one and agree to share the data it needs with our AI provider.

4. Who we share it with

We use trusted processors who act only on our instructions:

Supabase (database and hosting)
Paymob (payments)
Anthropic (the AI analysis, InBody scan reading and the website chat)
WhatsApp messaging providers and our email provider (daily plans and reports)
push-notification services
Google (sign-in, if you choose it)
Cloudflare (security and delivery)
our social media posting provider (brand content only — never your personal data)

We never sell your data.

5. International transfers

Some of these processors store or process data outside Egypt. We choose providers with appropriate safeguards and send each one only the data its service needs.

6. How long we keep it

Account, health and plan data: while your account is active, and deleted within 30 days of a deletion request.
Payment records: as long as tax law requires.
Website chat transcripts: 90 days.
Security logs: up to 12 months.

7. Your rights

You can access, correct, export or delete your data, withdraw any consent, and object to marketing. Do this from Settings in the app or by emailing privacy@amrismailai.com. You can also complain to Egypt's Personal Data Protection Center.

8. Security

Your data is encrypted in transit and at rest.
Access rules are strict: each client sees only their own data, trainers see only their assigned clients, and marketers never see health data.
Staff sign in with two-factor authentication, and we keep audit logs.

If a breach affects your data, we will notify you and the authorities within 72 hours where the law requires it.

9. Age

The service is only for adults 18 or older.

10. Cookies

We use only essential cookies: your sign-in session, security, and bot protection. We use no advertising trackers. See the Cookie Notice.

11. Changes

We will tell you about important changes and ask you to accept the new version before you continue.