Privacy Policy

1. Overview

Vibe Tech ("we", "us", "our") operates Noura Samy (the "Service"), a fitness and wellness application powered by the UM Platform.

This Privacy Policy explains how information is handled when you use the Noura Samy application.

The Noura Samy application operates under the core privacy principles, infrastructure, and data protection standards of the UM Platform as described in this Privacy Policy.

2. Data Minimization & Purpose Limitation

Noura Samy follows a strict data minimization policy. We do not collect personal data unless it is strictly necessary for the Service to function.

We do not collect user data for advertising, resale, profiling, analytics monetization, or any purpose unrelated to the direct operation of the system.

Any data processed within Noura Samy exists only to enable essential system functionality, such as:

• Account authentication and security
• Workout and nutrition plan generation
• Progress tracking and continuity of user experience
• Core features such as notifications, messaging, or subscriptions

If a specific feature does not require certain data to function, that data is not collected.

3. Information Processed by the System

Depending on how you use the Service, the system may process the following categories of information:

• Account & Access Information: name, email address, username, password hash, profile photo, and authentication-related data.
• Fitness & Profile Information: age, gender, height, weight, fitness goals, workout plans, nutrition plans, progress data, and body measurements.
• Technical & Usage Information: device identifiers, operating system, app version, session activity, and crash or error logs necessary for system stability.

4. Artificial Intelligence & Model Usage

Noura Samy may use artificial intelligence to generate workouts, nutrition plans, or system recommendations.

We are strict about how AI is used:

• We do not train AI models using user personal data
• User data is not used to improve, fine-tune, or retrain AI models
• No user-generated content is retained for machine learning purposes

Any data involved in AI-driven features is used only at runtime to deliver the requested functionality and is not repurposed beyond that scope.

5. Platform Infrastructure

Noura Samy is built on the UM Platform infrastructure. While specific branding and content are unique to Noura Samy, user data is securely processed and stored by Vibe Tech under this Privacy Policy.

The application operator has limited administrative access to data strictly necessary to operate the application (such as managing users or subscriptions). The operator is contractually required to comply with this Privacy Policy and applicable data protection laws.

6. Third-Party Services & Data Sharing

We do not sell, rent, trade, or monetize user data under any circumstances.

Where third-party services are required to operate the Service, we strictly limit shared data to the minimum required for that service to function.

Examples include:

• Notification providers receiving only device or push tokens
• Messaging or infrastructure services receiving delivery-related metadata only
• On the um-platform.com website only, and only after you accept cookies: Microsoft Clarity (anonymous session replays and heatmaps, with typed text masked) and the Meta Pixel (ad measurement). Choosing "Essential only" keeps both off.

All third-party providers are contractually restricted from using data for any purpose beyond providing their service to UM.

7. Data Security

We implement industry-standard technical and organizational measures to protect data against unauthorized access, misuse, loss, or disclosure.

Access to user data is restricted to authorized systems and personnel only and is continuously monitored to maintain system integrity.

8. Data retention and deletion

We retain personal data only for as long as it is needed for the purposes described in this policy. The retention period depends on the type of data, the service you use, and any applicable legal requirements.

• Account and fitness data: we retain account details, profile information, workout and nutrition plans, progress records, and body measurements while your account remains open and the data is needed to provide the Service. Uninstalling the application does not delete your account or its data.
• Technical and security data: we retain device information, session records, and crash or error logs only for as long as needed to diagnose problems, protect accounts, and investigate security incidents. We delete or anonymize these records when they are no longer needed.
• Support and subscription records: we retain these records for as long as needed to handle your request or subscription. Records required for accounting, legal obligations, or resolving disputes are retained for the applicable statutory period or until the matter is resolved.
• Account deletion: after verifying your deletion request, we complete deletion of your personal data from active systems within 30 days, except for the limited records described below.
• Backups: residual copies may remain in secure backups for up to 30 days after deletion from active systems. They are removed through the normal backup cycle and are not used for other purposes.
• Limited exceptions: we may retain specific records where required by law or necessary to resolve a dispute or establish, exercise, or defend legal claims. Access is restricted, and we delete these records when that requirement ends.
• Anonymous data: we may retain aggregated data that no longer identifies you to improve the Service. This does not include identifiable account, fitness, or profile data.

You can request account deletion through the application or by emailing [email protected]. You can also contact us for details about the retention period or criteria that apply to a particular record.

9. User Rights

Depending on your location, you may have the right to access, update, correct, or request deletion of your data. These actions can be performed through the application or by contacting us directly.

Account Deletion

You have the right to delete your account and all associated data at any time. For detailed instructions on how to delete your account, please visit our Account Deletion page.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect system improvements or legal requirements. Any updates will be made available within the application or official Noura Samy channels.

Continued use of the Service constitutes acceptance of the updated policy.

11. Our Privacy Commitment

Privacy is a core principle of the Noura Samy application and all applications operated by or powered through Vibe Tech.

We design our systems with privacy by design and privacy by default, ensuring that user data is limited, protected, and used only for its intended functional purpose.

12. Contact Us

If you have any questions regarding this Privacy Policy or our data practices, you may contact us at:

Email: [email protected]