Privacy Policy

Welcome to Kinetic AI-Performance Director ("Kinetic," "the App," "our Service"), an AI-powered running coaching platform developed and operated by Wijdan AI ("Wijdan AI," "we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application, website, and related services. It also describes your rights regarding your personal data and how you can exercise those rights.

We are committed to protecting your privacy and ensuring transparency about our data practices. Given that Kinetic processes sensitive health and fitness data, we take additional precautions to secure this information and provide you with meaningful control over your data.

For the purposes of applicable data protection laws, including the DIFC Data Protection Law 2020, the European Union General Data Protection Regulation (GDPR), and the UK GDPR, the data controller is:

Regulatory Status: Wijdan AI is licensed by the Dubai International Financial Centre (DIFC) and operates in accordance with DIFC laws and regulations, including the DIFC Data Protection Law 2020 (DIFC Law No. 5 of 2020).

Supervisory Authority: The Commissioner of Data Protection, DIFC, is the primary supervisory authority for Wijdan AI's data processing activities.

We collect various types of personal data to provide and improve our Service:

3.1 Account and Identity Data

3.2 Health and Fitness Data

3.3 Third-Party Platform Data

When you connect wearable devices or third-party services, we may receive:

4.1 Direct Collection

• Account Registration: When you create an account
• Profile Setup: When you provide information about yourself
• App Usage: When you log workouts, report health status, or interact with features
• Communications: When you contact us or respond to surveys
• Payments: When you subscribe or make purchases

4.2 Automated Collection

• Device Sensors: GPS, accelerometer, heart rate sensors (with permission)
• App Analytics: Usage patterns, crash reports, performance data
• Cookies and Similar Technologies: Session management, preferences

4.3 Derived and Inferred Data

We may derive or infer additional data from the information you provide:

• Fitness Level estimated from your activity history
• Training Zones calculated from heart rate data
• Readiness Scores derived from sleep, HRV, and activity data
• Injury Risk inferred from training load and fatigue indicators
• Performance Predictions - estimated race times based on training

For users subject to GDPR/UK GDPR or similar frameworks, we process your personal data based on:

We share your data only in these circumstances:

7.1 Service Providers

Trusted third-party companies performing services on our behalf:

• Cloud Infrastructure (hosting and storage)
• AI/ML Services (model inference)
• Payment Processors (Stripe, PayMob)
• Email and Notification Services
• Analytics (anonymized data)

7.2 Legal Requirements

We may disclose data if required by law, court orders, or to protect rights and safety.

7.3 Business Transfers

In event of merger or acquisition, you will be notified and have opportunity to delete your account.

Wijdan AI is established in the Dubai International Financial Centre (DIFC), UAE. Your data may be transferred to countries outside your residence.

Transfer Mechanisms

• Standard Contractual Clauses (SCCs): EU-approved contractual terms
• UK International Data Transfer Agreement (IDTA): For UK transfers
• DIFC-approved mechanisms: As prescribed by the Commissioner
• Supplementary Measures: Additional technical and organizational safeguards

Account Deletion

When you delete your account:

• Immediate: Profile, preferences, active plans
• Within 30 days: Activity data, health data, chat history
• Within 90 days: Backups and disaster recovery systems
• Retained: Anonymized/aggregated data, legal records

Technical Safeguards

Breach Notification

In the event of a data breach affecting your personal data, we will notify relevant authorities within 72 hours and notify you without undue delay if there is high risk to your rights.

Rights Under GDPR (EEA/UK Users)

Rights Under CCPA/CPRA (California Users)

• Right to Know what personal information we collect
• Right to Access your personal information
• Right to Delete your personal information
• Right to Correct inaccurate information
• Right to Non-Discrimination for exercising your rights

We do not sell your personal information.

Response Time

We will respond within 30 days (GDPR) or 45 days (CCPA). Complex requests may take up to 90 days with notice.

Kinetic is not intended for children under the age of:

• 16 years in the European Economic Area
• 16 years in the United Kingdom
• 13 years in the United States

We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has provided us with personal data, please contact us at privacy@wijdanai.com.

Kinetic uses artificial intelligence and machine learning for:

Training recommendations do not produce legal or similarly significant effects. You may request human review of any AI-generated plan by contacting us.

Your Choices: Disable analytics in Settings → Privacy → Analytics. We honor Do Not Track (DNT) signals.

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices, content, or data collection.

When you connect wearable devices, you authorize data sharing via their OAuth process. You can revoke access through the wearable's app or our settings.

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Email to your registered address
• In-app notification
• Prominent notice on our website