Privacy Policy

This Privacy Policy explains how Greensville Trust, operating Futuwwa, collects and uses personal information when you use the Futuwwa app, website, and related services.

Greensville Trust is the controller of your personal information. You can contact us at Felicity House, Northdale Road, Liverpool, England, L15 4HT or by email at support@futuwwasports.org.

Who can use Futuwwa

Futuwwa is for adults aged 18 or over. We do not knowingly provide accounts for children or collect personal information from children through the app.

Information we collect

Depending on how you use the service, we may collect:

• Account and sign-in information from Apple or Google, including your account identifier and email address.
• Profile information you provide, including your name, email address, phone number, home address, date of birth, gender, primary gym, and emergency contact details.
• Waiver completion information, including waiver version and completion timestamp. Emergency contact details are collected as part of onboarding and waiver completion.
• Session, attendance, and check-in records, including the gym location linked to an NFC check-in tag.
• Payment records, including payment status, payment attempt details, payment reference details, receipt information, and related session details. We do not store your card details.
• Administration and support records, including reminders, cancellation notices, support requests, and operational email history.
• Technical information needed to operate and secure the service, such as device, app, browser, server log, and diagnostic information.

We do not use advertising tracking, third-party analytics, or ad networks in the app.

How we use your information

We use personal information to:

• Create, maintain, and protect your account.
• Confirm that you are eligible to use the service and have completed onboarding and waiver requirements.
• Show relevant sessions, including sessions for your selected gym and gender.
• Record check-ins, attendance, payment status, and activity history.
• Manage payment redirects, payment confirmations, receipt information, and unpaid-session follow-up.
• Send operational messages, including session cancellations, payment reminders, support replies, and important account or service updates.
• Help authorised administrators manage sessions, attendance, unpaid attendees, waiver status, and member support.
• Keep the service secure, investigate misuse, fix issues, and maintain audit records.
• Comply with legal, accounting, safeguarding, dispute, and regulatory obligations.

Our lawful bases

We use your information where it is necessary to provide the service to you, where we have a legitimate interest in running a safe and reliable gym service, where we need to comply with the law, and, where relevant, where you have given consent for a specific purpose.

Payments

Payments are handled by Zeffy. When you pay for a session, you may be sent to Zeffy to complete payment. Zeffy processes your payment details under its own terms and privacy policy. Futuwwa keeps the records needed to match a payment to your attendance, confirm payment status, keep receipt information where available, and keep accounting and audit records.

Who we share information with

We only share personal information where needed, including with:

• Administrators, coaches, and authorised volunteers who need access to run sessions and support members.
• Supabase, which provides backend and authentication services.
• Apple and Google for sign-in and device platform services.
• Zeffy for payment processing and payment confirmation.
• Hosting, email, and support service providers used to operate the app and website.
• Professional advisers, insurers, regulators, law enforcement, or courts where required or appropriate.

Some providers may process information outside the United Kingdom. In those cases, we rely on appropriate safeguards where required by data protection law.

How long we keep information

We keep personal information only for as long as needed for the purposes described in this policy. This may include keeping records while your account is active and afterwards where needed for legal, accounting, safeguarding, insurance, audit, dispute, or regulatory reasons. When information is no longer needed, we delete it or anonymise it where practical.

Your rights

Under UK data protection law, you may have the right to access, correct, delete, restrict, object to, or request a copy of your personal information. You may also withdraw consent where processing is based on consent.

To make a request, contact support@futuwwasports.org. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

You can also delete your Futuwwa account in the app or follow the instructions on our Account Deletion page.

Security

We use appropriate technical and organisational measures to protect personal information. No service can be guaranteed to be completely secure, so you should keep your device and sign-in account secure and tell us if you believe your account has been misused.

Changes to this policy

We may update this Privacy Policy when the service, law, or our operations change. The latest version will be available through the app and website.