Privacy Policy
This Privacy Policy explains how ALATI Tech Company (شركة ألاتي تيك) collects, uses, and protects your personal data when you use the KYB service and visit kyb.best. We operate under the Saudi Personal Data Protection Law (PDPL).
1. Who we are
KYB is operated by ALATI Tech Company, a Saudi single-person LLC registered in Jeddah. Commercial Registration 7050668701. We are the data controller for the personal data described in this policy.
For privacy questions, write to info@kyb.best.
2. What we collect
When you book a KYB session, we collect:
- Contact and identification: name, phone number, email, year of birth, gender.
- Physical: height, weight, training history, goals, gym.
- Session data: EMG readings from your session, per-exercise activation values, left-vs-right asymmetry values, photographs of sensor placement (if any).
- Account: booking history, payment receipts, communications with us.
We do not collect biometric identifiers (face scans, fingerprints) and we do not collect health-condition data beyond what you choose to share with us.
3. Why we collect it
- To deliver and host your personal KYB report.
- To send you booking confirmations, receipts, and service notifications.
- To operate, maintain, and improve the KYB platform and services.
- To produce aggregated statistical analyses across many customers (for example, "1 in 3 clients show significant glute asymmetry"). Aggregated outputs do not identify any individual and may be shared publicly.
- To comply with Saudi tax (ZATCA), accounting, and commercial regulations.
- To defend KYB and ALATI Tech against legal claims.
4. Who we share with
We use the following service providers to operate KYB. Each receives only the data they need and processes it on our behalf under contract:
- Database and authentication: Supabase (EU region)
- Website hosting: Vercel
- Payment processing: Moyasar (and Tabby, Tamara when offered)
- Transactional email: Resend
- SMS notifications: Unifonic
We do not sell your personal data. We do not share it with advertisers or social media platforms for retargeting.
5. How long we keep it
We keep your personal data for the duration of your customer relationship with KYB plus five (5) years thereafter, except where Saudi law requires a longer retention period (for example, tax records).
6. Cross-border data transfer
Our database is hosted in the European Union. When you book a session, your personal data is transferred there. PDPL allows this transfer with appropriate safeguards, which are in place via our contractual agreements with the hosting provider.
7. Your rights under PDPL
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion (subject to our legitimate retention obligations)
- Object to certain processing
- Withdraw consent where it applies
- Lodge a complaint with the Saudi Data and AI Authority (SDAIA)
To exercise these rights, write to info@kyb.best. We respond within 30 days.
8. Cookies
kyb.best uses only the technical cookies needed to make the site work (session, security, language preference). We do not use advertising, social media, or third-party analytics cookies that track you across sites.
9. Children
KYB serves customers aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to us, contact info@kyb.best and we will delete it.
10. Changes to this policy
We may update this policy as the service changes. Material changes will be announced on kyb.best with at least 30 days advance notice. The "Last updated" date at the top shows when we last revised it.
11. Contact
ALATI Tech Company
Jeddah, Saudi Arabia
Commercial Registration 7050668701
info@kyb.best