Privacy Policy

Last updated: 2026-08-30

1. Who we are

"Midmar" is a technical system that lets sports and educational academies in Saudi Arabia run their own registration and online-payment portal. This policy explains how personal data is handled across the platform and the academy portals running on it.

2. Data we collect

• Account data: mobile number (used to log in with a one-time verification code).
• Participant data: name, date of birth, gender, and an optional health note the guardian may add.
• Enrollment & payment data: program, group, amounts, and payment status. We never collect or store card numbers — payments are completed on the hosted page of a payment gateway licensed by the Saudi Central Bank.
• Progress records: attendance, coach assessments, and progress reports.
• Technical logs: operational records for security and troubleshooting.

3. Purposes

We use the data to create and manage accounts, register enrollments and process their payments, send transactional WhatsApp notifications (payment confirmation, renewal reminders, report readiness), and produce participant progress reports. We do not send marketing messages.

4. AI-assisted processing

Progress reports may be drafted with the help of AI, based only on the coach's assessment and the attendance record, and are shown to the coach, the academy, and the guardian within their accounts.

5. Data sharing

Data is shared only as strictly needed to run the service: the academy you enroll with, the licensed payment gateway to complete transactions, and the messaging provider to deliver WhatsApp notifications. We never sell personal data or share it for advertising.

6. Cookies

We use essential cookies only: the login session, anti-forgery protection, and language preference. No third-party advertising or analytics trackers.

7. Data protection

Data is encrypted in transit; access is limited by role (a coach sees only their groups, a guardian only their children); regular backups are taken; and technical controls limit abuse.

8. Retention

We keep data for the duration of the relationship (an active account or enrollment) and as required by law, particularly financial records that must be retained.

9. Your rights

Under the Saudi Personal Data Protection Law (PDPL), you may request access to your data, correction, deletion of what need not be retained by law, and withdrawal of consent for optional processing. Requests go through the platform's announced contact channels.

10. Changes to this policy

We may update this policy when needed; the "last updated" date above will change. Continued use of the service after an update means you have reviewed it.