Privacy Policy

Effective date: 2026-10-10 · Version 5

This Privacy Policy explains how Noga Apps collects, uses, shares and protects personal data in the Karneh app for Android and iOS (Google Play: "Karneh: Gym Membership Manager" / "كارنيه – إدارة اشتراكات الجيم", package com.karneh) and on karneh.com. Karneh is developed and published by Noga Apps (Osama Esmail Abdellatif Abdelaal), Dubai, United Arab Emirates. Google Play listing: https://play.google.com/store/apps/details?id=com.karneh

Summary

• Karneh helps gyms and clubs manage members, subscriptions, payments and QR check-ins.
• We collect only what the service needs. We do not sell personal data, show ads, or use the advertising ID.
• We use a small set of service providers (listed below) to run sign-in, analytics, crash reports and subscriptions.
• You can delete your account in the app or at https://karneh.com/delete-account.

Who this policy covers

• Account holders: business owners and staff who sign in, and members who link their membership card.
• Members entered by a business: the gym enters and controls its members' records. For that data the gym decides what to collect and why, and we process it on the gym's behalf to provide the service. The gym is responsible for informing its members.

Data we collect

• Account data: your name, email address and Google account identifier when you sign in with Google.
• Business data: business name, type, logo, time zone, plans, prices, staff list and roles.
• Member data entered by a business: name, phone number, photo, notes, subscription dates, payments (amount, method, note), balances and the history of membership changes.
• Check-ins: time and result of each QR scan or manual check-in and which staff account recorded it.
• Membership card links: when a member links their card, the link between the member record and their account and the email used.
• Wallet passes: when a member adds a pass to Google Wallet or Apple Wallet, the pass carries the business name, plan, member name, expiry date, QR code and, for Apple Wallet, the member photo. Passes are created when requested and not stored by us.
• Subscription purchases: for business owners who buy Karneh Pro, the subscription status, product, price and store transaction identifiers from Google Play or the App Store, via RevenueCat. We never receive card or bank details.
• App usage and diagnostics: app events (for example "member added" or "check-in scanned", without names, phone numbers or exact amounts), screen names, app version, device model, operating system, language, approximate country, an app-instance identifier and our internal user ID; crash reports and error logs.
• Technical logs: IP address, request time and browser or app information in our server and network logs, used for security and troubleshooting.
• Camera and photos: the app uses the camera only to scan member QR codes and to take member photos, and the photo library only when you choose a member photo. Nothing is collected in the background.
• We do not collect precise location, contacts, SMS, call logs, health data or the advertising ID.

How we use data

• To provide the service: sign-in, managing members, plans, payments and check-ins, member cards and wallet passes.
• To process and verify Karneh Pro subscriptions.
• To keep the service secure: rotating single-use QR codes, access control per business, abuse prevention.
• To fix crashes and improve the app, using aggregated usage statistics.
• To answer support requests and send service notices inside the app.
• We do not use personal data for advertising, profiling for marketing, or automated decisions with legal effects.

Service providers and sharing

We share personal data only with these providers, only for the purposes above, and they are bound to protect it:

• Google — Google Sign-In, Google Wallet, Google Play billing, Firebase Analytics, Firebase Crashlytics and Firebase Remote Config (https://policies.google.com/privacy, https://firebase.google.com/support/privacy).
• Apple — App Store purchases and Apple Wallet (https://www.apple.com/legal/privacy/).
• RevenueCat — subscription management (https://www.revenuecat.com/privacy).
• Hetzner Online GmbH — servers and storage in the European Union (https://www.hetzner.com/legal/privacy-policy).
• Cloudflare — network security and delivery for karneh.com (https://www.cloudflare.com/privacypolicy/).

Within a business, the owner and staff of that business can see its members' records. A member can see only their own card and history. We disclose data to authorities only when the law requires it. If Noga Apps transfers the service to another owner, this policy will continue to apply to your data. We never sell personal data.

Where data is stored

Our servers and databases are hosted in the European Union. Google, Apple, RevenueCat and Cloudflare may process data in other countries, including the United States, under their own safeguards such as standard contractual clauses.

Security

All traffic is encrypted in transit (HTTPS/TLS). Access is limited per business and per role, QR pass tokens rotate and are single-use, and administrative access is restricted and logged.

How long we keep data

• Account data: until you delete your account.
• Business and member data: until the business deletes it or the owner's account is deleted. When a business deletes a member, the member is removed from the business's lists; the record and its payment and check-in history stay in the business's records until the business or the owner's account is deleted.
• App analytics: up to 14 months. Crash reports: up to 90 days.
• Server logs and backups: kept for a short period for security and recovery, then overwritten.
• Purchase records: as long as needed for accounting and legal obligations.

Deleting your account and data

• In the app: Settings → Delete account. On the web: https://karneh.com/delete-account. Or email support@karneh.com from the email address of your account.
• After a request your account is blocked and can be restored for 14 days. After that we permanently delete the businesses you own with all their members, plans, payments, check-ins, photos and logos, remove your staff seats, unlink your membership cards, and anonymise your account record.
• Cancelling a Karneh Pro subscription is done in Google Play or the App Store; deleting the account does not cancel it.
• Members whose records were entered by a gym can ask the gym, or contact us and we will pass the request to the gym.

Your rights

You can ask to access, correct, export or delete your personal data, object to or restrict its use, and withdraw consent. Business owners can export their member data as CSV from the app. Send requests to support@karneh.com; we answer within 30 days. You may also complain to your local data protection authority.

Children

Karneh is a business tool and is not directed to children under 13. A gym may enter members under 18; the gym is responsible for having a parent's or guardian's consent.

Changes to this policy

When we change this policy we publish a new version with a new effective date on this page, and the app asks you to review it.

Contact

Noga Apps (Osama Esmail Abdellatif Abdelaal), Dubai, United Arab Emirates. Email: support@karneh.com (developer contact: support@nogaapps.com). Google Play: https://play.google.com/store/apps/details?id=com.karneh