TribeGen FZ-LLC ("we", "us", "our") is committed to protecting your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"). This Privacy Notice explains what data we collect, why, who we share it with, and your rights.

1. Data Controller

We act as the data controller for the personal data processed on the TribeGen Platform. For privacy questions or to exercise your rights, contact contact@tribegen.ae.

2. Personal data we collect

From all users

• Name, email address, phone number, profile photo.
• Account credentials (encrypted).
• Device and usage data (IP address, browser type, app interactions).
• Location data when you check in to a session (only at the time of check-in).
• In-app messages between clients and coaches (retained as evidence).
• Support correspondence.

From coaches additionally

• Emirates ID and residence visa documents.
• Trade license or freelance permit (if applicable).
• Coaching certifications.
• Bank account details (IBAN, bank name, account holder name).
• Tax information where applicable.

From clients additionally

• Booking history.
• Session reviews and ratings you submit.
• Payment-related data is processed by our payment provider — we receive only the last 4 digits and card brand.

3. Why we collect this data (purposes)

• Provide the service — create your account, match you with coaches, process bookings.
• Verify identity — confirm coaches are who they say they are and meet legal requirements.
• Process payments — facilitate payments and payouts.
• Communications — booking confirmations, reminders, support.
• Safety and dispute resolution — investigate complaints and protect users.
• Fraud prevention and security — detect and prevent abuse.
• Improve the Platform — analyze usage to improve features (aggregated where possible).
• Legal compliance — meet our obligations under UAE law.

4. Legal basis

We process personal data on the following bases under PDPL: (a) performance of the contract with you (these Terms); (b) compliance with a legal obligation; (c) our legitimate interests in operating and securing the Platform; and (d) your consent where specifically requested (e.g. marketing, location sharing).

5. Who we share data with

• Service providers (sub-processors) — hosting, database, analytics, email, push notifications, file storage. These providers act on our instructions and under contract.
• Stripe Payments Europe, Ltd. ("Stripe") — our payment services provider. Stripe processes card payments, computes and collects applicable indirect taxes at checkout, and provides fraud-prevention tooling. See the Stripe Privacy Policy.
• Other users on the Platform — coaches see client profile name and booking details; clients see coach profile, certifications, and reviews.
• Legal authorities — where required by UAE law, court order, or legitimate government request.
• Professional advisers — lawyers, accountants, auditors under confidentiality.

6. International data transfers

Some sub-processors may store or process data outside the UAE. Where this happens, we rely on the safeguards permitted by PDPL (such as transfers to jurisdictions with adequate data protection laws or contractual safeguards) and ensure your data continues to receive equivalent protection.

7. How long we keep data

• Account data: while your account is active, then up to 12 months after closure.
• Booking and payment records: 7 years (to meet UAE accounting and tax retention rules).
• KYC documents: 5 years after the coach leaves the Platform (anti-money-laundering retention).
• In-app messages: 24 months (evidence trail for disputes).
• Support tickets: 3 years.

8. Your rights

Under PDPL you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion (subject to legal retention requirements).
• Object to or restrict certain processing.
• Withdraw consent where we rely on consent.
• Receive a copy of your data in a portable format.
• File a complaint with the UAE Data Office.

To exercise any of these rights, contact contact@tribegen.ae. We will respond within 30 days.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, role-based access controls, regular backups, and monitoring. No system is 100% secure; please use a strong, unique password and keep your account credentials private.

10. Cookies and tracking

We use essential cookies to keep you signed in and provide core functionality, and limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings.

11. Children

The Platform is not directed at children under 18. If we learn that we have collected personal data from a child without parental consent, we will delete it.

12. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated via the Platform or by email.

13. Governing law

This Privacy Notice is governed by the laws of the United Arab Emirates. Any disputes will be brought before the Courts of Ras Al Khaimah, UAE (RAKEZ free-zone jurisdiction).