Privacy Policy

1. Introduction

This Privacy Policy (the “Policy”) explains how WNC Technologies FZE LLC, a Free Zone Establishment with Limited Liability registered with the Ajman Free Zones Authority, United Arab Emirates (commercial registration no. 44076), with its registered office at Ajman Free Zone, Ajman, United Arab Emirates (“Alza”, “we”, “us” or “our”), collects, uses, discloses and protects personal data in connection with the Alza Ai mobile applications (iOS and Android), the website at www.alzaiq.io, and all related products, features and services (together, the “Service”).

Alza is an AI-powered padel coaching service: users upload videos of their matches and receive automated analysis, personalised training, nutrition and recovery guidance, and progress tracking. Because these features involve uploading media and, in some cases, health-related information, we are committed to handling your personal data lawfully, fairly and transparently.

For the purposes of applicable data protection laws, Alza is the “controller” (or equivalent) of the personal data described in this Policy, except where we act as a “processor” on behalf of a business customer (e.g., a club). If you do not agree with this Policy, please do not use the Service.

2. Scope, Definitions & Conflicts

This Policy applies to all users of the Service worldwide. “Personal data” (also “personal information”) means any information relating to an identified or identifiable individual. “Processing” means any operation performed on personal data. “You” means the individual using the Service.

Where mandatory local law grants you greater rights or imposes stricter obligations than this Policy, that law prevails to the extent of any conflict. Region-specific disclosures are set out in Section 13.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information you provide

• Account & profile data: name, email address, password (stored hashed), country/region, chosen player level, optional profile photo, and date of birth or age (used for age-verification).
  
  

• Match media & content: videos and images of your padel matches that you upload, together with the analysis, statistics and coaching output we generate from them. This media may contain your image and likeness and may capture other individuals present on court (see Sections 6 and 14).
  
  

• Health, fitness & nutrition data (HealthKit/Apple Health):
  Information you choose to share through Apple Health or provide when using our nutrition, warm-up, and recovery features.
  This may include physical attributes, dietary preferences, training load, and activity data.
  We process this data only with your consent or another lawful basis, where permitted by applicable law.
  We retain HealthKit and Apple Health data only for as long as necessary to provide the relevant features, fulfill the purposes described in this Privacy Policy, or meet legal obligations.
  When you disconnect Apple Health or withdraw your consent, we stop collecting new data through the integration and delete previously collected data when no longer needed, subject to applicable legal requirements.
  
  

• Communications: messages you send us (support requests, feedback, survey responses) and your marketing preferences.

3.2 Information collected automatically

• Usage & performance data: how you interact with the Service, features used, pages/screens viewed, match-analysis activity, and derived metrics (e.g., your Padel IQ, match history, plans and inferences about your play).
  
  

• Device & technical data: device type and identifiers, operating system, app version, IP address, approximate location (derived from IP), language, crash logs and diagnostic data.
  
  

• Cookies & similar technologies (website): as described in Section 12.

3.3 Information from third parties

• App stores (Apple App Store, Google Play) and our payment processor: limited subscription and transaction data (we do not receive or store full payment-card numbers).
  
  

• Authentication providers (if you sign in via a third party) and analytics/attribution providers.
  
  

4. How and Why We Use Your Data (Purposes & Legal Bases)

We use personal data for the purposes below. Where the EU/UK GDPR or a similar law applies, the corresponding legal basis is shown.

Where we rely on consent, you may withdraw it at any time (Section 11); withdrawal does not affect processing carried out before withdrawal.

5. AI Processing and Automated Analysis

The core of the Service is automated: your uploaded match media is processed by artificial-intelligence and computer-vision systems — operated by us and by trusted third-party AI providers acting as our processors — to detect shots, movement and patterns and to generate analysis, plans and metrics.

This analysis is provided for training and informational purposes. We do not use solely-automated decision-making that produces legal or similarly significant effects concerning you within the meaning of Article 22 GDPR. If we ever introduce such processing, we will inform you and provide the safeguards required by law, including the right to human review.

• Model improvement: we may use your content to maintain and improve the accuracy of our models. Where we do so, we use de-identified or aggregated data wherever feasible, and — where required by law or where your content is sensitive — only with your consent. You can opt out of the use of your content for model improvement via your settings or by contacting us.
  
  

• Biometric note: our analysis focuses on gameplay, not on identifying you. We do not create facial-recognition templates or other biometric identifiers to identify individuals, except where you have given any consent expressly required by law (e.g., certain US state biometric statutes).

6. Media You Upload and Other Individuals

You are responsible for the media you upload. By uploading match footage you confirm that you have the right to do so and that, where the footage identifiably captures other people (including teammates, opponents or spectators), you have obtained any consent required under applicable law for that footage to be uploaded and analysed. We may remove content that appears to infringe others' rights or that we are notified is unlawful.

7. How We Share Personal Data

We share personal data only as described below, and we do not sell your personal data for money:

• Service providers and processors: We share personal data with cloud hosting and storage providers (AWS), video-analysis providers (TwelveLabs) to analyze uploaded match footage, AI service providers (OpenAI) to support AI-powered features, including text-based AI interactions, and voice transcription providers (OpenAI Whisper) to process voice input and convert speech to text.

  
  

• We also share data with analytics and attribution providers, email and customer-support tools, and other service providers. These providers are contractually required to protect your data and process it only in accordance with our instructions and applicable law.
  
  

• Payment processors like (Stripe) and app stores: to process subscriptions and payments.
  
  

• Professional advisers and auditors: lawyers, accountants and insurers, where necessary.
  
  

• Legal, regulatory and safety: where required by law, legal process, or to protect the rights, safety and property of Alza, our users or the public.
  
  

• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
  
  

• With your consent or at your direction: for example, when you choose to share content to social media.

A current list of our sub-processors is available on request at privacy@alzaiq.io

8. International Data Transfers

We are based in the United Arab Emirates and use service providers located in various countries. Your personal data may therefore be transferred to, stored in, and processed in countries other than your own, including the EEA, the United Kingdom, the United States and others, which may have different data-protection laws.

Where we transfer personal data internationally, we implement appropriate safeguards, such as the European Commission's and the UK's Standard Contractual Clauses, reliance on adequacy decisions where available, and equivalent measures required under the UAE Personal Data Protection Law and other applicable laws. You may request further information using the contact details in Section 17.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. In general:

• Account data: for the life of your account and for up to 3 months after closure, unless a longer retention is legally required.
  
  

• Match media and analysis: retained while your account is active; you can delete individual matches at any time, and we delete or de-identify associated media within 30 days of deletion, subject to backups.
  
  

• Payment and transaction records: retained for the period required by tax and accounting law.

When personal data is no longer needed, we delete it or irreversibly anonymise it.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, and regular review of our practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach, we will notify affected individuals and regulators where and as required by applicable law.

11. Your Rights and Choices

Subject to your location and applicable law, you may have the right to: access your personal data; correct inaccurate data; delete your data; restrict or object to processing; data portability; withdraw consent; opt out of marketing; and opt out of certain uses of your data. You also have the right not to be discriminated against for exercising these rights.

To exercise your rights, use the in-app privacy controls or contact us at privacy@alzaiq.io. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law and, in most cases, free of charge. You may also authorise an agent to make a request on your behalf.

If you are unsatisfied, you may lodge a complaint with your local supervisory authority (Section 13).

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies for essential functionality, analytics and, where you consent, marketing. Where required, we request your consent through a cookie banner and you can manage your preferences at any time. We honour recognised opt-out signals such as Global Privacy Control (GPC) where legally required.

13. Region-Specific Disclosures

13.1 European Economic Area & United Kingdom (GDPR / UK GDPR)

Controller: WNC Technologies FZE LLC (details in Section 1). Legal bases are set out in Section 4. You have the rights listed in Section 11, and the right to lodge a complaint with your local Data Protection Authority.

13.2 California (CCPA/CPRA)

In the preceding 12 months we have collected the categories of personal information below. We do not “sell” personal information for monetary value; certain sharing for cross-context behavioural advertising may be considered “sharing” under the CPRA.

California residents have the rights to know, delete, correct, opt out of sale/sharing, and limit the use of sensitive personal information, and the right to non-discrimination.

To exercise them, contact us at privacy@alzaiq.io or use in-app controls; authorised agents may submit requests with proof of authorisation. California “Shine the Light” requests may also be made to the same address.

13.3 Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, Texas and other states with comprehensive privacy laws have similar rights to access, correct, delete and port their data and to opt out of targeted advertising, sale and certain profiling. You may exercise these rights as described above, and you have the right to appeal a refusal by contacting privacy@alzaiq.io.

13.4 Canada (PIPEDA)

We collect, use and disclose personal information with your knowledge and consent (express or implied as appropriate), and you may access and correct your information and complain to the Office of the Privacy Commissioner of Canada.

13.5 Brazil (LGPD)

We process personal data on the legal bases set out in the LGPD (including consent, performance of a contract and legitimate interests) and you have the rights of access, correction, deletion, portability and information about sharing. Our data-protection officer (Encarregado) can be reached at privacy@alzaiq.io ; you may also contact the ANPD.

13.6 United Arab Emirates (PDPL)

We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its regulations. You have the rights to access, rectification, erasure, restriction and objection, and to request information about processing and cross-border transfers, exercisable via the contact details in Section 17. Complaints may be made to the UAE Data Office.

13.7 Other Jurisdictions

Where the privacy laws of Australia, other GCC states, or other countries apply to you, we honour the rights and protections those laws provide. Contact us for jurisdiction-specific information.

14. Children's Privacy

The Service is not directed to, or intended for, children. You must be at least 16 years old (or the minimum digital age of consent in your country, if higher) to create an account and use the Service. Where local law permits use below that age with verifiable parental or guardian consent, such consent must be obtained before use.

We do not knowingly collect personal data from children below the applicable minimum age. If we learn that we have collected such data without the required consent, we will delete it promptly. Parents or guardians who believe a child has provided us personal data may contact us at privacy@alzaiq.io.

• Minors appearing in uploaded media: you must not upload footage that identifiably captures a minor unless you are that minor's parent or guardian, or you have obtained the verifiable consent of the minor's parent or guardian. We may remove such content.

15. Third-Party Links and Services

The Service may contain links to third-party websites, apps or services (for example, app stores, social platforms or payment providers) that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy notices.

16. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where the changes are material, provide additional notice (for example, in-app or by email).

Your continued use of the Service after the effective date of an update constitutes acceptance of the revised Policy, except where consent is required by law.

17. How to Contact Us

For any questions, requests or complaints regarding this Policy or your personal data, contact us at:

WNC Technologies FZE LLC (Alza)

Ajman Free Zone, Ajman, United Arab Emirates.

Email: privacy@alzaiq.io

Website: www.alzaiq.io