Privacy Policy

1. What data we collect

Providers: Name, email address, profile photo (optional), business details, availability settings, payment account IDs (Stripe, Paystack, Flutterwave), and WhatsApp number (optional).

Clients: Name, email address, phone number (optional), session history, progress entries (weight, measurements — entered by the Provider), and payment records.

We do not store card numbers. Payment data is handled entirely by our payment processors (Stripe, Paystack and Flutterwave).

2. How we use your data

• To provide the booking and client management service
• To send transactional emails (booking confirmations, reminders, portal access links)
• To process payments via Stripe, Paystack or Flutterwave
• To send WhatsApp notifications if the Provider has enabled this feature
• To enforce free tier limits and manage Pro subscriptions

We do not sell your data. We do not use it for advertising.

3. Who we share data with

We share data only with the third-party services necessary to run the platform:

• Supabase — database and authentication (EU region)
• Stripe, Paystack and Flutterwave — payment processing
• Resend — transactional email delivery
• Twilio — WhatsApp notifications (only if Provider has enabled this)
• Vercel — hosting and edge functions

4. Client data and Provider responsibility

Providers are the data controllers for their clients' personal data stored in Foige. Providers are responsible for having a lawful basis to store and process their clients' data, and for informing clients how their data is used.

Foige processes this data on behalf of Providers as a data processor under UK GDPR.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where we are required to retain it for legal or financial compliance (e.g. payment records, which we retain for 7 years).

6. Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You can also object to processing or request data portability. To exercise these rights, email us at privacy@foige.online. We will respond within 30 days.

7. Cookies

We use only functional cookies required to maintain your login session. We do not use tracking or advertising cookies.

8. Security

All data is encrypted in transit (TLS) and at rest. Access to the database is restricted by row-level security policies. We do not store plaintext passwords — authentication is handled by Supabase Auth.

9. Contact

For privacy questions or data requests: privacy@foige.online