Privacy Policy

Information you give us — your name, contact details, account and booking records, and payment information when you reserve a class or buy a package.

Information collected automatically — device and browser data, IP address, and usage analytics, including via cookies.

Information from third parties — our booking platform JoinIn2, payment processors, and any social login you choose to use. We do not knowingly collect data from under-18s except through a parent or legal guardian, and the account holder is authorised to exercise her rights on her behalf.

To provide and manage your account, classes and packages; to respond to enquiries and provide support; to send marketing only where you've opted in; to improve and personalise the experience; and to keep the service secure and meet our legal obligations.

We share data only as needed to run the service — with trusted providers such as JoinIn2, payment gateways and email platforms; with analytics partners; with affiliated KARVE entities; and with authorities where required by law. We do not sell your personal data.

KARVE can be used through AI assistants (such as ChatGPT or Claude) via our live schedule feed and a read-only lookup tool. When an assistant looks up class times or availability for you, we record analytics that do not identify you directly — which assistant was used, the search terms, the classes shown, and, if you tap a booking link, that click and its approximate city (from your IP address) — so we can understand demand. This is the same kind of analytics we keep for our website.

These AI tools are read-only. They show classes and hand you a booking link, but they cannot book or pay on your behalf and never receive your name, email, phone number or JoinIn2 password. Booking and payment always happen after you sign in to JoinIn2 or the KARVE app, under JoinIn2's own privacy terms. We do not sell this data or use it to identify you individually.

We protect your data with SSL/TLS encryption and restricted access, and store it on secure servers. Where data is transferred internationally, we apply appropriate contractual safeguards.

Under Saudi PDPL you may: know why we collect and process your data and on what legal basis; see your data and get a copy in a clear, readable format; have it corrected, completed or updated; ask us to destroy it once it is no longer needed for the purpose it was collected for; ask us to restrict processing while you are disputing whether the data is accurate, until it is verified; withdraw your consent at any time where processing rests on consent; object to your data being used for direct marketing; complain to the Saudi Data & AI Authority (SDAIA); and seek compensation for damage where the law provides for it. Contact us using the details below and we will respond within 30 days of receiving your request.

We send marketing only with your consent, and you can unsubscribe at any time. We don't share your details with third parties for their own marketing without your permission.

Some of our providers may process or store data outside the Kingdom of Saudi Arabia. Where data is transferred internationally, we apply appropriate safeguards — including contractual protections — so it stays protected to the standard required by Saudi law.

We may update this policy from time to time. Material changes will be communicated through our website or by contacting you directly.

Questions about your data or this policy? Email Karve@alfmile.co or write to us at Midtown Plaza, Prince Sultan Rd, Ar Rawdah, Jeddah 23435, Saudi Arabia.