Privacy notice

Effective 24 October 2026. Version 11.

Where Teamna is right now. Teamna is used by activity businesses in the United Arab Emirates. A business can sign up on the website; members and parents join only through an invite from their business. This notice describes what happens today, not what we hope to do later.

We hold no independent security certification. We are not SOC 2 audited and we are not ISO 27001 certified, and this page will say so until that changes.

Who we are

Teamna is a mobile app for managing classes and sessions at activity businesses: swimming academies, pilates studios and similar clubs. It is operated by Teamna FZC LLC, a company in the United Arab Emirates. Email us about anything on this page at hello@teamna.app. The business you signed up through can also put you in touch with us directly.

Two kinds of relationship

When you use Teamna as a member or a parent, most of what we hold about you is held on behalf of the business you joined. They decide who is in their classes, what the policy is, and what they keep. We hold and process it for them, and we do not use it for our own purposes.

A smaller set of information is ours: your account itself, the device you get notifications on, and the diagnostic records that keep the service running. Those we decide about.

What we collect

When you create an account

Your mobile phone number, your email address, or both. You sign in with either one.
Your name.
Your language and timezone, so times are shown correctly.
A push notification token for each device you install the app on, and whether you have opted in to WhatsApp messages.

To sign in, we send a one time code to your phone (by WhatsApp or SMS) or to your email address. We keep an email address to sign you in and to tell you when a sign-in method on your account changes. We store the code only in a form that cannot be read back.

When you use the app

The businesses you belong to, the sessions you or your children are booked into, and the history of bookings, reschedules and cancellations, including which policy rule was applied and why.
Package purchases, the credit balance behind them, recurring fees, and the payments and refunds attached to them.
The reminders and notices we have sent you, and whether they were delivered.
Messages you exchange with a business in the app, and the announcements a business posts to its members. A message between you and a business is stored by Teamna and is visible to you and to that business's staff, nobody else.
When a business asks its parents' WhatsApp group to find their children in the app: the children you pick, the name you type for yourself, and whether you are the mother, the father or another adult. The business sees it and checks it before it links anything.
When a business asks a coach who a child's parent is: the coach's answer, which can be a parent's name and mobile number. Only the business's office sees it.

Health questions, when a business asks them

A business can choose to ask short health questions when a new person joins, and to show its terms. It is off unless the business turns it on. When it is on, you answer yes or no to each question (for example an injury or pain now, or a pregnancy), you can write a short note for a yes, and you accept the terms. A parent answers for each child. We keep the answers, the version of the terms you accepted, who accepted and when.

Why: so the people who run your sessions know before a session starts that they must take care, and so the business has a record that you accepted its terms.
Who reads the answers: the owner and the admins of that business only. The rest of the team sees only a flag, “Health note”, next to the name. The business can choose to let its instructors or coaches read the answers too. Another business never sees them.
Where they never go: the answers are not in any export, not in product analytics (Mixpanel gets only “answered, with or without a yes”), not in AI Assistant, and not in our logs.
Deletion: the answers are deleted when the person’s profile is deleted or when you delete your account. The record that the terms were accepted (a version number and a time, no health data) stays with the business. If a profile that was never booked is removed for good, that record goes with it.

When you pay

Card details never reach our servers. Payments are taken by a licensed payment provider who handles the card and tells us only the amount, the currency, the outcome, and a reference. What we store is the record that a payment for a package or a fee succeeded or failed, so the business and the member can both see it.

When you fill in the early access form

The business name, contact name, mobile number, business type, role, whatever you typed about the tools you use today, and how you arrived at the page. We send one confirmation at once on WhatsApp to the number you gave. We use the details to help you set up. It is not a newsletter list and we do not sell it.

Automatically

Our servers keep request logs (the time, the route, a request identifier, and the outcome) and error reports, which is how we find out something is broken. We use Sentry for error reporting.

How the apps are used (Mixpanel)

The Teamna apps (desk.teamna.app and the mobile app), the invite pages at /join and the payment pages at /pay send product analytics to Mixpanel, so we can see which features help a business and where people get stuck. An event says what happened (for example "a booking was made" or "attendance was saved"), when, on which device type, and for which business. It identifies you by your Teamna account ID only.

In events, we never send your name, phone number or email, a child's name, or anything that you type (notes, messages). Your Mixpanel profile has your account ID, your roles, and the names of the businesses you belong to.
On desk.teamna.app, Mixpanel also records how pages are used (clicks and scrolling) with all text and all inputs masked before anything leaves your browser, except as the next point says. The mobile app, the invite pages and the payment pages are not recorded.
A business can agree with us in writing that, for its owner, admins and staff on desk.teamna.app, these recordings show the text on the screen, so we can see how the business uses Teamna and make it better. This is all the text that the screen shows: for example the names of members and children, and notes and messages after they are saved. What you type into a field, while you type it, and all images and photos stay masked. Only the Teamna team can see these recordings. Members and parents are always recorded with all text masked, also at that business. When the agreement ends, all text is masked again.
Mixpanel stores this data in the United States.

On this website (teamna.app)

The public pages of teamna.app use two tools. They load only on this website. The Teamna apps, desk.teamna.app, the invite pages at /join and the payment pages at /pay do not load them.

Google Analytics 4 counts visits: the pages you open, where you came from (for example a search or a link with a campaign tag), your approximate location, and your device and browser. It sets first-party cookies whose names start with _ga, which stay for up to 2 years. We keep the data for 14 months. You can stop it with the Google Analytics opt-out add-on.
Microsoft Clarity records how visitors use a page: clicks, scrolling and mouse movement, so we can see what is not clear. Clarity masks the text that you type and the text on the page before anything leaves your browser. It sets cookies whose names start with _clck and _clsk, which stay for up to 1 year.

We do not tell Google or Microsoft who you are. We send no name, email, phone number or account ID to either tool. When you send the early access form, the page also sends where your first visit came from (campaign tags, the referring site, and the first page you opened), which your browser keeps for 30 days under the name teamna_first_touch.

Children's data

Children do not have Teamna accounts. A parent or guardian creates a child profile inside their own account, and only the parent can see it or act on it.

A child profile holds the child's name and, optionally, a date of birth. That is all, and each field is there for one reason: the name so the club knows who is in the lane or on the mat, the date of birth so the child is placed in the right age group. There is no address and no free-form profile. A photo is there only when the parent or the business adds one. Health answers are there only when the business asks its health questions and the parent answers them for the child (see “Health questions” above); the business's owner and admins read them, and the rest of the team sees only a flag. Messages between a parent and a business may mention a child by name; those messages belong to the parent's account and are visible only to that parent and that business's staff.

We never send marketing to children, and we never send a notification to a child. Every message goes to the parent's phone. We do not profile children, we do not build advertising audiences from any of this, and we do not share child profiles with anyone other than the business the child attends.

A parent can archive a child profile in the app at any time. If you want it erased outright rather than archived, ask the business or ask us and we will do it, subject to the records the business has to keep about sessions that already happened.

Why we are allowed to hold it

To provide the service you asked for. An account, a booking, a payment and a reminder cannot exist without the data behind them.
Because a business asked us to. Class registers, policy outcomes and payment records are held on the instruction of the business you joined.
Because we have a legitimate interest in the service working. Logs, error reports and abuse protection fall here.
Because you agreed. WhatsApp messages are opt-in and you can turn them off in the app without losing anything else. Health answers are given by you (or by a parent for a child) when a business asks them, for the safety of the person in the session.

Who else sees it

Only the businesses you belong to, and the suppliers we need to run the product. Each one gets the minimum it needs to do its job:

Meta and Twilio, to send sign-in codes by WhatsApp or SMS.
Neon, which hosts the database (Frankfurt).
DigitalOcean, which hosts the servers.
A licensed payment provider, for card payments and payouts.
Meta, for WhatsApp messages, if you opted in.
Expo, for delivering push notifications.
Resend, for sign-in codes by email and the occasional email.
Whapi.Cloud, which sends WhatsApp messages from the Teamna number (for example the confirmation of the website form) and reads the WhatsApp groups a business connects to Teamna.
Sentry, for error reporting.
Mixpanel, for product analytics in the Teamna apps (United States).
Slack, where the Teamna team reads support requests and follows new businesses, sign-ins and the website form. It gets the business name and what a person wrote in a support request. For a sign-in it gets the person's name, role, business and full mobile number, or the full email address for a sign-in by email. For the website form it gets what the person sent in the form, with the full mobile number. For a new business it gets the owner's name and full mobile number (or email address). For a new account that has no business and no club 30 minutes after it was made, it gets the person's name, full mobile number or email address, how they signed in, and when the account was made. Only the Teamna team can read these channels (United States).
Anthropic (Claude), when a business uses the AI tools: to read a timetable photo, and to suggest which parent in the business's WhatsApp group belongs to which child. For those two it gets names and class names only. With AI Assistant, the owner or an admin of a business asks questions about the business or asks it to plan a change (a new coach, a moved or cancelled session, a message to families that the owner checks before it goes), and Anthropic gets the request and the data that answers it: names of members, children and staff, classes and session times, attendance, and amounts due or paid. It never gets phone numbers or email addresses, and it does not keep the data to train its models (United States). Teamna keeps the AI Assistant chats, with the thumbs up or down and the short note that the person can add to an answer. A few people of the Teamna team can read these chats to find and fix wrong answers. Teamna records each time a team member opens a chat. Product analytics gets only counts and a topic label (for example “payments”), never the text.
OpenAI, when the owner or an admin asks AI Assistant a question with their voice: it gets the recording and the name of the business, and gives back the text. The person reads the text and sends it as a question. Teamna does not keep the recording, and OpenAI does not use it to train its models (United States).
Google (Google Analytics) and Microsoft (Clarity), for visits to this website only.

We do not sell personal data, we do not rent it, and we do not hand it to advertisers. Businesses on Teamna cannot see each other's members: separation between businesses is enforced in the software on every read and every write.

Where it lives

The database is hosted in Frankfurt, Germany, and some of the suppliers above operate elsewhere, including the United States. That means data about you may be processed outside the UAE. We choose established providers who commit to protecting it, and we send them only what the job requires.

How long we keep it

Your account for as long as you use Teamna. Delete it in the app (Your data) or by email: we remove your name, number, email, photos, devices, health answers and your children’s details. The bookings, payments and messages stay with the business under “Deleted account”.
Bookings, payments and policy outcomes for as long as the business needs them, and longer where a payment record has to be kept for accounting reasons.
AI Assistant chats for as long as the business uses Teamna. A chat that the person removes from the history is hidden, not deleted. All chats go when the business is deleted.
Health answers while the person is a member of the business that asked them. They go when the profile or the account is deleted, and when the business is deleted.
Logs and error reports for a short operational window, then gone.
Early access form entries until we have finished talking to you about Teamna, or until you ask us to delete them.

What you can ask for

Ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop sending you something. Email hello@teamna.app, or ask through the business you joined and they will reach us; we answer as quickly as we can and never later than a month. If part of a request is something the business decides rather than us, we will tell you that plainly instead of quietly ignoring it.

Security, honestly

Traffic is encrypted in transit. The database is managed, access to it is restricted, and secrets are held in a secrets manager rather than in code. Separation between businesses is enforced by the application on every query, and a test in our build fails if a developer forgets. Card data never touches our systems.

What we are not claiming: no independent audit, no penetration test report, no certification. This is a young product, run carefully, and we would rather say that than imply otherwise.

Changes

When this notice changes we update the date at the top. If a change materially affects what we do with your data, we will tell you in the app rather than expect you to notice a new date on a web page.