Privacy Policy · Anabolic Kitchen

1. Who we are

The Anabolic Kitchen app and anabolic.qa are run by Anabolic Kitchen W.L.L. ("we", "us"). Our commercial registration number is 154270 and our commercial licence number is 198849. Our address is Building 25, Street 185, Zone 55 (Al Aziziya), Doha, Qatar. We decide how your information is used and are responsible for it.

For anything about your information, email contact@anabolic.qa or call +974 6627 6555.

2. The short version

We use your information to prepare and deliver your meal plan, take payment and help you.
You sign in with your phone number and a code we send to your phone. There is no password.
We never see your card details. They go straight to MyFatoorah, our payment provider.
Apple Health data and your meal log stay on your iPhone. They are never sent to us.
Your location is used only when you tap "Use my location".
Notifications are optional. You get offers only if you switch them on.
No advertising, no tracking across other apps or websites, and we never sell your information.
You can delete your account in the app: profile icon → Account → Delete account.

3. What we collect and why

Information	Why we need it
Phone number	It is your sign-in: we send a one-time code to it. It also lets our team and the driver reach you about your deliveries.
Name	So the kitchen and the driver know whose order it is, and to address you in the app.
Customer number	A six-digit number we give each customer, so our team can find your account and your orders quickly. It is kept when you delete your account (section 13).
Notes from our team	Short notes our staff add to your customer record to help with your orders and deliveries. They are kept when you delete your account (section 13).
Email address (optional)	Only if you add it, to contact you about your plan.
App language	To show the app and our messages in English or Arabic.
Delivery address: Home, Work or a name you choose, zone, street, building, unit, delivery notes and the map pin you set	To deliver your meals to the right door, and to work out the delivery charge, which depends on the distance to your pin. We also check the zone, street and building numbers against Qatar's official national address map (section 9).
Allergies you tell us	So the kitchen can take care with your meals. You set and change them in the app (Account → Allergies). The app marks dishes that contain them, avoids them when you tap "Surprise me", and asks you to confirm before you pick one of those dishes yourself. We pass them to the kitchen with every delivery. Allergies can say something about your health, so we use them only for your food.
A plan for someone else: their name and allergies	You can order a plan for another person under your account. You give us their name and allergies, and you confirm that they agree to share their name, address and allergies with us. Their name and allergies go to the kitchen with their meals, so the kitchen knows whose meals they are and can take care with them.
Your plan and orders	The plan, meals and snacks a day, plan length, start date, delivery window, the dishes booked for each day, meal changes, extras, discount codes, freezes, changes to the delivery time, plan and address, and delivery history. We need them to cook and deliver the right meals on the right days, and to show you your plan.
Delivery photos	When our driver delivers, they take two photos: your bag at the door, and the house. They show that your order was delivered. Only our staff can see them, and they are kept for about 7 days (section 11).
Payment records	Amount, date, status and MyFatoorah's payment references, to confirm your payment, show your receipts and keep accounting records. See section 8.
Push token (if you allow notifications)	A code your iPhone gives the app so we can send notifications to it. We store it with your account. See section 7.
Meal ratings (optional)	Good, Normal or Bad, for meals delivered in the last 14 days. Your ratings are linked to your account. We use them to improve the menu. Our staff can see your ratings and the totals. We also record whether you rated or closed the rating card each day, so it does not come back the same day.
End-of-plan survey (optional)	When a plan ends: a few quick questions about why it ended, the food and the delivery time, and a note if you want to add one. Your answers are linked to your account, and only our staff read them. We use them to improve our service.
Technical records	Sign-in times, the IP address your phone uses and error logs on our servers, to keep your account secure, stop misuse of SMS codes and fix problems.
Messages with our team	If you call, WhatsApp or email us, we keep what is needed to help you.

We do not ask for your ID number or any official document.

4. What stays on your phone

Some things the app works out or reads are kept only on your iPhone and are never sent to us:

Questionnaire answers: gender, age, height, weight, target weight, activity level and goal. The app uses them on your phone to suggest a plan and a daily calorie and nutrient target. We receive only the plan you choose to buy.
Your meal log: which delivered meals you marked as eaten, partly eaten or skipped, and other meals you add yourself (a dish from our restaurants, or a meal with the calories you type in). Each day's log starts afresh at midnight; the app keeps a short summary of the last 7 days on your phone for the week view.
The calories you have left for the day, which the app works out on your phone from your meal log and, if you allow it, the active energy in Apple Health (next section).
Steps you enter yourself.
Apple Health data (next section).

The questionnaire answers, your meal log and the steps you enter are removed when you delete the app from your phone. Apple Health data stays in Apple Health, which you control.

5. Apple Health

If you allow it, the app reads three things from Apple Health on your iPhone: steps, active energy (calories burned) and body weight. It uses them only to show you, in the app, your daily progress, how many calories you have left for the day (your plan's calories for the day, minus what you ate, plus the active energy you burned), and how your weight has changed since your plan started.

Read only. The app never writes to or changes your Health data.
It stays on your iPhone. It is never sent to our servers, never shared and never sold.
It is never used for advertising, marketing or profiling, and we never store it in iCloud.
It is never used to fill in the details you send us.
You can turn access off at any time in Settings → Privacy & Security → Health → Anabolic Kitchen.

The app works without Apple Health. You can enter your steps yourself.

6. Location

The app asks for your location only when you tap "Use my location" while adding a delivery address, to move the map pin to where you are. It never tracks you and never uses your location in the background. You can instead move the map to your building yourself without allowing location.

What we save is the pin of your delivery address, not your movements.

7. Notifications

Notifications are optional. If you allow them, the app sends you updates about your plan and deliveries, for example that your payment is confirmed, that your meals are on the way, or that the kitchen will be closed.

Offers are sent only if you switch them on in Account → Notifications.
Reminders: if you leave an order unpaid in your cart, we may send you a reminder while it can still be paid. The day after a plan ends, if we are nearly full, we may send you a message that you can renew to keep your place.
To reach your iPhone, the app gets a push token from it. We store the token with your account. It is deleted when you sign out or delete your account.
Notifications are sent through Expo (650 Industries, Inc., a US company that runs the push service) and Apple. They receive the push token and the text of the message.
You can turn notifications off at any time in the app (Account → Notifications) or in your iPhone's Settings → Notifications → Anabolic Kitchen.

8. Payments

You pay inside the app. MyFatoorah, our payment provider, handles your payment:

Debit or credit card: you enter your card in MyFatoorah's card form, shown inside the app.
Apple Pay: inside the app.
Qatar debit cards (NAPS): the app opens MyFatoorah's secure payment page.

Your card number, expiry date and security code go straight to MyFatoorah. They never reach us.

We send MyFatoorah your name, mobile number, the amount and an order reference so it can take the payment. MyFatoorah tells our server the result, which may include the payment method and a partly hidden card number. MyFatoorah's own privacy policy covers the details you give it.

9. Who we share it with

Only with the people and companies that help us run the service, and each gets only what it needs:

Who	What and why
Our kitchen, delivery and customer-service staff	Your name, phone, address and pin, delivery window, dishes and allergies (or the name and allergies of the person a plan is for), to prepare and deliver your order and help you. Deliveries are made by our own drivers, not a courier company. Only staff who need it can see it. Our staff also see meal ratings (yours and the totals) and read end-of-plan survey answers.
Supabase	Our database, sign-in and server provider. It stores and processes the information in section 3 for us. It also serves the menus and photos shown on this website, so it receives your IP address and browser details when they load.
MyFatoorah	Our payment provider, as described in section 8.
Our SMS server and Ooredoo	Your phone number and the one-time code. Our own small server in Doha, Qatar passes the code to Ooredoo, which sends it to your phone by SMS.
Expo (650 Industries, Inc., USA)	Runs our push notification service. It receives your push token and the text of each notification, to deliver it to your iPhone (section 7).
Apple	Apple's push service receives your push token and the text of each notification, to deliver it. Apple Maps draws the map when you set your pin, and receives the map area shown, not your account details. If you have chosen in your iPhone settings to share analytics with app developers, Apple may send us crash reports that do not identify you. Our drivers may also open your pin in Apple Maps to find the way.
Google Cloud	Helps us in three ways. Translation: so our kitchen staff can read the kitchen sheets in their language, it receives the names on our lists of dishes, allergies, add-ons and diets (never who has them), the sheets' fixed labels, and the comments on orders, with phone numbers and email addresses removed. For translation it never receives the name, phone number or address on your account or order, and never the delivery notes. We delete our copies of translated comments once they have not been used for 30 days. Route planning: to plan our drivers' routes, it receives map pins, delivery windows and the number of bags, with no names or phone numbers. Maps: our staff see delivery pins on Google Maps, and our drivers may open your pin in Google Maps to find the way.
Qatar's national address map (CGIS, Ministry of Municipality)	We check the zone, street and building numbers of your address against Qatar's official national address map. Only these three numbers are sent, never your name, phone number or map pin.
Vercel	Hosts this website. To show you these pages it processes your IP address and browser details.
WhatsApp	Only if you message us there. WhatsApp's own terms and privacy policy apply.
Authorities	Only when Qatari law requires it.

The companies that process information for us (Supabase, MyFatoorah, Ooredoo, Expo, Apple, Google and Vercel) may use it only to provide their service to us, and they must protect it at least as well as we do.

We do not sell your information, do not share it with advertisers or data brokers, and do not use it for advertising. The app has no advertising or analytics tools and does not track you across other apps or websites. This website uses no cookies and no analytics.

Our restaurants. Our Anabolic Kitchen and Anabolic To Go restaurants are also available on delivery apps. Each delivery app's own terms and privacy policy apply to what you do there.

10. Where it is stored

Supabase runs our database, sign-in and servers on Amazon Web Services in Mumbai, India, so your information is stored outside Qatar. SMS codes pass through our own server in Doha, Qatar. Notifications pass through Expo, a US company, and Apple. Translation and route planning requests go to Google Cloud. Vercel hosts this website.

Your information travels over encrypted connections and access to it is controlled. We transfer it only as Qatari law allows.

11. How long we keep it

Information	How long
Name, email, phone number and saved addresses	While your account is open. Erased when you delete your account (section 13).
Allergies	While your account is open. If you delete your account while a plan is still being delivered, that plan's allergies stay with it until its last delivery so the kitchen keeps the food safe, and are then removed.
Push token	Until you sign out or delete your account.
Meal ratings and survey answers	While your account is open. Deleted when you delete your account.
Delivery photos	About 7 days, then deleted. Our staff can choose a shorter time.
Translated order comments	Deleted once they have not been used for 30 days.
Customer number, the scrambled fingerprint of your phone number, and our staff notes	Kept after you delete your account, with no end date, so we can recognise you if you sign up again with the same number (section 13).
Orders, and the name, phone and delivery address saved with each order (including any saved address you move a plan to)	Kept with our order records for as long as Qatari law requires us to keep accounting records, because orders are part of our accounts.
Payment records	The same as orders.
Technical records (server and sign-in logs)	About 7 days.
Backups	Replaced within about 7 days.

12. Your rights

Under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016), you can ask us to:

show you the information we hold about you and give you a copy;
correct it. You can change your name and email yourself in Account → Personal details, and your allergies in Account → Allergies;
delete it (section 13);
stop a use of it.

You can also take back any permission you have given, at any time: turn off Apple Health, location or notifications in your iPhone's settings, or notifications in the app (Account → Notifications).

To make a request, WhatsApp us on +974 5099 9857 from the phone number on your account, or email contact@anabolic.qa and include that number, so we can check it is you. We reply within 30 days. If you are not satisfied with our answer, you can complain to the competent authority in Qatar.

13. Deleting your account

In the app: profile icon → Account → Delete account. Before you confirm, the app tells you what will be erased and what will be kept.

When you delete your account:

Erased: your name, email and phone number on your customer record, your saved delivery addresses, your push tokens, your meal ratings and survey answers, and the delivery photos taken so far (within a day).
Your sign-in is closed for good. The old account can never be used again. Your phone number is freed, so you can sign up with it again later.
A plan that is still running is not cancelled. It keeps being delivered until it ends. To deliver it, the order keeps the name and phone number saved when you ordered and the address it is delivered to, and the plan's allergies stay with it until its last delivery, for safety, and are then removed. If you want deliveries to stop, cancel your plan first (see our Terms).
Kept: your orders and payments, for our accounts (section 11), with a note for our staff of the date you deleted your account.
Your customer number is kept, with a scrambled fingerprint of your phone number (not the number itself) and our staff's notes about you. If you sign up again with the same number, you get the same customer number back, our staff see their notes again, and they can see that the number belonged to an earlier account and that account's orders (which we keep for our accounts anyway). Nothing else comes back to your new account: not your orders, allergies, addresses or ratings.
Information kept only on your phone (section 4) is removed when you delete the app. Apple Health data stays in Apple Health.

You can also ask us to delete your account by WhatsApp from the phone number on the account, or by email.

14. Security

Information travels between the app and our servers over encrypted connections (HTTPS).
Each customer can read only their own information, and staff access is limited to what each role needs.
You sign in with one-time codes, and your session is kept on your phone.

No system is perfectly secure. If a breach puts your information at risk, we will tell you and the authorities as the law requires.

15. Children

You must be 18 or older to create an account and order. The app is not aimed at children, and we do not knowingly collect information from children.

16. Changes to this policy

If we change this policy, we update the date at the top. If a change matters, we will tell you in the app before it applies.

This policy is published in English and Arabic. If the two differ, the Arabic version applies.

17. Contact us

Anabolic Kitchen W.L.L., Building 25, Street 185, Zone 55 (Al Aziziya), Doha, Qatar