The paperwork

1. Service agreement

The agreement is between Komplete (Dubai, UAE) and you, the coach. We provide your branded coaching platform as a subscription: the public site, the client app, the coach workspace, the WhatsApp integration, and the assistant, at the tier named in your order form. You provide the coaching. Your clients are your clients: we never contact them, market to them, or coach them.

The subscription runs month to month after setup. Either side can end it with 30 days written notice. We can suspend service for non-payment or unlawful use after telling you in writing and giving you 7 days to fix it. Setup fees cover the build, migration, and launch work and are not refundable once that work is delivered.

The platform supports your coaching business; it does not provide medical advice, and you stay responsible for the professional content of your coaching, whether you wrote a message yourself or approved the assistant's draft.

2. What you own, what we run

Yours: your brand and everything carrying it, your domain (registered in your name; we administer the DNS for you), your client relationships, all client data on the platform, your training method, plans, and any content you load in. On the Twin tier, the App Store listing is published under your own Apple Developer account, so the listing is yours from day one and nothing needs transferring later.

Ours:the software itself: the code, the infrastructure, and the assistant's machinery. Your subscription is a license to run your business on it, not a sale of the code.

When the subscription ends: you keep the domain, the brand, the App Store listing, and a full export of your data (section 5). Access to the software ends. We will point your domain wherever you tell us during the handover window.

3. Data processing

For your clients' personal data, you are the controller and Komplete is your processor under the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021). In plain terms:

• We process client data only to run the platform for you, never for our own purposes, and never for advertising.
• Client data includes health-adjacent information your clients share (injuries, conditions, pregnancy). The platform treats it as sensitive: database-level access control, private media storage, and mandatory escalation of medical topics to you rather than automated replies.
• Everyone at Komplete with access is under confidentiality obligations, and access is limited to what running the service requires.
• We use the subprocessors listed in section 4 and tell you before adding or changing one; if you object on reasonable data protection grounds, you can terminate without penalty.
• If a client asks you for their data or its deletion, the platform gives you the tools to answer, and we help where the tools are not enough.
• If we become aware of a breach affecting your data, we notify you without undue delay, target within 72 hours of confirming it, with what we know and what we are doing (section 6).
• On termination we return your data (section 5) and then delete it, except records the law requires us to keep.

4. Subprocessors and AI providers

The platform runs on a small, named set of providers. Each processes data only to deliver its function:

• Supabase (on AWS): database and private file storage. Hosting region is stated in your order form.
• Vercel: application hosting and content delivery.
• Stripe: payments. Card data goes to Stripe directly and never touches our servers.
• Meta: WhatsApp Business Cloud API, for messages to and from your business number.
• Anthropic: the reasoning behind check-in briefs, drafted replies, and program and nutrition drafts.
• Groq: voice note transcription and summaries.

Under our agreements with the AI providers, content sent through their APIs is not used to train their models. Some providers process data outside the UAE; the DPA's protections travel with the data wherever it is processed.

5. Export and cancellation

Your data is exportable at any time while you are a customer, and export is included, never a paid extra. The export covers your client list, check-in history, training and nutrition data, payment records, and message history, in readable formats (CSV and JSON).

If you cancel, or we part ways for any reason, you get a 30-day handover window after the end date: your export, DNS pointed where you want it, and reasonable help moving. After the window we delete your data from live systems within 60 days, keeping only what the law requires. We will never hold your client list hostage to keep you subscribed; if the product stops earning its fee, you leave with everything.

6. Security and breach response

The honest version, no badges: every table in the database enforces row-level access control, so a client can only ever read their own records and only the coaching team can read the roster. Photos and voice notes sit in private storage reachable only through short-lived signed links. Everything moves over TLS. Secrets live in managed environment stores, not in code. Access on our side is least-privilege and limited to the people who run the service.

The assistant is governed, not loose: it runs in the mode you set (approval-only, nights-only, or always-on), can be switched off per client or globally at any time, must hand medical, injury, pregnancy, distress, payment, cancellation, and legal topics to you instead of answering, and every message it reads, drafts, sends, or escalates is logged where you can audit it.

If a breach happens: we contain it, we tell you without undue delay (target within 72 hours of confirming), we tell you what was affected and what we changed, and we help you meet any duty you have to notify your clients. We do not currently hold formal certifications such as ISO 27001, and we will not pretend otherwise; if that changes, this page changes.

7. What your subscription includes

Included in the monthly fee: hosting, the database, maintenance and updates, the WhatsApp integration, and assistant usage (briefs, drafted replies, transcription, program and nutrition drafts) within the fair-use limits stated in your order form, which are set generously around your roster size.

Paid by you directly, at cost, because they are yours: Stripe processing fees on your clients' payments, your Apple Developer membership on the Twin tier (about USD 99 a year, in your name, which is what makes the listing yours), and domain renewal. Meta's per-conversation WhatsApp charges are included up to normal coaching volume for your roster; sustained volume beyond that is passed through at Meta's cost, shown on your invoice, never marked up.

Support: message us and we reply within one business day; if the platform is down, we work it the same day. If the assistant or the WhatsApp integration is ever unavailable, messages queue and nothing is lost; your clients can always reach you, and you can always reach your data.