Data Protection & Privacy

At Youth Challenge Company (YCC), we value your privacy and are committed to protecting your personal data. We comply with the Personal Data Protection Law (PDPL) of Saudi Arabia, which provides clear guidelines on how businesses should handle personal data. This policy applies to both individuals and companies using our services.

## What Personal Data We Collect

We collect personal data from our users to provide better services and experiences. This data may include:

- Contact information such as name, email address, and phone number.

- Health and fitness data such as Body Mass Index (BMI), heart rate, water intake, and other body measurements.

- App usage data such as login times and feature usage.

For companies participating in our programs, we collect company-related information such as company name, address, contact details, and aggregated, anonymized employee participation data. No individual employee data will be shared with the company without explicit consent from the individual.

## How We Use Your Personal Data

We use your personal data to:

- Provide, maintain, and improve our services.

- Personalize our services to meet your needs.

- Communicate with you, including responding to your comments, questions, and requests.

- Send technical notices, updates, security alerts, and support messages.

- Monitor and analyze trends, usage, and activities in connection with our services.

- Comply with legal requirements and legal process, requirements of public authorities, or to pursue our legitimate business interests where they do not override your rights.

For companies, we use the information to:

- Register your company for our programs and services.

- Provide aggregate, anonymized data about your employees' participation in our programs.

- Communicate with you about updates, program details, and other company-related matters.

## Consent

Consent is a cornerstone of data protection law. We will always ask for your consent before collecting and using your personal data. You will be given the choice to opt-in to data collection and usage, and you can withdraw your consent at any time.

## Data Protection Rights

Under the PDPL, you have the right to:

- Access your personal data.

- Correct inaccurate personal data.

- Delete your personal data.

- Restrict the processing of your personal data.

- Transfer your personal data to another entity.

- Object to the processing of your personal data.

To exercise any of these rights, please contact us using the contact information provided below.

## Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

## Sharing Your Personal Data

We will not share your personal data with third parties without your consent, except for third parties who are acting as our agents or consultants to provide our services, and who are bound by strict data protection agreements.

For companies, we only share aggregate, anonymized data about your employees' participation in our programs. We do not share individual employee data without explicit consent from the individual.

## Contact Us

If you have any questions about our data protection practices or if you want to exercise your data protection rights, please contact us at info@ycc.com.sa.

By using our services, you acknowledge that you have read and agreed to this privacy policy. This policy may be updated from time to time, and we will notify you of any significant changes.

We appreciate your trust in us and are committed to protecting your personal data.