Privacy Policy

Last updated: 14 October 2026

العربية

1. Who we are

The company responsible for the data described in this policy is EPA for Technologies, a limited liability company registered in Cairo, Egypt. In this policy, "we", "us" and "Pepper" mean that company.

You can reach us about anything to do with your privacy at hello@tryepa.com.

2. What we collect

• Your account: your name and email address. If you sign in with Apple or Google, they tell us your email address and, the first time, your name. We never receive your password for those accounts.
• Your profile (optional): a photo, and your gender if you choose to add it. We ask for gender because some studios run classes that are open only to women, and we cannot show you the right classes without it. You can leave both blank.
• Your bookings: the classes you book, cancel and attend, and whether each payment succeeded.
• Saved cards (optional): if you choose to save your card when you pay, our payment provider sends us a secure token for it, along with the card brand, the last four digits and the expiry date, so you can recognise it in your wallet. We never see or store your full card number or your security code. The token is useless to anyone else. It only works with our own payment provider, and only to charge a booking you make.
• Location (optional): if you allow it, your location is used to show distances and sort studios by how near they are. Your phone asks for precise location, because a rough one puts the wrong studios at the top of your list. We use it for that request and do not keep a history of where you have been.
• Notifications (optional): if you turn on push notifications, we store a device token so we can send them. Turning them off in your device settings stops this.
• How you use the app: product events such as screens opened, features used, what you type into search, and the price of a class you were looking at, along with your device type and app version. Once you are signed in these are linked to your account, with your name, so we can understand how real journeys go, not just anonymous totals. Our analytics provider also works out a rough location, at city level, from your network address.
• App recordings: we may record app sessions to find and fix problems. The recorder is set to hide text and images automatically. That masking is not perfect, so we keep these recordings to ourselves and use them for nothing but fixing the app.
• Crash and error reports: when something breaks we receive a report with your device type, the app version, what the app was doing at the time, and your account number if you are signed in. We ask that provider not to collect your network address, and crash reports carry no name, email or card details.

You can browse Pepper without an account. If you have not signed in, we do not know who you are. We still need your device's network address to keep the service available and to stop abuse, and our servers record it with each request.

3. This website

This website sets no cookies, runs no analytics and embeds nothing from anyone else. There is nothing here to track you with, and nothing for you to agree to.

The company that hosts the site handles your device's network address in order to deliver the page and keep the site up.

If you join the waitlist on our home page, we keep your WhatsApp number and your area, and your name and favourite class if you give them. We use them to message you on WhatsApp when Pepper opens near you, and to see which areas to open first. We use them for nothing else. They are kept by a company that stores them for us under contract, as section 6 explains, and we do not pass them to anyone else. You can ask us to delete them at any time by writing to hello@tryepa.com.

If you write to us for early access, or about bringing your studio onto Pepper, we keep your message and your email address so that we can answer you and tell you when we open near you. We use it for that and nothing else, we do not pass it to anyone, and you can ask us to delete it at any time by writing to hello@tryepa.com.

4. What we use it for

Running the service: signing you in, taking bookings and refunds, sending the booking notifications you asked for, showing you studios worth your time, and keeping the platform safe and working. We also use it to fix problems and to decide what to build next.

5. What other people can see

• Reviews are public. If you write a review, your name and your profile photo appear next to it, on the studio's page, to anyone who looks. That includes people who are not signed in. Please write reviews with that in mind.
• Studios see your name on the roster for classes you book with them, and they see your name and photo on any review you leave them.
• Nothing else about you is public. Your bookings elsewhere, your saved cards and your location are never shown to other users or to studios.

6. Who else handles your data

• Our payment provider processes your payments and holds your card details. We do not.
• Companies that run our service for us: hosting and databases, file and image storage, email delivery, push notifications, product analytics, and crash and error reporting. They act on our instructions, under contract, and only for Pepper.

We do not sell your personal data, and we do not hand it to other companies for their advertising.

Our analytics events are kept on servers in the European Union, and app recordings sit with the same provider in the United States. Crash reports are kept in the European Union.

Some of these companies keep data on servers outside Egypt. Where that happens we choose providers that protect it properly, and we ask them by contract to handle it only as we tell them to. If you want to know which providers we currently use, ask us and we will tell you.

7. Keeping your data, and deleting it

We keep your data for as long as you have an account.

You can delete your account from Profile → Account → Delete account. If you have a class coming up, cancel it first, then delete. When you do, we close the account so nobody can sign in to it again, and we erase your email address, your photo, your gender and any cards you saved.

Some things stay, and we want to be straight with you about them. Your bookings stay, because studios and we are required to keep records of classes that were attended and money that changed hands. Any reviews you wrote stay on the studios' pages, with the name you had. Your name therefore stays with those bookings and reviews. If you would rather a review came down, email us before you delete your account and we will take it down.

8. Your choices

• Location and push notifications are optional, and you turn them on or off in your device settings.
• You can ask us to stop using your data to understand and improve the app. Write to us and we will take your account out of it.
• Your photo and gender are optional. You can add, change or clear them from Profile → Account.
• You can remove a saved card at any time from Profile → Payment methods.
• You can ask us for a copy of your data, ask us to correct it, ask us to delete it, withdraw a consent you gave us, or object to what we are doing with it. Write to hello@tryepa.com and we will answer within six working days, which is the time Egyptian law gives us.
• If you are not happy with our answer, you can complain to the Personal Data Protection Centre in Egypt.

9. Children

Pepper is not for children. You need to be at least 16 to have an account. If you believe a child has made one, tell us and we will remove it.

10. Changes

If this policy changes in a way that matters, we will tell you in the app before the change takes effect.

11. The language of this policy

This policy is published in Arabic and in English. If the two versions differ, the Arabic one governs.

12. Talk to us

Questions about your privacy, or about anything here, go to hello@tryepa.com and a person will answer.