Privacy policy

1. What we collect

• Account: email address, password (stored hashed), optional name, creation date. Optional tracking data that you enter yourself (starting weight, height, goal, measurements).
• Purchases: product purchased, amount, date and Stripe payment identifiers. We never store card numbers.
• Email sign-ups: the address you provide to receive the free excerpt, the discovery program or the newsletter, along with the sign-up source and date.
• Contact messages: name, email, subject, message, IP address and browser at the time of sending.
• Technical logs: IP address, pages viewed, browser, referring site and timestamp, kept in the server logs for security and audience statistics.

2. Why

• To provide the service: access to the guide and the purchased weeks, downloads, member area (performance of the contract).
• To send what you requested: free excerpt, discovery program, newsletter, replies to your messages (consent, which you can withdraw at any time via the unsubscribe link or on request).
• To secure the website, prevent abuse and measure audience (legitimate interest).
• To meet our accounting and tax obligations for purchases (legal obligation).

3. Cookies and third-party services

The website uses a strictly necessary session cookie to keep you logged in, and a local marker so the free excerpt window is not shown again. The following services may set their own cookies or receive data:

• Google AdSense — ad display. Google and its partners may use cookies to serve ads based on your visits to this website and other websites. You can turn off ad personalization in Google Ads Settings. See how Google uses data from partner sites. For visitors from the European Economic Area, the United Kingdom and Switzerland, a consent banner lets you accept or refuse these cookies.
• Google Analytics (if enabled) — anonymized audience statistics.
• Stripe — secure payment for purchases; Stripe’s privacy policy.
• Resend — sending of transactional emails and the newsletter.

4. Retention period

• Account and purchases: as long as the account exists, then purchase records for the legally required period.
• Email sign-ups: until you unsubscribe.
• Contact messages: 24 months.
• Technical logs: 12 months maximum.

5. Your rights

You can request access to, rectification, erasure or portability of your data, object to processing or withdraw your consent, by writing to noreply@nidamtayebat.com or via the Contact page. We reply within 30 days. You can also contact the data protection authority in your country (CNDP in Morocco, CNIL in France).

6. Security and hosting

Data is hosted on a server in Europe, encrypted in transit (HTTPS) and protected by restricted access. Passwords are hashed. Purchased files are served through signed, time-limited links.

7. Minors

The website is intended for adults. We do not knowingly collect data about minors under 16.

8. Changes

This policy may change; the date at the top of the page shows the latest version. The legal notice and terms of sale are on the Legal notice page.