Skip to main content
Lover Diet Center logo
Lover Diet CenterTogether for a better life

Privacy Policy

Privacy Policy

How we handle your data

We hold health information about you. This page says exactly what we collect, why, who else sees it, and what you can ask us to do with it — in plain language.

Last updated:

In short

Your weight, measurements and any conditions or allergies you share are used to build your plan and for nothing else. We never sell them, never use them for advertising, and never share them outside the providers listed below.

Who we are

Lover Diet Center is a nutrition and wellness practice operating in the United Arab Emirates, founded by Dr. Wael Mousa. This policy covers loversdc.com, the client dashboard, and the Lover Diet Center mobile application.

It explains what personal data we collect, why we hold it, who else can see it, and what you can ask us to do with it.

Health data — read this part

To build a nutrition plan we ask for information about your body and your health: your weight over time, height, age, sex, activity level, goal, and — if you choose to give them — medical conditions, allergies and food preferences.

Under UAE Federal Decree-Law No. 45 of 2021 this is sensitive personal data. We collect it only because you asked us for a nutrition service that cannot be delivered without it, and we use it for nothing else. We do not sell it, we do not use it for advertising, and we do not share it with anyone outside the people named in this policy.

Medical conditions and allergies are optional. You can use the service without them; your plan will simply be less tailored.

What we collect

Everything below is either given by you or created by your use of the service. We do not buy data about you from anyone.

Account
Name, email address, phone number, country and city, and a profile photo if you upload one.
Body & health
Age, sex, height, starting / current / target weight, activity level, goal, and optionally medical conditions, allergies and food preferences.
Progress
Weight entries with their dates and any note you attach, body-fat percentage if you record it, and daily water intake.
Plan & sessions
The meal plan prepared for you, and appointments including type, date, time, location and the practitioner’s notes.
Orders
Items ordered, amounts, and the delivery details you enter: recipient name, phone, address, emirate, postal code and delivery notes.
Payments
Payment status, amount, currency and the transaction reference returned by our payment provider. Card numbers never reach our servers.
Technical
Sign-in session cookies, your language and currency choice, and the IP address of requests to our sign-in and password-reset endpoints, used only to limit abuse.

Why we hold it

To prepare and adjust your nutrition plan, and to let your practitioner follow your progress between visits.

To run your account: signing you in, keeping you signed in, and letting you recover access.

To fulfil orders you place and to handle the payment, delivery and any refund.

To send you messages that are part of the service — plan updates, session reminders, order status, password resets. We do not send marketing email unless you ask for it.

To keep the service secure: limiting repeated sign-in attempts, and recording administrative actions so changes to your record can be traced.

Who can see it

Inside the practice, your record is visible to Dr. Wael Mousa and to authorised staff who need it to deliver your plan. Every administrative action on your record is logged.

Outside the practice, we use the following providers. Each receives only what it needs to do its job, and none of them is permitted to use your data for their own purposes.

Supabase
Stores the database, your account credentials and uploaded images.
Vercel
Hosts the website and application, and provides aggregate traffic statistics that do not identify you.
Paymob
Processes card payments. Card details go to Paymob directly and are never stored by us.
Resend
Delivers service email — receipts, password resets and notifications.
Upstash
Holds short-lived counters used to rate-limit sign-in and password-reset attempts.
Google
Only if you choose "Continue with Google" to sign in.
YouTube
Only when you press play on a video on our About page. Until then YouTube receives nothing.

Where your data is stored

Our database is hosted in the European Union and the application is served from infrastructure in the United States. This means your data is transferred outside the UAE.

We rely on providers that offer contractual data-protection commitments for these transfers. If you would prefer your data not to leave the UAE, we cannot currently offer that, and you should not use the service.

How long we keep it

We keep your account and health record for as long as you have an account with us, because your history is what makes the plan work — a weight trend is meaningless without its past.

If you close your account we delete your profile and health data. Order and payment records are kept longer where we are required to retain them for accounting and tax purposes, reduced to what those obligations need.

Rate-limiting counters expire within hours. Administrative action logs are kept so changes to client records remain auditable.

Your rights

You can ask us to show you the data we hold about you, correct anything wrong, delete your account and health record, or send you a copy in a portable format.

You can withdraw consent for the optional health fields at any time by clearing them in your profile, and you can unsubscribe from any non-essential message.

Write to us at the address below. We will respond within 30 days. If you are not satisfied with our answer, you may complain to the UAE Data Office.

Children

The service is not intended for anyone under 18. We do not knowingly create accounts for children. A nutrition plan for a child should be arranged directly with the clinic by a parent or guardian, not through this app.

If you believe a child has created an account, contact us and we will remove it.

Security

Your record is protected by row-level access rules in the database, so one client's data cannot be read by another. Connections are encrypted in transit. Sign-in and password-reset attempts are rate-limited on our servers. Sessions expire after inactivity.

No system is perfect. If a breach affects your personal data we will notify you and the relevant authority as required by law.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use your health data, we will tell you in the app before it takes effect rather than relying on you to re-read this page.

Contact us

For any privacy question or to exercise any of the rights above, email support@loversdc.com or message us on WhatsApp at +971 52 903 3110.

Lover Diet Center, United Arab Emirates.

Questions or complaints?