Privacy Policy
Last Updated: October 2026
xdumbel is published by KMW Investments LTD.
This Privacy Policy explains how Mostafa Younis Fitness ("we", "our", or "us") collects, uses, and protects personal information when you use our services, including our website, chatbot, and communication channels.
By using our website or communicating with us through Meta platforms or any supported channel, you agree to this Privacy Policy.
1. Who We Are
Mostafa Younis Fitness provides personalized online fitness and nutrition coaching. Our digital tools are used only for our own business operations and are not resold to third parties.
xdumbel is published by KMW Investments LTD.
Official website: https://www.xdumbel.com/auth
Email: ceo@kmwinvestment.com
2. Information We Collect
We may collect the following categories of data:
- Personal information such as name, age, gender, and contact details.
- Fitness and nutrition data such as weight, height, goals, and preferences shared for plan creation.
- Chat data exchanged through Meta platforms or other supported channels.
- Technical data such as device type, browser, IP address, and analytics information.
- Payment data processed securely by trusted third-party providers.
3. How We Use the Information
We use collected information only to:
- Deliver customized workout and nutrition plans.
- Communicate with clients through Messenger, email, WhatsApp, and similar channels.
- Provide support and answer inquiries.
- Improve our chatbot and website experience.
- Comply with Meta platform policies and applicable laws.
We do not sell, rent, or trade your personal information.
4. Sharing of Information
We may share limited data only when necessary:
- With Meta Platforms for communication services.
- With OpenAI or similar providers to process chatbot replies.
- With Claude (Anthropic) or ChatGPT (OpenAI), only when you choose to connect your account to them (see section 10).
- With service providers that host, analyze, or store data on our behalf.
- When required by law or to protect our legal rights.
All partners are subject to confidentiality and data-protection obligations.
5. Data Retention
We keep personal data only as long as needed for the intended purpose or as required by law. Chat data and submitted forms may be retained for up to 12 months unless deletion is requested earlier.
6. Data Security
We use industry-standard security measures to protect information against unauthorized access, alteration, disclosure, or destruction. Access to client data is limited to authorized personnel only.
7. Data Deletion and User Control
You may request deletion of your data at any time by contacting ceo@kmwinvestment.com. Requests are typically processed within 30 days.
You may also delete your chat history directly from your Facebook or Instagram account settings where applicable.
8. Legal Basis for Processing
We process personal data based on:
- Consent, when you voluntarily provide information.
- Contractual necessity, to deliver the services you request.
- Legitimate interest, to improve our services and communication.
9. Children's Privacy
Our services are not intended for children under 18. If we discover that we have received personal data from a minor, we will delete it promptly.
10. AI Assistant Connections (Claude and ChatGPT)
Trainee accounts can be connected to Claude (Anthropic) or ChatGPT (OpenAI). This happens only if you choose to connect and sign in.
While connected, and only as you ask, the assistant can receive your assigned workout and nutrition plans, scheduled and completed workouts, meals, daily summaries, body weight, points and streak. If you allow the record permission, it can also add meals, weight entries and workouts to your account. We never provide medical history, allergy details, contact details, payment information, photos, private notes or passwords.
You enter your password only on the xdumbel sign-in page. The assistant never receives it; it receives a secure access token that we can revoke.
To operate the connection we store:
- Connection records: which assistant, the permissions you granted, when it was connected, when it was last used and when it expires.
- Security tokens, stored only in hashed form.
- For recorded activity, a hashed request key and a summary of the result, so that a repeated request is not recorded twice. These are kept until your account is deleted.
- Usage logs with the tool name, assistant and outcome. They do not contain what you asked or your data.
You can see and disconnect connections in Settings, then AI Connections, or remove them inside Claude or ChatGPT. Access stops immediately, and a connection that is not used for 30 days expires. Once information is shown to Claude or ChatGPT it is also governed by Anthropic's or OpenAI's own policies, which we do not control, and information already shown in a chat stays in that chat. Deleting your account deletes your connections and these records. More details: https://www.xdumbel.com/ai-connector
11. Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the revised date. Continued use of our services after an update means you accept the revised policy.
12. Contact Us
If you have questions, concerns, or data-deletion requests, please contact us at ceo@kmwinvestment.com or visit https://www.xdumbel.com/auth.