Privacy policy

Rattib is operated by White Horizon, a company registered in Oman. Each academy decides what it records about its families and why. White Horizon runs the software that stores it, and acts on the academy’s instructions alone.

An academy that wants its records corrected or erased writes to us, and so does a parent whose academy does not answer them.

An academy records, about the families it enrols:

• The parent: name, phone number, email address, postal address, and the language their invoices are written in.
• The child: name and date of birth.
• The plans they are subscribed to, the sessions they attended or missed, and the notes a coach leaves on a session.
• The invoices issued to them, what is owed, and what has been paid.

Recording attendance, issuing invoices, and sending each parent their invoice and, if it goes unpaid, one reminder. Nothing is used for advertising, and nothing is sold.

A parent’s phone number and name reach WhatsApp because that is how the message is delivered. A parent who is not on WhatsApp is written to by email instead.

Only the services that carry the messages:

• WhatsApp Business Platform, run by Meta, delivers the invoices and the reminders. Each academy sends from its own number.
• Resend delivers the same messages by email when a parent is not on WhatsApp.
• The server hosting the academy’s database.

The message a parent receives carries a link to a page listing what they owe. It is opened without signing in, from an address nobody can guess, and it shows nothing but the invoices that message covered.

Declaring a payment on it records that the parent says they have paid. The academy confirms or rejects it afterwards.

A record is kept as long as the academy keeps its account. An invoice is kept for as long as Omani accounting rules require it, even after the family leaves.

Deleting an academy’s account deletes its database.

The database sits on a single server. Messages sent through WhatsApp and Resend leave the country as those services carry them.

Rattib holds a child’s name and date of birth because the academy enrols them. A child never signs in and is never written to: everything goes to their parent.

Each academy sees its own records and no other’s. Passwords are stored hashed, never in the clear. The site is served over HTTPS.

Write to the academy first: they hold the record. If they do not answer, or the request is about Rattib itself, write to us at the address below. See also the data deletion page.

White Horizon, Muscat, Oman. contact@white-horizon.com