Updated 4 November 2026
Privacy policy
HOVI uses your personal data to book your classes, take payment and run the app. We collect as little as we can, we don't sell it, and there are no third-party advertising or analytics trackers in the app.
HOVI is provided by Hovi, Tiranë, NIPT M52412009E.
Who we are
This policy covers the HOVI mobile app, hovialbania.com and the HOVI partner dashboard used by venues.
HOVI is a marketplace for fitness and wellness classes in Albania. Members buy credit packs and use them to book classes at partner venues (gyms, studios, pools and similar). Venues use the partner dashboard to manage their schedule and see who has booked. Companies can give their employees monthly credits through HOVI.
The data controller is Hovi, NIPT M52412009E, Tiranë, Albania. In this policy "HOVI", "we" and "us" mean that business.
We follow Albania's Law No. 124/2024 on Personal Data Protection. Where you use HOVI from the European Union, the EU General Data Protection Regulation (GDPR) applies too.
What we collect and why
We only collect what the service needs to work. Data marked optional is yours to give or leave out.
Venue partners. When a business applies to join HOVI or uses the partner dashboard, we also collect the business's details, the contact person's name, email and phone number, and the bank account (holder, IBAN, bank, tax number) we pay the venue into. We use them to run the partnership and pay the venue.
Companies. When a company applies for company welfare at hovialbania.com/corporate, we collect its name, NIPT, city and address, its number of employees, and the contact person's name, email and phone number. We use them to review the application, run the company's account and invoice it.
Legal bases explained. Contract: we need it to provide what you signed up for. Consent: you chose to give it and can withdraw it at any time. Legitimate interest: we need it to run and improve HOVI, in a way you would reasonably expect. Legal obligation: the law requires us to keep it.
What we don't do
- We don't sell your personal data, or rent or trade it.
- We don't use third-party advertising networks, analytics tools or session recording in the app or on the site.
- We don't track you across other apps or websites, and we don't use your device's advertising ID.
- We don't build social profiles: other members can't search for you or see your bookings.
- We don't make automated decisions about you that have legal or similarly significant effects.
Who we share it with
Venues you book. A venue sees your name, which of its classes you booked and whether you checked in. It doesn't see your email, photo, credit balance or bookings at other venues. Your reviews show your first name and the initial of your surname.
Your employer, if you join company welfare. The company sees your name and email, whether you are active, paused or removed, and when you joined. It sees how many company credits its employees spent in a month in total, not which classes or venues you booked, and never your own credits or purchases.
HOVI staff. Only a small number of authorised staff, signed in with two-factor authentication, can open a member's record, and only to give support, handle payments or prevent fraud. Every time they open one, it is logged.
Service providers. These companies process data for us under contract and may use it only to provide their service to HOVI:
When you sign in with Google or Apple, or use their maps, their own privacy policies apply too.
When the law requires it. We share data with courts, police or regulators only when Albanian or other applicable law requires us to, or to protect someone's safety or our legal rights.
If the business changes hands. If HOVI is sold or merged, your data may pass to the new owner, who must keep to this policy. We will tell you before that happens.
Where your data is stored
Our main database is in the European Union, in France. Payments are handled in Albania by POK.
Some providers in the list above are based in the United States, and MapTiler in Switzerland. When data goes outside Albania and the EU, we rely on an adequacy decision for that country, on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission's standard contractual clauses. These safeguards also cover transfers from Albania under Law No. 124/2024. You can ask us for a copy of them.
How long we keep it
We keep data while your account is open, then delete or anonymise it, except where the law says we must keep a record.
Your rights
You can ask us to:
- See your data: get a copy of the personal data we hold about you.
- Correct it: you can change your name, photo and language in the app yourself, or ask us.
- Delete it: see "Deleting your account" below.
- Take it with you: get your data in a machine-readable format.
- Restrict or object: stop us using your data for a purpose based on legitimate interest, such as "For you" recommendations.
- Withdraw consent: for example, turn off notifications or location in your device's settings, or remove your photo. This doesn't affect what we did before.
To use any of these rights, email support@hovialbania.com from the address on your account. We reply within one month. It's free, unless a request is clearly unfounded or repeated.
Deleting your account
You can delete your account yourself, in the app's settings or on hovialbania.com (the steps are at hovialbania.com/delete-account). When you do:
- Your future bookings are cancelled.
- Your remaining credits are lost. They can't be refunded or moved to another account.
- Your name, photo, email address, saved cards, saved venues, notification settings and push tokens are removed.
- Your past bookings, purchases, training goals and reviews stay as anonymous records (see "How long we keep it").
- You are signed out on every device.
You can't delete an account while a pack payment is still being processed. Wait a few minutes and try again. Venue and staff accounts are closed by contacting us.
How we protect your data
- All traffic between the app, the site and our servers is encrypted.
- Database rules ensure each member can read only their own records, and each venue only its own bookings.
- Card numbers never reach HOVI's servers. POK handles them, with 3-D Secure where your bank uses it.
- Staff access needs two-factor authentication and is logged.
- Sign-in sessions expire after 30 days.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the Information and Data Protection Commissioner as the law requires.
Age limit
You must be at least 16 years old to use HOVI. We don't knowingly collect data from anyone younger. If you believe a child has an account, contact us and we will delete it.
Changes to this policy
We update this policy when HOVI changes what it collects or who it works with. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.
Complaints
You can write to us at support@hovialbania.com, or by post to Hovi, Tiranë, Albania.
If you're unhappy with how we handle your data, you can complain to Albania's Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale, idp.al). If you live in the EU, you can also complain to your country's data protection authority.
Contact us
For any question about this page, write to us at support@hovialbania.com.