Privacy Policy
TL;DR — Fight Cafe stores your training data on your device and, if you create an account, in our secure cloud. We never sell your data. We don't run ads. You can delete everything at any time.
1. Who We Are
Fight Cafe ("we", "our", "us") is a mobile application for tracking BJJ training sessions, gym visits, and personal progress. The app is operated as an independent project. Questions? Reach us at privacy@fightcafe.app.
2. Information We Collect
We collect only what is necessary to provide the app's features:
- Account data — When you sign in with Apple, we receive a user identifier and, if you choose to share it, your name. We never receive your Apple ID email unless you opt in.
- Training data — Session dates, duration, technique tags, and journal entries you create within the app.
- Gym visit data — Gyms you mark as visited ("Mat Passport") including timestamps.
- Location — Approximate location (city-level), used only to show nearby gyms and calculate distances. Location data is never stored on our servers.
- Device data — App version and iOS version, collected anonymously for crash reporting only.
3. How We Use Your Information
- Provide, personalise, and improve the app experience
- Display your training stats, streak, belt progress, and Mat Passport
- Show gyms near your current location (on-device only)
- Diagnose crashes and fix bugs (anonymised telemetry via Apple's built-in crash reporting)
We do not use your data for advertising, profiling, or sale to third parties.
4. Data Storage and Security
Training data entered while not signed in is stored locally using SwiftData on your device. When you create an account, data is synced to a Supabase-hosted Postgres database (hosted on AWS us-east-1) with row-level security — only your account can read your rows. Data in transit uses TLS 1.2+. Data at rest is encrypted by the cloud provider.
5. Third-Party Services
- Apple Sign In — Apple's Privacy Policy
- Supabase (cloud database) — Supabase Privacy Policy
- Google Maps (optional "Rate on Google" links) — Google's Privacy Policy. Tapping these links opens Google Maps; we pass no personal data to Google.
We do not integrate Facebook, TikTok, advertising SDKs, or analytics platforms that track you across apps.
6. Children's Privacy
Fight Cafe is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, contact us and we will delete it promptly.
7. Your Rights and Choices
- Access & export — All your training data is visible within the app. We will provide a JSON export on request.
- Deletion — You can delete your account from Profile → Account → Delete Account. This permanently removes all cloud data within 30 days. Local SwiftData is erased when you delete the app.
- Location — You can revoke location access at any time in Settings → Fight Cafe → Location.
- Data portability — Email us to request a full data export.
If you are located in the European Economic Area or the UK, you have additional rights under GDPR / UK GDPR including the right to object to processing and the right to lodge a complaint with your supervisory authority.
8. Data Retention
We retain your data for as long as your account is active. After account deletion, data is purged from production systems within 30 days and from encrypted backups within 90 days.
9. Changes to This Policy
We may update this policy. Material changes will be notified via an in-app prompt before they take effect. The "last updated" date at the top of this page will always reflect the current version.
10. Contact Us
For privacy questions, data requests, or concerns:
- Email: privacy@fightcafe.app
- Web: fightcafe.app/privacy