Short version: GuardUp collects the minimum data needed to provide the service. We never sell your personal information. You can delete your account and all associated data at any time from within the app.
1. Introduction
Welcome to GuardUp ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the GuardUp mobile application (the "App") and any related services (collectively, the "Service").
By downloading or using the App you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account information: email address and password when you register.
- Profile information: display name, belt level, and training experience.
- Training data: session logs, techniques drilled, training notes, sparring partners (by nickname/reference only), session duration, and intensity ratings.
- Goals and milestones: training targets you set within the App.
- Chat messages: messages you send to the in-app AI coach.
2.2 Information Collected Automatically
- Device information: device model, operating system version, and app version.
- Usage data: features accessed, screens viewed, and interaction patterns — collected in aggregate to improve the App.
- Crash reports: technical error data collected when the App crashes, including device state at the time of the crash.
- Push notification token: a device token used to deliver training reminders and milestone notifications (only if you grant permission).
2.3 Payment Information
Subscription payments are processed entirely by Apple (App Store) or Google (Google Play). We do not collect or store your credit card or banking details. We receive only your subscription status and the product ID purchased.
3. How We Use Your Information
- Provide, operate, and maintain the Service.
- Personalise AI coaching recommendations based on your training history.
- Track and display your belt progression and milestone achievements.
- Send training reminders and achievement notifications (with your consent).
- Monitor app stability, diagnose bugs, and improve performance.
- Conduct analytics to understand how users interact with the App (in aggregate, non-identifiable form).
- Comply with legal obligations.
4. Third-Party Services
We use the following third-party service providers. Each has their own privacy policy governing their data handling.
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except as described above or required by law.
5. Data Storage and Security
Your data is stored in Supabase's PostgreSQL database. We implement the following security measures:
- All data is transmitted over encrypted TLS/HTTPS connections.
- Row-Level Security (RLS) policies in Supabase ensure users can only access their own data.
- Passwords are hashed using Supabase Auth's bcrypt implementation — we never store plain-text passwords.
- Access to production databases is restricted to authorised personnel only.
While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active. When you delete your account through the App, all your personal data — including training logs, AI chat history, and profile information — is permanently deleted from our systems within 30 days.
Anonymised, aggregate analytics data (which cannot identify you) may be retained indefinitely to improve the Service.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your account and all associated data. You can do this directly within the App (Settings → Danger Zone → Delete Account).
- Data portability: request your training data in a machine-readable format.
- Opt-out of analytics: disable analytics data collection in the App settings.
To exercise any right, reach out to support at privacy@guardup.app. We will respond within 30 days.
8. Push Notifications
We may send push notifications for training reminders and milestone celebrations. You can opt out at any time through your device's notification settings or within the App (Settings → Notifications).
9. Children's Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child under 13, please reach out to support immediately at privacy@guardup.app and we will delete it promptly.
10. International Data Transfers
GuardUp is operated from [Your Country]. If you are located outside this jurisdiction, your data may be transferred to and processed in countries with different data protection laws. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place through our third-party service agreements.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by in-app notification. Your continued use of the App after changes take effect constitutes your acceptance of the revised policy.
12. Support
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to support:
- Email: privacy@guardup.app
- Support: support@guardup.app
- Website: guardup.app