Privacy Policy

Last updated: May 4, 2026

At Kombat Evolve, your privacy is important to us. This Privacy Policy describes how we collect, use, and protect your personal data.

1. Information We Collect

We collect the following types of information:

Name, email address, and contact information
Account activity and usage data
Payment details via Stripe (we do not store full card info)
Device and browser information
Gym-specific data: attendance, belt history, sparring sessions, class feedback, and coach journal notes (created and managed by the gym's owner/coaches)

2. How We Use Your Information

We use your data to:

Provide and maintain our Service
Communicate with you (updates, support)
Improve our platform and user experience
Comply with legal obligations
Power the AI assistant features when an authorised coach uses them (see §4)

3. Sub-processors

We do not sell your personal data. We share it with carefully selected sub-processors that help us deliver the service. Each one operates under a Data Processing Agreement.

| Sub-processor | Purpose | Data hosting | |---|---|---| | Supabase | Primary database + storage | EU | | Stripe | Payments + KYC | EU + USA (SCCs) | | Anthropic | AI assistant inference | USA (SCCs + ZDR) | | Resend / Brevo / Plunk / Postmark | Transactional email | EU | | OneSignal | Push notifications | USA (SCCs) | | PostHog | Product analytics | EU | | Vercel | Web app hosting | EU + USA edge |

The full sub-processors list, including DPA status and international-transfer safeguards, is on our AI & GDPR page.

4. AI Assistant — Special Notice

When an authorised coach uses the Black Belt Assistant, a pseudonymised slice of gym data (first names + last initial only, aggregated metrics, recent activity samples) is sent to Anthropic's Claude API for inference. No raw email addresses, phone numbers, postal addresses, or payment details are ever sent to the AI. Conversations are stored only in your browser's localStorage, never on our servers.

For full details, see our AI & GDPR page.

5. Cookies

We use cookies and similar technologies for analytics and user authentication. You can manage cookie preferences through your browser settings.

6. Data Retention

We retain your information as long as your account is active or as needed to provide our services. Detailed retention periods per data type are listed on the AI & GDPR page.

7. Your Rights

Under GDPR (and equivalent laws), you have the right to:

Access and correct your personal data
Delete your data
Restrict processing (including AI processing specifically)
Export your data in a portable format
Object to processing based on legitimate interest
Withdraw consent at any time
Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at contact@kombatevolve.com. We will respond within 30 days.

8. Security

We implement industry-standard security to protect your data: TLS in transit, encrypted-at-rest databases, role-based access control, audit logging on every AI-triggered action. However, no system is 100% secure.

9. International Transfers

Some of our sub-processors are based in the United States. For these transfers we rely on Standard Contractual Clauses (SCCs) and, for Anthropic specifically, on a Zero Data Retention agreement that prevents prompts and responses from being stored or used for model training.

10. Children's Data

We process minors' data only when registered by a parent or legal guardian via the parent-account flow. We do not knowingly process data of children under 13 without verifiable parental consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes are notified to OWNERs via email at least 30 days in advance.

12. Contact Us

For any questions about this Privacy Policy, or to exercise any of your data-protection rights listed above, contact us at contact@kombatevolve.com.

Thank you for trusting Kombat Evolve.