Privacy Policy

Last updated: 29 October 2026

Template — not yet legally reviewed. This policy describes how the CombatScout app works today, but it is a draft. It must be reviewed by a qualified lawyer (including the operating entity, governing law and any GDPR/CCPA requirements) before the apps are submitted to the App Store or Google Play.

This Privacy Policy explains what information CombatScout (“CombatScout”, “we”, “us”) collects when you use our website at combatscout.com, the web app at app.combatscout.com and our iOS and Android apps (together, the “Service”), how we use it, and the choices you have. If you have any questions, email support@combatscout.com.

1. Information we collect

Account data

Your email address and password when you sign up. Passwords are handled by our authentication service (SuperTokens) and stored only as a secure hash.
Your role (fighter, manager or promoter) and display name.
Technical session data (session tokens and timestamps) needed to keep you signed in.

Profile information

Information you add to your profile, such as weight class, fight record, gym, location, bio, availability (for example “short notice” or “willing to travel”) and representation by a manager.
Fighter profiles can be published as a public fighter page that anyone with the link can see. The public page shows a limited set of profile fields and only a city-level location.

Photos and files

Profile and gallery photos, images you send in chats and event posters you upload. Profile photos are visible to other users of the Service; chat images are only visible to the participants of that conversation.
Documents or links you submit for verification (identity, record, manager or promoter verification). These are stored privately and are only seen by the CombatScout team reviewing your request.

Messages, matches and offers

Your swipes, matches, shortlists and saved fighters.
The content of messages you send and receive, and fight offers and counter-offers (event, date, location, purse and status).

Push notification tokens

If you allow notifications in the mobile app, we store a push token for your device and its platform (iOS or Android). Notifications are delivered via Expo's push service, Apple Push Notification service and Firebase Cloud Messaging. You can turn notifications off at any time in your device settings; tokens are removed when you sign out or delete your account.

Profile analytics

When a signed-in user views a profile, we record that view (who viewed which profile and on which day). Profile owners see a total view count; Premium users can also see daily views and a list of recent viewers. Your own profile views may therefore be visible to the people whose profiles you look at if they have Premium.
We do not use third-party advertising or tracking SDKs.

Payments

On the web, Premium subscriptions are processed by Stripe. Your card details are entered on Stripe's checkout page and are never sent to or stored by CombatScout. We receive and store your subscription status, plan, renewal date and Stripe customer and subscription identifiers. Stripe's own privacy policy applies to the data you give Stripe.
If in-app purchases are offered in the iOS or Android apps, those payments are handled by Apple or Google under their terms; we only receive the subscription status.

Safety reports and blocks

If you report or block a user, we store the report (reason, optional details and the message concerned) and the block so our team can review it and keep blocked users apart.

2. How we use your information

To provide the Service: show profiles in discovery, create matches, deliver messages, offers and notifications, and run shortlists, events and analytics.
To review verification requests and display verified badges.
To process Premium subscriptions and enforce free-tier limits.
To keep the community safe: review reports, enforce our Terms of Service and prevent abuse.
To respond to your support requests.

We do not sell your personal information.

With other users, as part of how the Service works (your profile, photos, messages to the people you talk to, offers to the parties involved).
With service providers that run the Service for us: hosting, our authentication service, push notification delivery (Expo, Apple, Google) and payment processing (Stripe).
For legal reasons, if required by law or to protect the safety of our users or the public.

4. Retention and account deletion

You can delete your account at any time inside the app: Profile → Settings → Delete account. When you delete your account:

your sign-in identity is deleted and you are signed out;
your profile, photos and push tokens are removed;
messages you sent are replaced with “[deleted]”;
offers already sent remain visible to the other participant under “Deleted user”, so they keep a record of the negotiation.

We may keep limited records (for example safety reports or payment records) where we need them to prevent abuse or meet legal obligations. Instructions are also on our support page.

5. Your choices and rights

Edit or remove profile information and photos at any time in the app.
Turn off push notifications in your device settings.
Block users you don't want to hear from.
Request a copy of your data or ask a privacy question by emailing support@combatscout.com. Depending on where you live, you may have additional rights (such as access, correction, deletion or objection) under local law.

6. Security

We use encrypted connections (HTTPS), hashed passwords and private storage for verification documents. No system is perfectly secure, so please use a strong, unique password.

7. Age requirement

The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

8. Changes to this policy

We may update this policy as the Service changes. We will update the date at the top, and for significant changes we will notify you in the app or by email.

9. Contact

Questions about privacy? Email support@combatscout.com.