Privacy Policy

1. Introduction

Welcome to Muay Thai AI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information when you use our mobile application and related services (collectively, the "Service").

This Privacy Policy explains our practices regarding data collection, use, and disclosure. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email Address: Obtained through Google Sign-In or Apple Sign-In authentication
• Full Name: Optional, provided through your authentication provider or manually entered
• User ID: A unique identifier generated for your account
• Account Creation Date: Timestamp of when you registered

2.2 Training & Progress Data

To provide personalized training experiences, we collect:

• Fighter Style Selection: Your chosen Muay Thai fighting style preference
• Drill Progression: Records of completed drills, current progress, and accumulated experience points (XP)
• Fighter Statistics: Performance metrics across categories including aggression, defense, power, agility, clinch work, timing, fight IQ, and attrition
• Upload History: Records of your video submissions and their analysis results

2.3 Video Content

When you submit videos for analysis:

• Video Files: Temporarily stored during the analysis process
• Video Metadata: File size, compression status, upload duration, and analysis duration
• Video Hash: A SHA-256 hash of your video to prevent duplicate submissions (this hash cannot be reversed to recreate the video)
• Extracted Frames: Individual frames extracted from your video for AI analysis, deleted after processing

2.4 AI Analysis Data

From our AI coaching system, we store:

• Analysis Results: Validation verdicts and criteria evaluations
• Coach Comments: AI-generated feedback on your technique
• Stat Rewards: Points earned for successful drill completions
• Model Information: Which AI model was used for your analysis

2.5 User Feedback

We collect feedback you provide about our AI coaching:

• Ratings: Your assessment of AI feedback (helpful, neutral, or not helpful)
• Text Feedback: Any written comments you submit about the coaching quality

2.6 Subscription Information

For paid subscriptions, we track:

• Subscription Status: Whether you're on a free or Pro tier
• Plan Details: Your subscription plan type (monthly/annual)
• Renewal Information: Subscription renewal dates

Note: Payment processing is handled entirely by Apple through the App Store. We do not collect or store payment card information.

2.7 Usage Analytics

We automatically collect:

• Login Events: When and how you sign in
• Feature Usage: Interactions with app features
• Error Reports: Technical issues and crash data to improve the app
• Device Information: Operating system version and app version for compatibility

3. How We Use Your Information

We use the collected information to:

• Provide AI Coaching: Analyze your videos and deliver personalized technique feedback
• Track Your Progress: Maintain your training history, statistics, and drill progression
• Improve Our Service: Enhance AI accuracy, fix bugs, and develop new features
• Manage Your Account: Authenticate you, manage subscriptions, and communicate important updates
• Prevent Abuse: Detect duplicate video submissions and enforce usage limits
• Send Notifications: Inform you of account-related updates (you may opt out)

4. AI Processing and Third-Party Services

4.1 AI Video Analysis

Your video content is processed by artificial intelligence services to provide technique feedback. When you submit a video:

• Frames are extracted from your video
• These frames are sent to AI providers (OpenAI and/or Google) for analysis
• The AI evaluates your technique against specific drill criteria
• Personalized feedback is generated and returned to you

Important: Only video frames and drill context are sent to AI providers. Your personal information (name, email, user ID) is not shared with these AI services.

4.2 Third-Party Service Providers

We work with the following third-party services:

5. Data Storage and Security

5.1 Where Your Data Is Stored

• Cloud Database: Account information, progress data, and analysis results are stored in encrypted databases hosted by Supabase
• Your Device: Authentication tokens are stored securely using your device's encrypted keychain (Expo SecureStore)
• Temporary Storage: Video files are temporarily stored during analysis and deleted after processing

5.2 Security Measures

We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest in our databases
• Row-level security policies ensuring users can only access their own data
• Secure token-based authentication with automatic refresh
• Regular security audits and monitoring

5.3 Data Retention

• Account Data: Retained until you delete your account
• Progress & Statistics: Retained to maintain your training history
• Video Files: Deleted after analysis is complete
• Video Hashes: Retained for duplicate detection purposes
• Analysis Results: Retained as part of your training history

6. Your Rights and Choices

6.1 Access Your Data

You can view your training progress, statistics, and upload history directly within the app.

6.2 Delete Your Data

You may request deletion of your account and associated data by contacting us at the email address below. Upon deletion:

• Your account and personal information will be removed
• Your training progress and statistics will be deleted
• Your upload history and analysis results will be erased

6.3 Opt-Out Options

• Analytics: You may request to opt out of analytics tracking
• Notifications: Manage notification preferences in your device settings

6.4 Data Portability

You may request a copy of your data in a machine-readable format by contacting us.

7. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 13, we will promptly delete that information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and third-party service providers operate. These countries may have data protection laws that differ from those in your country.

We ensure that any international transfers are subject to appropriate safeguards and that your information receives an adequate level of protection in accordance with applicable data protection laws. Our third-party providers maintain their own data transfer compliance mechanisms, which you can review via the links in Section 4.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected
• Right to Delete: You can request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell your personal information to third parties.

10. UK Users — UK GDPR Rights

If you are located in the United Kingdom, the following applies to you under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

10.1 Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing your account information, training data, and subscription details is necessary to provide the Service you signed up for
• Legitimate Interests: Analytics, error tracking, and service improvement, where these do not override your rights and freedoms
• Legal Obligation: Where we are required to process data to comply with applicable law

10.2 Your UK GDPR Rights

As a UK resident, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete personal data we hold about you
• Erasure: Request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Restrict Processing: Request that we limit how we use your data in certain circumstances
• Data Portability: Receive your personal data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests where you believe your rights override our interests

To exercise any of these rights, contact us at contact@muaythai-ai.com with the subject line "UK Privacy Request." We will respond within 30 days.

10.3 Right to Complain

You have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), if you believe we have not handled your personal data in accordance with UK GDPR.

• ICO Website: ico.org.uk
• ICO Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you a notification through the app or via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.