PRIVACY POLICY

Last updated: September 29, 2026 · Effective: September 29, 2026

1. Who we are

FightMap ("FightMap," "we," "us," or "our") operates the FightMap mobile applications and the website at fightmap.app (collectively, the "Service"). The Service helps fans discover and buy tickets to local combat-sports events, and lets event promoters list events and sell tickets.

This Privacy Policy describes how we collect, use, and share information when you use the Service. By using the Service, you agree to this policy.

2. Information we collect

2.1 Information you give us

• Account information — name, email address, password (stored as a salted hash), and an optional display name. If you sign in with Google or Apple, we receive your name, email, and a unique provider identifier from them.
• Promoter profile information (promoters only) — promotion name, contact details, logo, social media links, and information required for payment processing (see §2.4).
• Event information (promoters only) — events you create, fight cards, ticket tiers, venue details, and any descriptions or images you upload.
• Purchase information — tickets you buy, quantities, and the events they belong to.
• Follows and notification preferences — the fighters and promotions you choose to follow, and which notification categories you have turned on or off.
• Communications — messages you send to our support team.

2.2 Information collected automatically

• Device and usage information — device model, operating system version, app version, IP address, language, and timestamps of your interactions.
• Location information — with your permission, we use your device's GPS to find events near you. You can also enter a city or ZIP code manually. We store your location and search radius on your profile so you don't have to re-enter it.
• Camera (promoters only) — we use the camera to scan ticket QR codes at the door. We do not record, save, or transmit camera frames; QR data is decoded on-device.
• Push notification token — if you allow notifications, Apple (APNs) or Google (Firebase Cloud Messaging) issues your device a token that lets us deliver them. We store it with your account and delete it when you sign out, remove the app, or delete your account. It identifies the app installation, not you personally, and we do not use it for advertising or tracking.
• Log data — server logs of API requests for security monitoring and debugging (typically retained for 30 days).

2.3 Information from third parties

• OAuth providers — when you sign in with Google or Apple, those services give us a unique identifier, your name, and your email address.
• Event data sources — we may import publicly listed combat-sports events from third-party sources (e.g., Ticketmaster) to expand the events shown in the app. We do not collect personal data from these sources.

2.4 Payment information

We do not collect or store payment card details ourselves. Payments are processed by Stripe, Inc. ("Stripe"). When you pay for a ticket, your card details are transmitted directly from your device to Stripe. We receive only a token, the last four digits of your card, and the payment status. Stripe's privacy policy is at https://stripe.com/privacy.

Promoters receive payouts through Stripe Connect. When you onboard as a promoter, Stripe collects additional information (legal name, business details, tax identification number, and bank account information) directly. FightMap does not see or store this information.

3. How we use your information

We use the information we collect to:

• Provide the Service — create and maintain your account, show you events near you, process ticket purchases, issue and validate QR-coded tickets, and pay out promoters.
• Communicate with you — send transactional emails and push notifications (purchase confirmations, event reminders, changes or cancellations to events you hold tickets for, and, for promoters, sales and account alerts), respond to support requests, and notify you of important changes to the Service.
• Send notifications you opted in to — if you follow a fighter or promotion and choose to be notified, we tell you when that fighter is booked on a card or that promotion announces an event. You can turn these off at any time (see §6.4).
• Improve the Service — analyze how users interact with the app to debug issues and prioritize new features.
• Comply with the law and enforce our terms — investigate fraud, abuse, or violations of our Terms of Service, and respond to lawful requests from authorities.

We do not sell your personal information to third parties. We do not use your data to train AI/ML models.

4. Who we share your information with

We share information only as described below.

4.1 Service providers

We use the following third parties to operate the Service. They access only the data necessary to perform their function and are contractually obligated to protect it.

• Supabase, Inc. — hosts our database, authentication, and storage. Privacy policy.
• Stripe, Inc. — processes payments and Connect payouts. Privacy policy.
• Google LLC — provides maps (Google Maps Platform), OAuth sign-in, and push notification delivery on both platforms (Firebase Cloud Messaging). Privacy policy.
• Apple Inc. — provides Sign in with Apple and (on iOS) push notification delivery (APNs). Privacy policy.
• SiteGround — hosts our website. Privacy policy.

4.2 Promoters and event partners

When you buy a ticket, we share the following with the promoter who is selling the event: your name, email address, ticket tier, quantity, and order total. Promoters need this to honor your purchase, manage admission, and provide customer service.

Promoters are independent businesses, not part of FightMap. Once we share your purchase information with a promoter, that information is also governed by the promoter's own privacy practices.

4.3 Legal requests and protection of rights

We may disclose information if we believe in good faith it is necessary to: comply with a law, regulation, subpoena, or court order; protect our rights, property, or safety, or those of our users or the public; investigate fraud or security issues; or enforce our Terms of Service.

4.4 Business transfers

If FightMap is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (e.g., by email and a notice on the Service) before your information becomes subject to a different privacy policy.

5. Cookies and similar technologies

On fightmap.app we use the minimum cookies and local storage necessary to operate the Service:

• Authentication tokens — to keep you signed in across visits.
• Preferences — to remember your location and search radius.

We do not use third-party advertising cookies. Some embedded components (Stripe's payment form, Google Maps) set their own cookies; see their privacy policies linked in §4.1.

6. Your rights and choices

6.1 Access, correction, deletion

You can view and edit your profile information, including your name, email, and saved location, from the Profile screen in the app. To delete your account, email privacy@fightmap.app from the address associated with your account. We will delete your personal information within 30 days, except where we are required by law to retain it (e.g., tax records of completed transactions).

6.2 European Economic Area, United Kingdom, Switzerland

If you are in the EEA, UK, or Switzerland, you have rights under the GDPR (or UK GDPR), including the rights to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. To exercise these rights, contact privacy@fightmap.app. You also have the right to lodge a complaint with your local data protection authority.

The legal bases on which we process your data are:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent fraud, and improve the product.
• Consent — for location access and any optional marketing communications.
• Legal obligation — to comply with tax and accounting requirements.

6.3 California residents

If you are a California resident, the CCPA gives you the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing for cross-context behavioral advertising. FightMap does not sell or share personal information for cross-context behavioral advertising. To exercise your other rights, contact privacy@fightmap.app.

6.4 Push notifications and email

Notifications about fighters and promotions you follow are sent only if you opt in when you follow. You can turn any category of push notification on or off in the app under Profile → Notifications, or turn them all off in your device's system settings. Every notification we send is also listed under Profile → Inbox. Transactional emails (purchase confirmations, password resets) cannot be turned off; any future marketing emails will include an unsubscribe link.

6.5 Location

You can revoke location permission at any time in your device's system settings. The app will still work, but you'll need to enter a city or ZIP code manually to see nearby events.

7. How long we keep your data

• Account data — for as long as your account is active. After deletion, we remove it within 30 days, except where retention is legally required.
• Transactional records (orders, tickets) — for up to seven years to meet tax, accounting, and audit requirements.
• Server logs — typically 30 days.
• Support correspondence — up to two years.

8. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for stored data, row-level security in our database, and least-privilege access controls. No system is perfectly secure; you can help by using a strong, unique password and enabling biometric unlock on your device.

If you believe your account has been compromised, contact security@fightmap.app immediately.

9. International transfers

FightMap is based in the United States, and our service providers (Supabase, Stripe, Google) may store data in the U.S. or other countries. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses or equivalent safeguards where required for transfers from the EEA, UK, or Switzerland.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact privacy@fightmap.app and we will delete it.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email (using the address on your account) or by a prominent notice in the Service before the changes take effect. The "Last updated" date at the top of this page shows when the policy was last revised.

12. Contact us

Questions about this policy or your data? Reach us at:

FightMap
Email: privacy@fightmap.app
General support: support@fightmap.app