Privacy Policy
This is the plain-English version. We've kept it short on purpose — you should know what we collect and why.
Who we are
COMBO is an AI boxing coach app and the operator of getcombo.app. References to "we", "us", or "our" mean COMBO. References to "you" mean the person whose data we hold.
Privacy questions: privacy@getcombo.app
What we collect
Right now — waitlist (this website)
If you sign up on getcombo.app, we collect:
- Your phone number and the country you selected
- Your IP address and approximate region (used for spam protection)
- Your browser / device type (user-agent string)
- The timestamp of your signup
We do not collect your name, email, or any other personal information at this stage.
Once you use the COMBO app
When the app launches and you create an account, we'll also collect:
- Account info — name, email, profile picture (optional), Apple/Google sign-in identifier
- Camera input for live pose tracking. Raw video never leaves your device. Only the resulting pose keypoints (small numerical coordinates of your joints) are processed and may be uploaded for session analysis.
- Performance metrics derived from pose tracking — punch count, speed, power estimate, combo streaks, footwork score, etc.
- Session metadata — date, duration, type of workout
- Subscription / payment info — handled directly by Apple, Google, or Stripe; we receive only a status (active / not active) and an anonymous customer ID
- Crash reports and basic app analytics — what screens you use, what errors occur, how often you train
- Device info — model, OS version, app version
What we never collect
- Raw video or photos from your camera
- Your contacts, calendar, files, or other apps' data
- Precise GPS location
- Microphone audio (unless you record a voice note in-app, which is opt-in)
- Health records, medical data, or anything beyond your COMBO performance
How we use your data
- Send you one launch text when COMBO is ready (waitlist phase)
- Show you your performance scores, Fighter Card, history, and progress
- Run the AI that scores your sessions (pose keypoints only)
- Improve our pose-tracking models — using anonymized, aggregated data only. You can opt out in app Settings.
- Customer support
- Detect fraud, abuse, or violations of our Terms
- Comply with legal obligations
Who we share data with
We only share data with companies that help us run COMBO. We don't sell your data. We never have, we never will.
- Cloudflare — website hosting and database for the waitlist (US/EU)
- Twilio — sends the launch SMS (US)
- Apple App Store / Google Play — app distribution and in-app purchases
- Stripe — payment processing if you subscribe outside the app stores (US)
- Sentry / similar — crash reporting (anonymized stack traces)
- Authorities — only if we receive a valid legal request (court order, subpoena, etc.)
Where your data lives
Phone numbers are stored in Cloudflare's KV database, encrypted at rest, replicated globally. App data will be stored in the EU and the US. Your data may cross borders — when it does, we use Standard Contractual Clauses or equivalent safeguards.
How long we keep your data
- Phone numbers (waitlist) — until you opt out, or 24 months after the COMBO app launches, whichever comes first
- App account — until you delete your account
- Session and performance data — kept while your account is active; deleted with your account
- Anonymized analytics — up to 12 months
- Backups — purged within 90 days of deletion
Your rights
Depending on where you live, you may have some or all of these rights. We honor them globally — you don't need to be in the EU or California to ask:
- Access — get a copy of everything we have on you
- Delete — we'll wipe your data within 30 days
- Correct — fix anything wrong
- Object / restrict — tell us to stop processing your data
- Portability — get your data in a machine-readable file
- Opt out of marketing — reply STOP to any text we send, or email us
- Withdraw consent — at any time, with no consequences for the past use
To exercise any of these, email privacy@getcombo.app. We'll respond within 30 days.
If we don't resolve your concern, you can lodge a complaint with your local data protection authority. EU users can also reach the Swiss FDPIC (since we operate from Switzerland).
Children
COMBO is not intended for anyone under 13. We don't knowingly collect data from children. If you believe a child has signed up, email privacy@getcombo.app and we'll delete the data. Parents/guardians of users 13–17 can request deletion at any time.
Cookies and tracking
The waitlist site uses one piece of browser storage (localStorage) to remember the local signup counter — that's it. No advertising cookies, no cross-site tracking, no Google Analytics, no Meta pixel. The only third-party requests come from Google Fonts (for typography) and jsDelivr (for the country picker library).
The app may use first-party analytics for crash reporting and feature usage. Always anonymized.
Security
We use HTTPS everywhere, encrypt data at rest, and follow the principle of least privilege when granting access to your data. We can't promise a system is unbreakable — no one can — but we take it seriously and we'll notify you if there's ever a breach affecting your data.
Changes to this policy
If we make material changes, we'll notify you by SMS (since we have your number) and post a banner on getcombo.app for at least 30 days. The "last updated" date at the top tells you when we last revised this.
Contact
- Privacy questions: privacy@getcombo.app
- General: hello@getcombo.app