Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains how HomeCombat ("we", "us", "the app") collects, uses and protects your information when you use the HomeCombat mobile application. By using HomeCombat you agree to this policy.

1. Information we collect

We only collect what the app needs to work and improve. Specifically:

• Account information. When you create an account, we collect your email address. If you sign in with Google or Apple, we receive your email address and basic profile information from that provider.
• Onboarding details. To personalize your training we store the answers you give during onboarding: experience level, training goals, age, height, weight, round intensity and your fighting stance.
• Training progress. We store which combos you have completed, your streaks and your language preference, so your progress follows you across devices.
• Subscription status. We store whether you have an active subscription and which plan, so we can give you access to paid features.
• Product analytics. We collect anonymous usage events (for example, combo started, combo completed, paywall viewed, subscription started) together with a randomly generated installation identifier, app version, device model and operating-system version. We use this data only to understand how the app is used in aggregate and to improve it. This product-analytics data is not used for advertising and is not sold.
• Advertising measurement and attribution. We run ad campaigns (for example, on TikTok) to help people discover HomeCombat. To measure whether those ads work, we share a limited set of app events with our advertising partner: app installs, app opens, when a free trial starts, and a randomly generated installation identifier, together with technical data such as your device model, operating-system version and IP address. On iOS this also uses Apple's privacy-preserving SKAdNetwork, which reports installs to the ad network in aggregate without identifying you. We use this only to understand which campaigns bring in new users and to spend our advertising budget responsibly. We do not sell your personal information.
• Device advertising identifier (only with your permission). On iOS, before any cross-app tracking we show Apple's App Tracking Transparency prompt. Only if you tap "Allow" do we let our advertising partner use your device advertising identifier (IDFA) to match an ad you saw to your install. If you choose "Ask App Not to Track" (or leave tracking off in your settings), we do not access that identifier, and ad measurement falls back to Apple's aggregate SKAdNetwork only. You can change this any time in Settings → Privacy & Security → Tracking.
• Crash and error reports. If the app crashes or hits an error, diagnostic information (stack trace, device model, OS version, app version, and a randomly generated installation identifier) is sent to our error-reporting provider so we can fix the bug.
• Push notification token. If you allow notifications, we store the push token issued by Apple or Google so we can send you training reminders and important account messages. You can revoke this at any time in your device settings.
• Camera (optional, on-device only). The Fighter Archetype Analysis feature uses your device camera to analyze your stance and movement on your device. The video frames are processed locally and are not uploaded to our servers. Only the resulting analysis results (e.g. estimated archetype, posture metrics) are stored on your account.

We do not collect your precise location, contacts, photos, or microphone audio. HomeCombat shows no ads inside the app. The only advertising-related data leaving the app is the campaign-measurement data described above, shared with our advertising partner so we can tell whether the ads we run elsewhere are working; on iOS any use of your device advertising identifier happens only with your App Tracking Transparency permission.

2. Payment information

Subscriptions are processed entirely by the Apple App Store. We never receive or store your credit card or payment details. Apple provides us only with your subscription status.

3. How we use your information

• To create and secure your account.
• To personalize combos and coaching to your profile.
• To save and sync your training progress across devices.
• To provide access to subscription features.
• To send training reminders and important account emails or push notifications (you can turn these off at any time).
• To understand product usage in aggregate and diagnose crashes so we can improve the app.
• To measure whether our ad campaigns bring in new users, so we can spend our advertising budget responsibly.
• To respond to support requests you send us.

We do not sell your personal information, and we do not use it to build advertising profiles about you. We do share the limited campaign-measurement data described in Section 1 with our advertising partner for the sole purpose of attributing installs to the ads we run; on iOS, any use of your device advertising identifier requires your App Tracking Transparency permission.

4. Where your data is stored

Your account and training data are stored securely with our hosting provider, Supabase, and transmitted over encrypted connections (HTTPS). Authentication is handled by Supabase and, if you choose it, Google Sign-In.

5. Service providers

We share data only with the providers that make the app function. Each acts as a data processor on our behalf:

• Supabase — database, authentication and email delivery for transactional account emails.
• Apple — account sign-in (Sign in with Apple), subscription billing, and push notification delivery (APNs).
• Google — optional Google Sign-In and push notification delivery on Android (FCM).
• Expo — push notification routing (token registration and message delivery to Apple and Google).
• PostHog — first-party product analytics (anonymous usage events as described in Section 1). PostHog is configured without cross-site tracking or advertising integrations.
• Sentry — crash and error reporting (diagnostic data as described in Section 1).
• TikTok — advertising-campaign measurement and install attribution (the limited app-event and attribution data described in Section 1). This is used only to measure the ads we run; on iOS it uses your device advertising identifier only with your App Tracking Transparency permission, and otherwise relies on Apple's aggregate SKAdNetwork.
• Resend — transactional and onboarding email delivery (e.g. welcome email, training reminders).
• Google Cloud (Gemini API) — used only by the Fighter Archetype Analysis feature to generate coaching feedback from on-device analysis results; raw camera frames are never sent.

Other than our advertising partner, we do not authorize these providers to use your data for their own marketing. Our advertising partner (TikTok) processes the limited measurement data in Section 1 under its own privacy policy, including to attribute installs and improve ad delivery; we never send it your training content, and on iOS its use of your device advertising identifier depends on your App Tracking Transparency choice.

6. Data retention & account deletion

We keep your data for as long as your account exists. You can permanently delete your account at any time from within the app: Profile → Delete Account. Deleting your account immediately and permanently erases your profile, onboarding details and training progress from our systems. This cannot be undone.

Cancelling a subscription is handled separately through your App Store settings and does not delete your account.

7. Children's privacy

HomeCombat is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Your rights

You may access, correct or delete your personal information at any time. Most of this is available directly in the app; for anything else, email us at khoa@homecombat.com and we will help. Depending on where you live, you may have additional rights under laws such as the EU GDPR, UK GDPR, or the CCPA — including the rights to access, port, correct, delete, restrict, or object to the processing of your personal data, and the right to lodge a complaint with your local supervisory authority. We do not sell personal information. We do share a limited set of app-event and attribution data with TikTok to measure our ad campaigns, which may be considered "sharing" for cross-context behavioural advertising under the CCPA. On iOS you can opt out at any time by declining the App Tracking Transparency prompt or turning off tracking in Settings; you may also contact us to opt out of this sharing.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact us

Questions about this policy or your data? Email us at khoa@homecombat.com. The data controller for HomeCombat is HomeCombat (the developer of the app).