Privacy Policy

This Privacy Policy describes how Martial Nexus Media LLC(“Company”, “we”, “us”) collects, uses, and protects information when you use Fyte IQ™ (the “Service”). Fyte IQ™ is a trademark of Martial Nexus Media LLC, registration pending.

Account information. Email, username, full name, password (hashed), avatar, bio.

Profile and martial-arts data. Disciplines practiced, gyms, instructors, lineage, belts/ranks, accolades, fight records, weight, height, sex, training-since year.

Activity data. Training sessions, sparring participation, RSVPs, calendar entries, journal text and photos, video watch time on the Channel.

Health and biometric data (optional). Heart rate, HRV, VO2 max, sleep, body weight, and other metrics you sync from Apple Health, iOS Shortcuts, or other connected sources. You control whether this data is collected.

Payment information. Processed by Stripe. We do not store your full payment card numbers; we receive limited data (last 4 digits, brand, expiration, billing zip) for support and fraud-prevention purposes.

Technical data. IP address, user agent, device type, pages visited, approximate location (from IP), referrer.

• Operate and provide the Service (authentication, profile rendering, lineage links, RSVPs).
• Compute the Fight Ready Score and other personalized analytics.
• Improve the Service through aggregated and de-identified analysis.
• Communicate with you about your account, security, and product updates.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

FyteIQ’s broader mission includes producing aggregated, de-identified insights about martial-arts participation, training patterns, and fighter health profiles. We may use the aggregated, anonymized data derived from User Content for research and to improve the Service. We do not sell your personal information.

We use a small number of third-party services to operate FyteIQ:

• Supabase — database, authentication, file storage
• Vercel — hosting and edge infrastructure
• Stripe — payment processing
• Cloudflare Turnstile — bot protection on auth forms
• Anthropic (Claude) — AI assistant powering the in-app chat (only the active conversation is sent; we do not retain conversations to train external models)
• YouTube — video playback for the FyteIQ Channel

Each processor is bound by its own privacy commitments. We take reasonable steps to vet them.

Depending on where you live, you have rights over your personal information:

• Access: request a copy of the data we hold about you.
• Correction: ask us to fix inaccurate data (most fields are editable in your profile settings directly).
• Deletion: request that we delete your account and personal data. Some aggregated, de-identified data and content created by other users (e.g. lineage links someone added that involve you) may persist.
• Export: receive your training, journal, and profile data in a portable format.
• Opt out of certain processing as described below.

To exercise these rights, contact support@fyteiq.com. We will respond within 30 days.

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we have collected, sold, or disclosed, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To submit a request, email support@fyteiq.com.

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: (a) performance of our contract with you (operating the Service), (b) your consent (for optional health data and marketing), (c) our legitimate interests (security, fraud prevention, product improvement), and (d) legal obligations.

You may lodge a complaint with your local data protection authority.

FyteIQ is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it promptly. Users between 13 and 16 may use the Service only with parent or guardian consent.

We retain your data for as long as your account is active. After account deletion, we delete personal data within 30 days, except where we are required to retain it (e.g. tax records, fraud investigations). De-identified, aggregated research data may be retained indefinitely.

We use encryption in transit (TLS), encryption at rest (Supabase / Postgres), parameterized queries (no SQL injection surface), Row Level Security policies on sensitive tables, bot protection on auth endpoints, and limited access to production data internally. No system is perfectly secure.In the event of a data breach affecting your information, we will notify you in accordance with applicable law.

We use first-party cookies and browser storage for authentication (session tokens), preferences, and security. We do not currently use third-party advertising cookies. Cloudflare Turnstile may set a short-lived cookie on auth forms to prevent abuse.

We may update this Policy from time to time. Material changes will be communicated via email or in-app notice. The current version is shown at the top of this page.

For privacy questions or requests, email support@fyteiq.com.