Effective September 2026

Privacy & Data Stewardship

Your trust powers every round. This policy explains how F!ght Boxing Club collects, uses, safeguards, and honors the personal data of our members, guests, and digital community.

Personal Data We Collect

We collect only the information necessary to deliver elite boxing experiences and concierge-level support. Data falls into the following categories:

Identity data such as name, preferred pronouns, date of birth, emergency contact, and government-issued ID when required for access control.
Contact data including email, phone number, Instagram handle, billing address, and point-of-sale history for membership fulfillment and concierge communication. Your city, state, and postal code are the ones you type into your profile — we do not derive your location from GPS or your IP address.
Health & readiness data you give us in the intake questionnaire: self-reported injuries, mobility notes, contraindications, recovery preferences, and specific conditions including heart conditions, blood pressure, asthma, diabetes, joint problems, recent surgery, pregnancy, and current medication. Coaches use this to keep your training safe.
Verification documents you choose to upload when applying for a discounted membership, such as a student ID or proof of military service. These are stored in restricted buckets, reviewed by an administrator, and used only to approve or decline that application.
Training results recorded by equipment in the gym, including the OxeFit XS1, and the photos or training-plan PDFs you upload to your own profile.
Device & usage data gathered automatically when you interact with fight-box.com or our mobile app. On the website this means IP address, device type, and analytics cookies. The mobile app collects none of that: it contains no advertising or analytics SDK, never requests location permission, and never accesses your device's advertising identifier.

Apple Health & Wearable Data

If you choose to connect Apple Health, the F!GHT BOX iPhone app reads a limited set of metrics so you can see your own recovery picture next to your training. This connection is entirely optional and the app works fully without it.

We read only: heart rate, resting heart rate, heart rate variability, steps, active energy burned, and sleep. We request read access only — the app never writes anything back to Apple Health.
This data is used for one purpose: to show you your own metrics and recovery score inside the app.
Health data read from Apple Health is processed on your device. We do not upload it to our servers, and it is not stored in our database.
We never use health data for advertising or marketing, we never sell it, and we never share it with data brokers or with any third party for their own purposes.
You can revoke access at any time in iOS Settings under Privacy & Security → Health → F!GHT BOX, and the rest of the app continues to work.

How We Use Your Information

Every piece of data we collect serves a defined operational, safety, or service purpose. We never sell member information.

To activate and manage memberships, class reservations, waitlists, and studio access control.
To personalize training programs, recovery plans, and concierge touchpoints based on your performance metrics and preferences.
To process payments, maintain accurate invoicing, and send renewal or policy notices as required by Puerto Rico law.
To deliver marketing communications and event invitations, always with opt-out controls embedded in every message.
To monitor facility safety, detect fraud, and maintain the security of our digital platforms.

Disclosure & Partner Access

We share data only with the service providers that make F!ght Boxing Club run, and only the data each one needs. We are naming them so you know exactly where your information goes.

Supabase hosts our database, authentication, and file storage in the United States. It holds your profile, bookings, uploads, and purchase records.
Stripe processes every payment. When you check out you interact with Stripe directly — card numbers are entered on Stripe's own pages and never pass through our app or our servers. We receive only the card brand and last four digits, plus the outcome of the charge.
Resend delivers our transactional email, and therefore receives your name and email address.
OxeFit powers the XS1 training equipment in the gym. It receives your name, email, and profile photo so the machine can recognize you and attribute your session results.
Our self-hosted WhatsApp service receives your phone number to send booking confirmations and concierge messages, if you have opted in.
Regulatory bodies or law enforcement when legally compelled, or when necessary to protect the rights, property, or safety of our members and team.

Member Controls & Choices

You remain in control of how we use your data. Contact the concierge desk or email welcome@fight-box.com to exercise any of the rights below.

Request access to the personal data we hold about you and receive it in a portable format.
Correct or update information that is inaccurate or incomplete, directly from your profile in the app or on the web.
Opt out of marketing emails or SMS updates at any time without impacting core service communications.
Request deletion of your account and data at fight-box.com/delete-account, subject to retention requirements for payment records, waivers, and safety documentation mandated by law.
Disconnect Apple Health at any time from iOS Settings, and set or change website cookie preferences from our footer.

Data Security & Retention

We protect your information using layered administrative, physical, and technical controls aligned with boutique fitness best practices.

Encrypted payment processing, role-based access controls, and background-checked staff for systems that store personal data.
Verification documents and training-plan uploads live in access-restricted storage, reachable only through short-lived signed links.
Secure locker storage and monitored access points throughout our studios.
Retention of membership records for up to seven years after account closure to satisfy legal, tax, and risk management obligations, after which data is securely deleted or anonymized.

International Transfers & Minors

Our primary data infrastructure resides in the United States. If we transfer data outside of the U.S., we rely on appropriate contractual clauses.

Members under 18 must have a parent or legal guardian review and sign this policy, the liability waiver, and the associated membership agreement.
We do not knowingly collect personal data from individuals under 13. If we discover such data, we will remove it promptly and notify the parent or guardian.

Requests, questions, or incident reports? Email welcome@fight-box.com or visit the concierge desk for immediate assistance.

Effective September 2026

Privacy & Data Stewardship

Your trust powers every round. This policy explains how F!ght Boxing Club collects, uses, safeguards, and honors the personal data of our members, guests, and digital community.

Personal Data We Collect

We collect only the information necessary to deliver elite boxing experiences and concierge-level support. Data falls into the following categories:

Identity data such as name, preferred pronouns, date of birth, emergency contact, and government-issued ID when required for access control.
Contact data including email, phone number, Instagram handle, billing address, and point-of-sale history for membership fulfillment and concierge communication. Your city, state, and postal code are the ones you type into your profile — we do not derive your location from GPS or your IP address.
Health & readiness data you give us in the intake questionnaire: self-reported injuries, mobility notes, contraindications, recovery preferences, and specific conditions including heart conditions, blood pressure, asthma, diabetes, joint problems, recent surgery, pregnancy, and current medication. Coaches use this to keep your training safe.
Verification documents you choose to upload when applying for a discounted membership, such as a student ID or proof of military service. These are stored in restricted buckets, reviewed by an administrator, and used only to approve or decline that application.
Training results recorded by equipment in the gym, including the OxeFit XS1, and the photos or training-plan PDFs you upload to your own profile.
Device & usage data gathered automatically when you interact with fight-box.com or our mobile app. On the website this means IP address, device type, and analytics cookies. The mobile app collects none of that: it contains no advertising or analytics SDK, never requests location permission, and never accesses your device's advertising identifier.

Apple Health & Wearable Data

We read only: heart rate, resting heart rate, heart rate variability, steps, active energy burned, and sleep. We request read access only — the app never writes anything back to Apple Health.
This data is used for one purpose: to show you your own metrics and recovery score inside the app.
Health data read from Apple Health is processed on your device. We do not upload it to our servers, and it is not stored in our database.
We never use health data for advertising or marketing, we never sell it, and we never share it with data brokers or with any third party for their own purposes.
You can revoke access at any time in iOS Settings under Privacy & Security → Health → F!GHT BOX, and the rest of the app continues to work.

How We Use Your Information

Every piece of data we collect serves a defined operational, safety, or service purpose. We never sell member information.

To activate and manage memberships, class reservations, waitlists, and studio access control.
To personalize training programs, recovery plans, and concierge touchpoints based on your performance metrics and preferences.
To process payments, maintain accurate invoicing, and send renewal or policy notices as required by Puerto Rico law.
To deliver marketing communications and event invitations, always with opt-out controls embedded in every message.
To monitor facility safety, detect fraud, and maintain the security of our digital platforms.

Disclosure & Partner Access

We share data only with the service providers that make F!ght Boxing Club run, and only the data each one needs. We are naming them so you know exactly where your information goes.

Supabase hosts our database, authentication, and file storage in the United States. It holds your profile, bookings, uploads, and purchase records.
Stripe processes every payment. When you check out you interact with Stripe directly — card numbers are entered on Stripe's own pages and never pass through our app or our servers. We receive only the card brand and last four digits, plus the outcome of the charge.
Resend delivers our transactional email, and therefore receives your name and email address.
OxeFit powers the XS1 training equipment in the gym. It receives your name, email, and profile photo so the machine can recognize you and attribute your session results.
Our self-hosted WhatsApp service receives your phone number to send booking confirmations and concierge messages, if you have opted in.
Regulatory bodies or law enforcement when legally compelled, or when necessary to protect the rights, property, or safety of our members and team.

Member Controls & Choices

You remain in control of how we use your data. Contact the concierge desk or email welcome@fight-box.com to exercise any of the rights below.

Request access to the personal data we hold about you and receive it in a portable format.
Correct or update information that is inaccurate or incomplete, directly from your profile in the app or on the web.
Opt out of marketing emails or SMS updates at any time without impacting core service communications.
Request deletion of your account and data at fight-box.com/delete-account, subject to retention requirements for payment records, waivers, and safety documentation mandated by law.
Disconnect Apple Health at any time from iOS Settings, and set or change website cookie preferences from our footer.

Data Security & Retention

We protect your information using layered administrative, physical, and technical controls aligned with boutique fitness best practices.

Encrypted payment processing, role-based access controls, and background-checked staff for systems that store personal data.
Verification documents and training-plan uploads live in access-restricted storage, reachable only through short-lived signed links.
Secure locker storage and monitored access points throughout our studios.
Retention of membership records for up to seven years after account closure to satisfy legal, tax, and risk management obligations, after which data is securely deleted or anonymized.

International Transfers & Minors

Our primary data infrastructure resides in the United States. If we transfer data outside of the U.S., we rely on appropriate contractual clauses.

Members under 18 must have a parent or legal guardian review and sign this policy, the liability waiver, and the associated membership agreement.
We do not knowingly collect personal data from individuals under 13. If we discover such data, we will remove it promptly and notify the parent or guardian.

Requests, questions, or incident reports? Email welcome@fight-box.com or visit the concierge desk for immediate assistance.

Your first session is on us.

Every rep is measured.

Every session is pre-programmed.

Small group. Real coaching.

Privacy & Data Stewardship

Personal Data We Collect

Apple Health & Wearable Data

How We Use Your Information

Disclosure & Partner Access

Member Controls & Choices

Data Security & Retention

International Transfers & Minors

Claim Your Spot.

Three fields. Done.

Your first session is on us.

Every rep is measured.

Every session is pre-programmed.

Small group. Real coaching.

Privacy & Data Stewardship

Personal Data We Collect

Apple Health & Wearable Data

How We Use Your Information

Disclosure & Partner Access

Member Controls & Choices

Data Security & Retention

International Transfers & Minors