Last updated: May 29, 2026
This Privacy Policy explains how WEBMIND TECHNOLOGIES LTD ("we", "us", "our") handles personal data in connection with the FightFlow mobile application (the "App") and the marketing website at https://fightflow.app (the "Site"). FightFlow is a voice-led solo combat-training app for boxing, kickboxing, and Muay Thai.
We are the data controller. You can reach us at hey@fightflow.app. Our registered office is Hova House, 1 Hova Villas, Brighton & Hove, England BN3 3DH (company number 16668049).
FightFlow is built to need as little of your data as possible. There is no account and no login. Your training history, streaks, settings, combos and any clips you record stay on your device — we do not run a server that stores them, we do not sell data, and we do not use advertising or cross-app tracking. A small amount of data still has to leave your device for the App to function (mainly to verify purchases and to check for required updates), and that is described in full below.
Training history, streaks, goals, saved combos and routines, and app settings are stored in the App's local storage on your device. This information is not transmitted to us or to any third party. You can export it to a local backup file (.ffbk) and restore it yourself — that file stays under your control and is never uploaded to us. The free-tier daily training-time meter and your subscription entitlement are never written to a backup, and recorded video clips stay on your device. You can erase all of it at any time with Settings → Delete All Data, or by deleting the App.
FightFlow Unlimited is sold as in-app purchases through the Apple App Store and Google Play ($2.99/month, $23.99/year, or $79.99 one-time lifetime; all three grant the same Unlimited entitlement). We never see, collect, or store your payment details, store-account email, name, or billing address — payment is handled entirely between you and Apple or Google.
To verify whether a device is entitled to Unlimited and to record purchases, we use RevenueCat, Inc. (a US company) as our data processor. RevenueCat's SDK runs the first time you open the App and receives:
RevenueCat does not receive your name, email, payment details, or training history. This data is used only to verify entitlement, prevent fraudulent purchase replays, and produce aggregate subscription statistics. RevenueCat's privacy policy is at revenuecat.com/privacy.
When the App starts (and periodically while it runs) it contacts a configuration endpoint we host on Google Cloud / Firebase to check for required updates and changelog notices. This endpoint is read-only — it returns configuration to your device and does not store information about you — but, like any internet request, it exposes your device IP address to our hosting provider (Google), which acts as our processor. We do not retain these requests.
Some features are off by default and only ever run if you turn them on and grant the relevant OS permission:
RevenueCat stores and processes this data in the United States (on Amazon Web Services). That transfer is covered by RevenueCat's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914, controller-to-processor module) and, for UK data, the UK Addendum to those Clauses issued by the ICO. Apple and Google process purchase and (where applicable) speech data under their own privacy policies and transfer mechanisms — see apple.com/legal/privacy and policies.google.com/privacy.
If you are in the UK, EU or EEA, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. Where we rely on consent, you can withdraw it at any time by turning the relevant feature off. Because most data is held on your device or only as a pseudonymous identifier, in some cases we may need more information to locate data about you, and for purely on-device data you can exercise these rights directly with Settings → Delete All Data. To make a request, email us at hey@fightflow.app.
We'd like the chance to resolve any concern first, so please contact us. You also have the right to lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint. If you are in the EU or EEA, you can complain to your local data protection authority (a list is at edpb.europa.eu).
We use commercially reasonable measures to protect data processed through the App. However, no method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
Our marketing website is cookieless. We use Simple Analytics, a privacy-first tool that does not use cookies, does not collect personal data, and does not track you across other websites. Because there is no tracking, we do not need a cookie-consent banner. See our Cookie Policy for detail.
FightFlow is intended for adults (18+), and the App is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date below and, where appropriate, notify you in the App. Please review this page periodically.
Questions about this Privacy Policy or your data? Email contact us. (hey@fightflow.app).
Last updated: May 29, 2026