FIGHTBASE
Privacy Policy
Last updated: 25 August 2026 · Poksiklubi Kalev MTÜ
FightBase is operated by Poksiklubi Kalev MTÜ, a company registered in Estonia. This Privacy Policy explains how we collect, use, and protect your personal data when you use the FightBase mobile application and website at fightbaseapp.com.
By using FightBase, you agree to the collection and use of information in accordance with this policy and in compliance with the EU General Data Protection Regulation (GDPR).
1. Who We Are
Data Controller: Poksiklubi Kalev MTÜ (trading as FightBase)
Country of registration: Estonia
Contact: hello@fightbaseapp.com
2. What Data We Collect
We collect the following categories of personal data:
- Account data: your email address, full name, and chosen role (Athlete, Coach, Organiser, or Academy) when you register.
- Profile data: any additional information you choose to add, such as profile photo, location, disciplines, and bio.
- Registration data: details of classes, sessions, courses, or camps you request to join, including dates and registration status. FightBase does not collect or store payment amounts for training — those are settled directly between you and the Coach, Organiser, or Academy.
- Attendance data: records of sessions you attended or were marked absent from, as recorded by your Coach or Organiser.
- Announcement data: announcements sent to you by a Coach or Organiser whose class you are a member of.
- Invoicing data: if you use the invoicing tool, the details you enter to generate invoice documents (client name, amount, description). These are stored so you can retrieve them.
- Subscription and payment data: if you hold a paid FightBase subscription, we retain your subscription tier, billing dates, and payment status. Card details are handled exclusively by Stripe, Inc. and are never stored by FightBase.
- Business data: if you are a Coach, Organiser, or Academy, information about the classes, camps, courses, or programmes you list, including schedules, pricing, and location.
- Usage data: information about how you use the app, including screens visited and actions taken, collected to improve the service.
- Communications: messages you send to coaches or organisers through the platform.
3. How We Use Your Data
We use your data to:
- Create and manage your account
- Process your FightBase subscription via Stripe
- Record and display your class registrations, attendance, and training history
- Enable Coaches and Organisers to manage their rosters and send announcements to their members
- Generate invoice documents when you use the invoicing tool
- Send transactional notifications (registration confirmations, schedule changes, announcements)
- Improve and maintain the FightBase platform
- Comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
4. Legal Basis for Processing (GDPR)
We process your data on the following legal bases:
- Contract performance: to fulfil bookings and provide the service you signed up for.
- Legitimate interests: to operate and improve the platform, prevent fraud, and ensure platform security.
- Legal obligation: to comply with Estonian and EU law, including financial record-keeping requirements.
- Consent: for any marketing communications, where we will ask for your explicit consent separately.
5. Third-Party Services
FightBase uses the following third-party services that may process your data:
- Supabase (database and authentication) — data stored on EU servers. Privacy Policy
- Stripe, Inc. (subscription payment processing) — Stripe processes payments for FightBase subscriptions only. Your card details are handled exclusively by Stripe and never stored by FightBase. FightBase does not use Stripe to process payments between athletes and coaches, organisers, or academies. Privacy Policy
- Apple, Inc. (App Store distribution and device services)
6. Controller and Processor Roles
FightBase (Poksiklubi Kalev MTÜ) is the data controller for account data, profile data, subscription data, usage data, and communications you send through the platform.
When a Coach, Organiser, or Academy uses FightBase to manage their rosters, record attendance, or send announcements, they act as the data controller for their members' personal data. In that context, FightBase acts as a data processor on their behalf, processing that data only to provide the service. Coaches, Organisers, and Academies are responsible for having a lawful basis to collect and process their members' data and for informing those members.
Where required by applicable law, FightBase will enter into a Data Processing Agreement with Coaches, Organisers, or Academies on request.
7. Data Retention
We retain your data for the following periods:
- Account and profile data: for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law.
- Subscription and billing records: 7 years from the date of the transaction, in accordance with Estonian accounting law.
- Registration and attendance records: for as long as the Coach, Organiser, or Academy who created them maintains an active account, or until they delete them, unless you request erasure earlier.
- Invoice documents: for as long as your account is active or until you delete them. We recommend you retain your own copies for the period required by your local tax authority.
- Usage data: up to 24 months on an aggregated or anonymised basis.
8. Your Rights Under GDPR
As an EU resident, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to our processing of your data
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at hello@fightbaseapp.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.
9. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS/TLS). Access to the database is restricted and authenticated.
10. Children
FightBase is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. The "last updated" date at the top of this page will always reflect the current version.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
hello@fightbaseapp.com