Privacy Policy

MMAI · Last updated November 3, 2026

MMAI ("we", "us") is a training app for combat-sport athletes. This policy explains what MMAI keeps, what it sends, who helps run it, how long data is kept, and the choices you have. Contact us any time at team@mmaiapp.io.

Your training record

Everything you log lives on your phone first and works offline: your weekly schedule and classes, training diary and journals, gym sessions and sets, lifting program, film reviews, XP, level and ratings, profile (name, age, height, body weight, stance, years training), food diary and targets, fight camp, onboarding answers, development check-ins, Coach Rey conversations, your fighter card and app preferences.

When you have an account, a copy of that record is backed up to a private, per-account storage folder (hosted by Supabase) so it comes back on a new phone. Only your account can read it. Film footage is never backed up, only the written reviews. Apple Health data is never backed up.

AI features and third-party AI providers

MMAI's AI features run through MMAI's own server, which forwards each request to a third-party AI provider. We ask for your permission first. The first time you use any AI feature, the app shows what will be sent and which providers receive it, and nothing is sent unless you tap Allow & continue. Choosing Not now cancels that action and sends nothing. You can withdraw permission at any time in Profile → Privacy & data → Allow AI features; the app will then ask again before sending anything. Only what each feature needs is sent, and the rest of your data stays on your phone and in your account backup:

  • Film review: still frames and a compressed copy of the clip you chose, plus the brief you wrote. The copy sits on MMAI's server behind a private link only while the review runs and is deleted automatically within 45 minutes.
  • Coach Rey: your messages, recent conversation and, unless you switch it off in Profile → Privacy & data, a short summary of your profile, schedule, training, food and film findings. No photos, raw video or Apple Health readings are sent.
  • Food scans and meal plans: the food or label photo you took, any correction you typed and, for meal plans, your targets, week and eating notes. Food search sends only the words you searched for to the USDA FoodData Central database.
  • Session builder: the session you asked for, plus your sports, goals, experience, equipment and session length so the plan fits you.
  • Fighter artwork: a cropped face reference from the selfie you took, with your age, division and sports so the drawing matches you. The original selfie is not stored with the result.
  • Coach voice: spoken round calls send only the coach's own text to a voice provider (ElevenLabs, or xAI as a backup), never your data.

AI providers: Google (Gemini), OpenAI and Anthropic, reached through Rork's AI gateway; ElevenLabs and xAI for voice. They process a request only to return a result to you. We do not permit them to use your content for advertising. Their own retention rules apply and immediate deletion by them is not guaranteed.

Accounts and subscriptions

You can sign in with Apple or with an email and password (Google where offered). Accounts are held in MMAI's Supabase project: we receive your email and, if you share it, your name. Passwords are stored only as secure hashes. We keep a count of AI requests against your account so fair-use limits apply per person.

MMAI subscriptions are sold through Apple. Apple handles payment and we never see your card. RevenueCat receives your account ID and Apple's purchase record to confirm your subscription on every phone you sign in to, and to report subscription and paywall statistics to us.

Usage analytics and crash reports

To understand which parts of MMAI work and fix problems, the app sends:

  • Product analytics to PostHog: event names such as "onboarding step viewed", "paywall viewed", "food logged" or "film review finished", with simple categories (which step, which plan, which feature, success or failure), your account ID once signed in, and basic device and app version information. Never your name, email, body measurements, Apple Health data, what you eat, your messages, your footage or anything you type.
  • Crash and app-hang reports to Sentry: the technical state of the app when it crashed or froze (stack trace, device model, iOS and app version) and your account ID. No screenshots, no screen contents and no network contents.

This data is linked to your account ID, is used only to operate and improve MMAI, and is never used to track you across other companies' apps or websites, or for advertising.

Apple Health

If you allow it, MMAI reads steps, active energy, exercise minutes and body weight, and writes the meals and body weight you log. Health data is used only on your phone to show your daily numbers. It is never sent to AI providers, analytics or crash reporting, never backed up, never sold, and never used for advertising, marketing or data mining. You can change access at any time in the Health app → Sharing → Apps → MMAI.

Who we share data with

Only the service providers named above, each acting on our behalf to run a feature: Supabase (accounts and backup), Cloudflare (MMAI's server), Rork (hosting and AI gateway), the AI providers listed, USDA FoodData Central (food search words only), RevenueCat and Apple (subscriptions), PostHog (analytics) and Sentry (crash reports). We do not sell personal data or share it for cross-context advertising. We may disclose data if required by law.

What is never collected

No contacts, no precise or coarse location, no advertising identifiers and no third-party advertising or tracking. MMAI does not track you as defined by Apple's App Tracking Transparency.

How long data is kept

  • On your phone: until you delete it, delete your account or delete the app.
  • Cloud backup and account: while your account exists; deleted when you delete your account.
  • Film review copies: deleted automatically within 45 minutes.
  • AI usage counts: kept for the current day and month to apply limits.
  • Analytics and crash reports: kept only as long as needed to understand usage and fix bugs, under PostHog's and Sentry's retention settings, then deleted.

Your choices and rights

  • Profile → Privacy & data: withdraw AI permission, stop sending the app summary to Coach Rey, clear Rey's memory, or delete your photo and fighter art.
  • Profile → Account: sign out at any time; your record stays on the phone.
  • Profile → Account → Delete account & data deletes your account, its cloud backup and usage counts, and erases everything on the phone. It cannot be undone. Email us to also remove analytics and crash records tied to your account ID.
  • Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or export your data, or object to processing. Email team@mmaiapp.io and we will respond within 30 days.
  • Cancel your subscription in your Apple ID settings → Subscriptions. Deleting your account does not cancel an Apple subscription.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on the providers' standard contractual safeguards.

Children

MMAI is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it. Athletes under 18 should use MMAI with a parent or guardian and train under qualified supervision.

Not medical advice

MMAI is not a doctor and not your coach. Its sessions, loads and nutrition figures are estimates from what you tell it. If something hurts, stop and get it looked at.

Changes

If this policy changes, the date at the top changes with it. Material changes are noted in the app.

Questions or data requests?

Email team@mmaiapp.io and we will respond.