Privacy Policy

Last updated: September 9, 2026

Clinch ("we," "us," or "our") operates the Clinch mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

Clinch is currently offered only in the United States, and the App is intended for U.S. residents 18 and older.

By using Clinch, you consent to the data practices described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

We collect the following categories of personal information:

Account Information

• Name (first and last)
• Email address (required for new accounts; some older accounts may not have provided one)
• Phone number
• Profile photo
• Account role (Coach or Client)
• Account identifiers, such as your Clinch user ID

For a phone-based account, the email address you provide is a contact address. Providing it does not verify ownership of that email address or enable email-and-password sign-in.

Client Profile Information

• Date of birth (to verify age eligibility)
• Height and weight
• Experience level
• Training goals and combat sports interests
• Medical notes (health conditions, injuries, allergies)

Coach Profile Information

• Date of birth (to verify age eligibility)
• Biography and specialties
• Gym name and address
• Training style preferences
• Verification documents (government-issued ID)
• Portfolio photos and videos

Location Data

• Geographic coordinates (latitude/longitude) when you grant location permission
• City name (derived from coordinates)
• Gym/training addresses provided by coaches

Transaction Data

• Booking details (dates, times, services, amounts)
• Payment references (Stripe customer and transaction IDs — we do not store credit card numbers)
• Subscription status and billing period
• Class pack purchases and credit balances

Usage Data

• Reviews and ratings
• Favorite coaches and services
• Session announcement content and delivery information
• Push notification tokens
• App and SDK interactions, such as payment-flow events and map panning or zooming
• Device and app information, such as device model, operating system, app and SDK versions, screen dimensions, language, and timezone
• IP addresses and app-, SDK-, device-, or session-specific identifiers
• Crash reports, stack traces, and performance diagnostics

2. How We Collect Information

We collect information in the following ways:

• Directly from you: When you create an account, complete your profile, book sessions, upload documents or media, leave reviews, send session announcements, or contact support.
• Automatically: The App and its software development kits (SDKs) collect device and app information, IP addresses, identifiers, interaction events, and diagnostics as described in How We Share Your Information. Some SDK collection starts when an SDK initializes, before you start or complete a payment. Push notification tokens are collected to deliver notifications.
• From third parties: If you sign in with Apple, we receive your name and email (if shared) from Apple's authentication service.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Connect clients with coaches based on location, interests, and availability
• Process bookings, payments, and refunds
• Send push notifications for booking confirmations, reminders, cancellations, and reschedule requests
• Deliver and store coach announcements for attendees of a specific booked session
• Verify age eligibility and coach identity
• Detect and prevent fraud and secure accounts and payments
• Diagnose errors, measure usage, and improve app reliability and performance
• Display coach profiles, ratings, and reviews to clients, and on public coach profile pages
• Enforce our Terms of Service
• Respond to support requests
• Comply with legal obligations

Public coach profiles. Coaches can share a link to their profile that anyone can open without a Clinch account. These pages show the coach's profile information together with their ratings and reviews. A review displayed on a public page includes the reviewer's name and profile picture, and these pages may be indexed by search engines. If you leave a review, it may appear this way.

Public class and session pages. Coaches can also share a link to a specific class or 1-on-1 session. These pages are public — no Clinch account is needed to view them — and may be indexed by search engines. They show the coach's name and photo, the session name and description, its price and duration, the training location, and, for classes, the upcoming dates and times it runs. They do not show reviews, and they never show anything about who has booked.

We do not use your information for advertising or sell it to third parties.

4. How We Share Your Information

We disclose information to the providers and recipients below for app functionality, payment security, fraud prevention, analytics, and service improvement. Some providers process information on our behalf. Google Maps and Stripe also process certain information for their own purposes, as described below and in their privacy policies.

• Stripe (Payments, Fraud Prevention & SDK Analytics): We share your Stripe customer ID and transaction details with Stripe to process payments, manage subscriptions, and facilitate coach payouts. The Stripe SDK also sends device and app information, IP addresses, device/session identifiers, and payment-flow interaction data for fraud prevention, security, analytics, and improvement of Stripe's services. On Android, fraud-prevention collection starts when the Stripe SDK initializes and can occur before you start a payment. Stripe acts on our instructions for payment processing and also processes certain data for its own fraud-prevention, legal-compliance, and service-improvement purposes. Stripe handles all credit card data directly — we never store card numbers. Stripe's Privacy Policy governs their use of your data.

• Google Maps (Location Services & SDK Analytics): When coaches set their location or clients search for nearby coaches, address and coordinate data is sent to Google Maps for geocoding. On Android, the Google Maps SDK also automatically collects device and SDK information, IP addresses, pseudonymous SDK identifiers, crash reports, and diagnostics. Our map integration uses camera APIs that also send map interaction events, such as panning and zooming. Google uses this information to operate, measure, maintain, and improve its own services, not solely to process information on Clinch's behalf. Google's Privacy Policy applies.

• Supabase (Infrastructure Provider): Your data is stored on Supabase's cloud infrastructure. Supabase acts as our data processor.

• Expo (Push Notifications): Push notification tokens are processed through Expo's notification service to deliver app notifications.

• Apple Push Notification Service / Google Firebase Cloud Messaging: Used to deliver push notifications to your device. Push tokens and, on Android, Firebase installation IDs identify where to deliver notifications.

• Sentry (Error & Crash Monitoring): We send crash reports, error events, and sampled performance data to Sentry. Reports may include device type, OS and app versions, your Clinch user ID, stack traces, and a record of recent app interactions used to investigate an error. We configure Sentry to limit personal information in reports and use this data to diagnose errors and improve reliability and performance. Sentry's Privacy Policy governs their use of the data.

• Other Users: Coach profiles (name, photo, bio, specialties, ratings, location) are visible to clients browsing the marketplace. Client names and profile photos are visible to coaches they book with.

• Session Announcements: A coach can send a short message to the clients holding a confirmed booking for one of their upcoming sessions (for example, to say a class is cancelled or the start time has moved). Coaches never see your contact details through this feature and cannot message people who have not booked that specific session. The message is delivered as a push notification and stored in your in-app notification inbox. You can turn these off at any time in Settings › Notifications.

We may also disclose your information when we believe in good faith that disclosure is necessary to: (a) comply with a law, regulation, subpoena, court order, or other lawful request; (b) investigate, prevent, or take action against fraud, security issues, or violations of our Terms of Service; (c) protect the rights, safety, or property of Clinch, our users, or the public; or (d) facilitate a corporate transaction (such as a merger, acquisition, or asset sale), in which case we will require the recipient to honor this Privacy Policy.

We do not sell or share your personal information for cross-context behavioral advertising. We do not provide your information to third-party AI services for general-purpose model training. Stripe's fraud-prevention services may use payment and device signals to develop and improve fraud-detection models, as described in Stripe's Privacy Policy.

5. Sensitive Information

We collect certain sensitive personal information ("Sensitive PI") to improve your experience and to protect the safety of users:

• Health Information. Client medical notes (health conditions, injuries, allergies) are collected so coaches can tailor sessions safely. Medical notes are stored encrypted at rest, are visible only to Coaches with whom you have an active or completed booking, and are deleted when you delete your account. Clinch does not provide medical advice, and medical notes are not protected by HIPAA because we are not a healthcare provider.

• Identity Documents. Coach verification documents (government-issued ID) are reviewed by our admin team for the limited purpose of verifying eligibility to coach. They are stored on encrypted infrastructure with row-level access controls and are not shared with other users or with any third party except as required by law.

We collect and process Sensitive PI only with your explicit consent, provided at the moment you enter it into the App, and we use it only for the purposes described in this Policy. You may withdraw consent by deleting the data, by deleting your account, or by contacting us at support@clinchtraining.com.

6. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase, with servers located in the United States.

We implement security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure token storage on your device (via encrypted secure storage)
• Row-level security policies on our database
• Authentication via secure JWT tokens with automatic refresh
• Restricted admin access to verification documents and audit logging of all moderation actions

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Data breach notification. In the event of a data breach affecting your personal information, we will notify affected users and applicable regulators without undue delay and in compliance with applicable U.S. state laws (including any required notification timelines).

7. Data Retention

We retain your data as follows:

• Active accounts: Your data is retained for as long as your account remains active.
• Deleted accounts: When you delete your account, we immediately delete your profile, personal information, push tokens, favorites, and related data. Anonymized booking and review records may be retained for business and legal purposes (with personal identifiers removed).
• Coach verification documents: Retained while the coach account is active and deleted upon account deletion.
• Payment records: Transaction references may be retained as required by financial regulations and tax laws.

8. Your Rights & Choices

You have the following rights regarding your data:

• Access: You can view your personal information within the App at any time through your profile screens.
• Correction: You can update your profile information at any time through the edit profile screen.
• Deletion: You can delete your account and associated data at any time through the Settings screen. Deletion is immediate and permanent.
• Location: You can revoke location permissions at any time through your device settings. The App will continue to function, but location-based features (finding nearby coaches) will be limited.
• Notifications: You can disable push notifications through your device settings at any time. Separately, Settings › Notifications inside the App lets you turn off session updates sent by your coaches while keeping other notifications on.

To exercise any rights not available through the App, contact us at support@clinchtraining.com.

9. Children's Privacy

Clinch is not intended for, and we do not knowingly permit, anyone under 18 years of age to use the App. We do not knowingly collect personal information from anyone under 18, and the App is not directed to children under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA).

If we learn that we have collected information from a user under 18, we will terminate the account and delete the associated data. If you believe a minor has provided us with personal information, please contact us at support@clinchtraining.com.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"):

• Right to know what personal information we collect, use, disclose, and the categories of sources and recipients.
• Right to access a copy of the personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to delete your personal information, subject to limited exceptions (e.g., transactions we are required to retain for tax or fraud-prevention purposes).
• Right to limit the use and disclosure of Sensitive Personal Information — we already limit our use of Sensitive PI to the purposes described in the Sensitive Information section above.
• Do Not Sell or Share My Personal Information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we do not engage in either practice, no opt-out link is required, but you may confirm or exercise this right by contacting us.
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, email us at support@clinchtraining.com from the email address associated with your account, or use the account deletion feature in the App. We will verify your identity before fulfilling the request and will respond within 45 days as required by the CCPA. You may also designate an authorized agent to make a request on your behalf.

11. International Users

Clinch is intended for and offered only to residents of the United States. We do not target or actively offer the App to users in the European Economic Area (EEA), the United Kingdom, or other jurisdictions.

If you access the App from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your home country. By using the App, you consent to this transfer and processing.

12. Third-Party Links

The App may contain links to third-party websites or services (such as Stripe's terms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, through in-app notifications.

Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@clinchtraining.com In-App: Use the Help & Support option in Settings