Introduction
KickFix ("we", "our", "the app") is a mobile application that uses your device camera and on-device pose estimation to analyze your martial-arts kicks and give you feedback. This policy explains exactly what data we collect, why we collect it, how it is stored, and the controls you have over it.
By creating an account or using KickFix, you agree to this policy. If you do not agree, please uninstall the app and do not create an account.
1. Data We Collect
1.1 Account Information
When you sign up we collect:
- Email address — required for authentication and password recovery.
- Password — stored as a salted hash by our authentication provider. We never see your plaintext password.
1.2 Profile Information
Optional fields you fill in during setup or in your profile:
- Username (display name)
- Belt level
- Height (cm)
1.3 Kick Data
When you record a kick, we store:
- Pose landmark coordinates — numerical (x, y, z) positions of 33 body keypoints across the duration of the kick, derived from on-device computer vision. These are abstract numerical points; no video, no photo, no images of your face or body are saved or transmitted.
- Computed metrics: score, tier, kick type, dominant leg, frame counts.
- Timestamp of the kick.
Important — about the camera: KickFix uses your camera live, on your device, to extract pose landmarks. Camera frames are processed in memory and discarded immediately. We do not record, upload, or save any video or photo data.
1.4 Diagnostic Information
If the app crashes or hits an unexpected error, we automatically collect:
- Error message and stack trace
- App version, OS version, device model
- An anonymous installation identifier
This is processed by Sentry and is used only to fix bugs. It is not linked to your email or kick data.
2. Biometric Data Disclosure
Pose landmark coordinates derived from your body movement may be classified as biometric data under certain laws (GDPR, CCPA, BIPA, and similar). We disclose this explicitly:
- We collect landmark coordinates only when you actively record a kick.
- We use them only to score your kick and to let you replay the analysis later.
- We do not use them for identification, tracking, advertising, training third-party AI models, or sale to any party.
- The on-device pose detection model (Google MediaPipe BlazePose) runs entirely on your device. Raw camera frames are not sent off-device.
3. How Your Data Is Stored
- Account, profile, and kick data are stored in Supabase (PostgreSQL with row-level security), hosted on secure cloud infrastructure.
- Row-level security policies ensure no other user can read or modify your data.
- Your authentication token is stored locally on your device using Android Keystore-backed encrypted storage.
- Data in transit is encrypted via HTTPS/TLS.
4. How We Use Your Data
We use your data only to:
- Provide the KickFix app and its features (scoring, replay, history, fighter attributes).
- Authenticate you and keep you signed in.
- Diagnose and fix crashes (anonymized diagnostic data only).
We do not:
- Sell or rent your data to anyone.
- Use your data for targeted advertising.
- Share your data with social networks or advertising networks.
- Use your kicks or landmarks to train machine-learning models.
5. Data Sharing
We share data only with the following service providers, strictly to operate the app:
- Supabase — database and authentication backend. Privacy policy.
- Sentry — crash diagnostics. Privacy policy.
- Google Play — app distribution. Privacy policy.
6. Your Rights
6.1 Account Deletion
You can permanently delete your account and all associated data at any time from Profile → Delete Account inside the app. Deletion is immediate and irreversible. It removes:
- Your authentication record
- Your profile
- All recorded kicks and pose landmark frames
- Any related data linked to your user ID
6.2 Access and Correction
You can view your profile and kick history inside the app at any time. To request a machine-readable export of your data, or correction of inaccurate data, contact us at the email below.
6.3 GDPR / CCPA Rights
If you are in the EU, EEA, UK, or California, you have additional rights including: the right to access, rectify, port, restrict processing, or object to processing of your personal data. To exercise these rights, contact us at the email below.
7. Permissions We Request
- Camera — required to detect your pose for kick analysis. The app does not function without this permission.
- Internet — required to sync your kicks and profile with our backend.
We do not request location, microphone, contacts, storage, or other sensitive permissions.
8. Children
KickFix is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we will delete the account.
9. Data Retention
Account and kick data are retained for as long as your account is active. If you delete your account, all associated data is removed immediately. Diagnostic crash data is retained for up to 90 days by Sentry, then deleted.
10. International Transfers
Our service providers may store data on servers located outside your country of residence. Where applicable, transfers are governed by Standard Contractual Clauses or equivalent safeguards.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated in-app or by email. The "Effective" date at the top will be updated. Continued use of the app after changes constitutes acceptance.
12. Contact
For any privacy questions, requests, or concerns, contact:
Email: dojo@kickfix.edstart.xyz