PRIVACY POLICY

1. Who We Are

XTRY ("we", "us", or "our") operates the XTRY platform — a martial arts marketplace available at xtry.pro and via our mobile applications, where you can discover, book, and pay for training with independent gyms. We are committed to protecting your personal data and respecting your privacy.

Contact: contact@xtry.pro

2. Information We Collect

We collect the following types of information:

• Contact info — your email address and name, including the name and email shared with us if you sign in with Apple or Google, and, if you list a business, its phone number and physical address.
• Identifiers — the user ID we assign to your account, and, if you enable notifications, a device push token used to deliver booking and ticket alerts.
• Profile details — the optional details you choose to add, such as your date of birth, gender, nationality, and favorite styles.
• Photos — photos you upload, such as your profile photo and, for businesses, gym photos and logos.
• Purchase history — the gyms, classes, sessions, and packages you book or buy, and the event tickets you purchase.
• Billing & tax data — billing details such as your country or address, used to process payment and calculate applicable taxes. Card details are handled directly by our payment processor; we do not store your full card number.
• Precise location (mobile app) — if you grant permission, your precise location, used to show gyms and events near you. You can turn this off at any time in your device settings.
• Customer support — the messages and attachments you send us through support tickets or email.
• User content — the reviews you write and the trip-planner chats you save.
• Business verification data — if you list a gym or organization or register as a trainer, the business contact details and the identity details you provide for verification, such as legal name, date of birth, nationality, ID or passport number, and the ID documents you upload.
• Contact & inquiry data — name, email, and details you provide via a partnership inquiry, contact form, or the waitlist.
• Usage data (website) — pages visited, time on site, referral source, and device/browser type, collected via Vercel Analytics (privacy-friendly, no cookies required).

We use this information to run XTRY, and it is linked to your account. We do not sell your personal data, and we do not use it to track you across other companies' apps or websites.

3. How We Use Your Information

• To authenticate your account and keep the platform secure.
• To process and confirm bookings and ticket purchases, and to send updates and reminders.
• To process payment and calculate any applicable taxes.
• To show you nearby gyms and events (location, mobile app only).
• To answer support requests, inquiries, and partnership applications.
• To verify the businesses and trainers that list on XTRY and send them payouts.
• To moderate reviews and act on reports of objectionable content or abusive users.
• To generate trip-planner responses when you use the AI trip planner.
• To improve the platform through aggregated, anonymized analytics.

4. Payments

Payments for bookings made through the platform are processed using Stripe. When you pay, your card details are handled directly by Stripe under its own privacy and security standards, and we may share billing details such as your country or address with Stripe to process the payment and calculate taxes. XTRY does not store your full card number.

5. Sharing With Gyms & Providers

When you book with a gym, trainer, or venue operator, we share the details needed to fulfil your booking — such as your name and the session you reserved — with that provider. Providers are independent businesses responsible for their own handling of your information.

6. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract performance — to create your account, process bookings, and take payment.
• Legal obligation — to calculate and remit applicable taxes and keep required records.
• Consent — for marketing communications and waitlist sign-ups.
• Legitimate interest — for analytics and platform improvement.

7. Data Storage & Security

Your data is stored on Supabase (PostgreSQL), hosted in the EU/US depending on project configuration. We use row-level security, encrypted connections, and access controls to protect your data. Transactional emails are sent via Resend.

8. Cookies & Analytics

XTRY uses Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personally identifiable information. We do not use third-party advertising cookies or cross-site tracking.

9. Data Retention & Deletion

We keep your account and booking data for as long as your account is active or as needed to provide the service and meet legal and tax obligations. You can delete your account at any time from the bottom of the Profile tab in the app, which removes your personal data subject to records we must retain by law. Partnership inquiry data is retained for up to 2 years, or until you request deletion. Waitlist emails are retained until you unsubscribe. Analytics data is retained in aggregated form with no personal identifiers.

10. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at contact@xtry.pro.

11. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Supabase — database and authentication
• OpenAI & Anthropic — AI responses for the trip planner (the messages you send it)
• Stripe — payment processing and tax calculation
• Apple & Google — sign-in (if you choose those options)
• Apple Push Notification service — mobile notifications
• Vercel — hosting and analytics
• Resend — transactional email delivery
• Maplibre — map rendering (no data sent to servers)

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "last updated" date. Continued use of XTRY after changes constitutes acceptance of the updated policy.