PRIVACY POLICY

1. Who We Are

XTRY ("we", "us", or "our") operates the XTRY platform — a martial arts marketplace available at xtry.pro and via our mobile applications, where you can discover, book, and pay for training with independent gyms. We are committed to protecting your personal data and respecting your privacy.

Contact: contact@xtry.pro

2. Information We Collect

We collect the following types of information:

• Account data — your email address, and the name and email shared with us if you sign in with Apple or Google.
• Booking data — the gyms, classes, sessions, and packages you reserve or purchase.
• Billing & tax data — billing details such as your country or address, used to process payment and calculate applicable taxes. Card details are handled directly by our payment processor; we do not store your full card number.
• Contact & inquiry data — name, email, and details you provide via a partnership inquiry, contact form, or the waitlist.
• Device & notification data — device information and, if you enable notifications, a push token used to deliver booking alerts.
• Location data (mobile app) — approximate location if you grant permission, used to show nearby gyms. We do not store precise location data on our servers.
• Usage data — pages visited, time on site, referral source, and device/browser type, collected via Vercel Analytics (privacy-friendly, no cookies required).

We do not sell your personal data.

3. How We Use Your Information

• To authenticate your account and keep the platform secure.
• To process and confirm bookings, and to send booking updates and reminders.
• To process payment for your bookings and calculate any applicable taxes.
• To respond to your inquiries and partnership applications.
• To improve the platform through aggregated, anonymized analytics.
• To show you nearby martial arts gyms (location, mobile app only).

4. Payments

Payments for bookings made through the platform are processed using Stripe. When you pay, your card details are handled directly by Stripe under its own privacy and security standards, and we may share billing details such as your country or address with Stripe to process the payment and calculate taxes. XTRY does not store your full card number.

5. Sharing With Gyms & Providers

When you book with a gym, trainer, or venue operator, we share the details needed to fulfil your booking — such as your name and the session you reserved — with that provider. Providers are independent businesses responsible for their own handling of your information.

6. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract performance — to create your account, process bookings, and take payment.
• Legal obligation — to calculate and remit applicable taxes and keep required records.
• Consent — for marketing communications and waitlist sign-ups.
• Legitimate interest — for analytics and platform improvement.

7. Data Storage & Security

Your data is stored on Supabase (PostgreSQL), hosted in the EU/US depending on project configuration. We use row-level security, encrypted connections, and access controls to protect your data. Transactional emails are sent via Resend.

8. Cookies & Analytics

XTRY uses Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personally identifiable information. We do not use third-party advertising cookies or cross-site tracking.

9. Data Retention & Deletion

We keep your account and booking data for as long as your account is active or as needed to provide the service and meet legal and tax obligations. You can delete your account at any time from the app, which removes your personal data subject to records we must retain by law. Partnership inquiry data is retained for up to 2 years, or until you request deletion. Waitlist emails are retained until you unsubscribe. Analytics data is retained in aggregated form with no personal identifiers.

10. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at contact@xtry.pro.

11. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Supabase — database and authentication
• Stripe — payment processing and tax calculation
• Apple & Google — sign-in (if you choose those options)
• Apple Push Notification service — mobile notifications
• Vercel — hosting and analytics
• Resend — transactional email delivery
• Maplibre — map rendering (no data sent to servers)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "last updated" date. Continued use of XTRY after changes constitutes acceptance of the updated policy.