Privacy Policy

Last updated: October 30, 2026

MMA Maxxing ("the app", "we") is an MMA training app for iPhone. We built it to collect as little as possible: there are no accounts, no ads and no cross-app tracking. This policy explains what data the app uses, why, and who else is involved.

1. Who is responsible

Moha El
899 Washington St, Braintree, Massachusetts, 02184, United States
Email: support@mmamaxxing.online

2. Data that stays on your iPhone

Your answers from the setup questions (goal, level, gender, age range, weight, fitness level, schedule, injuries, training style, coach style, reminder time), your first name, your training plan and your session history are stored only on your device. We do not have a copy. Deleting the app, or using "Reset all data" in the app, deletes them.

3. Camera

If you turn on the AI camera during a workout, the app uses Apple's on-device body tracking to count punches, kicks and knees and to check your guard. Every frame is analysed on your iPhone and then discarded. Video and images are never recorded, stored or uploaded. Only the resulting numbers (for example "31 punches, guard up 58%") may be used by the AI coach, as described below.

4. AI coach

The AI features ("Ask your coach", "Coach's take" after a session and the spoken corner tips between rounds) need an internet connection. When you use them, the app sends a short request to our server at api.mmamaxxing.online, which passes it on to Google's Gemini API to generate the answer. A request contains:

Our server does not store your messages or the answers. It keeps short-lived technical data for up to 10 minutes to prevent abuse (the anonymous user ID or IP address, to limit how many requests can be made), and server logs that contain only the time, the type of request and its size. Google processes requests under the Gemini API terms as our processor; on the paid Gemini API service we use, Google does not use this content to train its models. Please don't enter information in the chat that you don't want to share.

5. App usage analytics and feature ideas

To understand how the app is used and improve it, the app sends usage events to PostHog (PostHog Inc.), a product analytics service. Examples: which setup step or screen was reached, whether the paywall was shown and a plan was selected or bought, when a workout or round was started, finished or ended early, whether the camera or AI coach was used, and settings such as intensity. Along with your setup answers (goal, level, training style, weekly schedule, coach style, what motivates you and what holds you back), the events are stored under a random app user ID and contain basic device information (iPhone model, iOS and app version, language, approximate country derived from the IP address). We do not send your name, weight, age, gender, injuries, camera images, chat messages or health data to PostHog, and screen recording is turned off.

If you use "Suggest a feature" in the app, the text you write, and your email address if you choose to add one, are sent to PostHog so we can read your idea and reply.

If your iPhone's region is in the EU, the EEA, the UK or Switzerland, the app asks for your permission first and sends nothing to PostHog unless you tap "Allow". You can change your choice at any time in the app under Profile › Privacy › "Share usage data". With usage data off, feature ideas are sent by email instead.

6. Subscriptions and purchases

Payments are handled entirely by Apple. We never see your payment details. To manage subscriptions we use RevenueCat (RevenueCat, Inc., USA), which receives the purchase information from Apple (product, purchase date, renewal status) together with an anonymous app user ID. We use this only to unlock the app for subscribers and to restore purchases. See RevenueCat's privacy policy.

7. Notifications

If you allow notifications, the app schedules training reminders and subscription reminders (for example before a free trial ends) on your iPhone. They are local notifications: no data is sent to a server to deliver them. You can turn them off anytime in iOS Settings.

8. What we don't do

9. Services we use

ServicePurposeData
Google Gemini API (Google LLC)Generating AI coach answersProfile summary, chat messages or session numbers
PostHog Inc.App usage analytics, feature ideasUsage events, setup answers listed in section 5, random app user ID, device info, feature ideas
RevenueCat, Inc.Managing subscriptionsPurchase status, anonymous app user ID
ApplePayments, App Store, notificationsUnder Apple's own privacy policy
Our web hostRunning api.mmamaxxing.online and this websiteTechnical connection data (IP address, time)

Some of these providers are based in the USA. Transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

10. Legal basis (GDPR)

We process data to provide the app and the features you choose to use (Art. 6(1)(b) GDPR), and to keep the service secure and prevent abuse (Art. 6(1)(f) GDPR, our legitimate interest). Usage analytics (section 5) is based on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG), which you can withdraw at any time in the app. Injury areas you select are used only to adapt your training and AI advice, and only because you chose to enter them (Art. 9(2)(a) GDPR). You can remove them anytime in the app.

11. Your rights

You have the right to access, correct, delete and restrict the processing of your data, to data portability, and to object to processing. Most of your data is stored only on your device and can be viewed and deleted directly in the app. To access or delete usage analytics data, or for anything else, write to support@mmamaxxing.online. You can also complain to a data protection supervisory authority.

12. Children

MMA Maxxing is not directed to children under 16, and we do not knowingly process data from children under 16.

13. Changes

If we change how the app uses data, we will update this page and the date at the top.