Privacy policy

Last updated: 31 October 2026

1. Who we are

Fightzy ("Fightzy", "we", "us") is a content service for fighters and coaches, operated by [Business legal name and registration number], [Business postal address, Israel] ("the controller"). Contact for anything about your data: [email protected].

2. What we collect

We do not use analytics or advertising cookies, we do not build advertising profiles, and we do not collect sensitive data (health, religion, political views and similar). Giving us your email is voluntary; without it we simply can't contact you about your spot.

3. Why we use it, and our legal basis

• To run the waitlist and tell you when your spot opens – your request (contract steps you asked for) and our legitimate interest in replying.
• To send Fightzy updates – your consent when you join the waitlist. Every email has an unsubscribe link.
• To review partner and brand applications – steps you asked for before an agreement.
• To show you your own page stats (connected accounts) – your request; the data never leaves your device.
• Security and abuse prevention (server logs, spam filtering) – our legitimate interest and legal obligations.
• Paid plans (when they launch) – to provide the service you pay for and to meet tax and accounting law. Card details are handled by our payment provider, never by us.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Connected accounts (Google / YouTube, Meta / Instagram / Facebook)

Connecting is optional and uses each platform's official login. We ask only for read-only access:

• YouTube – scope youtube.readonly: your channel name, picture, subscriber count and your videos with titles, dates and view counts.
• Meta – permissions pages_show_list, pages_read_engagement, instagram_basic, instagram_manage_insights: your Facebook Page and linked Instagram professional account, their followers, posts and view counts.

We never see your password and never post, comment, message or change anything on your accounts. The data is requested by your browser, shown to you and kept only on your device. You can disconnect at any time in the app ("Disconnect"), and revoke access at myaccount.google.com/permissions or in Facebook → Settings → Apps and websites.

Google API Services: Fightzy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is used under the YouTube Terms of Service and the Google Privacy Policy. We do not use Google user data to train AI models, for advertising, or sell or transfer it to anyone.

5. Who we share data with

We don't sell or rent personal data, and we don't "share" it for cross-context behavioral advertising. We use these service providers, only to run Fightzy:

• Cloudflare, Inc. (USA) – website hosting, security and server functions.
• Supabase, Inc. (USA) – database for form submissions and, later, member accounts.
• Google LLC (USA) – our email (Gmail); YouTube login if you connect it.
• Meta Platforms – Facebook Login if you connect Instagram or Facebook.
• Instagram, TikTok, YouTube – only if you allow video embeds (see the cookie policy).
• Our payment provider – when paid plans launch; it may act as the seller ("merchant of record") and has its own privacy policy.

We may disclose data if the law requires it, to protect rights and safety, or as part of a sale or merger of the business (you would be told).

6. International transfers

We are based in Israel, which the European Commission recognizes as giving adequate protection. Our providers in the USA receive data under the EU–US Data Privacy Framework and/or standard contractual clauses (and the UK and Swiss equivalents).

7. How long we keep it

• Waitlist data: until you unsubscribe or ask us to delete it, or 24 months after our last contact.
• Partner and brand applications: up to 24 months, or for the partnership plus the period tax law requires for payouts.
• Emails: as long as needed to handle your request.
• Data on your device: until you delete it (clear the site's data in your browser).
• Billing records (paid plans): as long as tax and accounting law requires (in Israel usually 7 years).

8. Your rights by region

Everyone can ask us to see, correct or delete their data and to stop marketing emails: write to [email protected]. We answer within 30 days (or faster where the law requires) and may need to confirm it's you. There's no fee.

European Economic Area and United Kingdom (GDPR / UK GDPR)

You can access, correct, delete, restrict or object to processing, ask for portability, and withdraw consent at any time. You can complain to your local data protection authority (in the UK, the ICO).

United States – California and other states

Under the CCPA/CPRA and similar state laws you can know what we collect, ask for deletion and correction, and opt out of sale or sharing. We do not sell or share personal information and don't process sensitive personal information. We won't discriminate against you for using your rights. You can use an authorized agent.

Canada (PIPEDA)

You can access and correct your information and withdraw consent; you can complain to the Office of the Privacy Commissioner of Canada.

Australia (Privacy Act 1988 / APPs)

You can access and correct your information and complain to us; if unresolved, to the Office of the Australian Information Commissioner (OAIC).

Israel (Protection of Privacy Law, including Amendment 13)

You can review your information and ask to correct or delete it. Providing data is voluntary; if you don't, we can't contact you or provide the related feature. You can complain to the Privacy Protection Authority.

9. Delete your data (including data from Facebook / Instagram)

1. In the app: More → Connect → "Disconnect" removes connected account data from your device.
2. Clearing the site's data in your browser deletes everything the app stored on your device.
3. To delete your waitlist entry, applications or emails: write to [email protected] with the subject "Delete my data". We confirm when it's done (within 30 days).
4. Revoke access: Facebook → Settings → Apps and websites → Fightzy → Remove; Google: myaccount.google.com/permissions.

10. Security

We keep data to a minimum, use HTTPS everywhere, a strict content security policy, no third-party trackers, read-only platform access, and login tokens that are never stored. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

11. Children

Fightzy is for adults who make content (16+, and 18+ for paid plans). It is not directed to children and we don't knowingly collect data from children under 16 (under 13 in the USA). If you film minors (for example a kids class), get their parents' or guardians' permission first.

12. Changes and contact

We'll post changes here with a new date, and email waitlist members about important ones. Questions: [email protected] · [Business legal name and registration number], [Business postal address, Israel].

תקציר בעברית