Privacy Policy

Fighter Cut · Last updated 5 October 2026

Fighter Cut is a weight-cut and nutrition tracker for combat athletes. It is built local-first: by default, everything you log lives in storage on your own device and is never sent anywhere. This document explains exactly what that means, and names the one optional feature that is an exception.

What stays on your device

Unless you deliberately turn on the optional gym feature described below, all of the following is stored only on your device, in your browser's or the app's local database, and is never transmitted to us or to anyone else:

Your profile — name, sex, birth year, height, weight, sport, weight class, fight date
Food logs, meals, and everything you scan or search
Body measurements and body-fat readings
Workouts, training sessions, and fasting timers
Your supplement stack and check-offs
Your generated cut plan and calorie/macro targets
Any Apple Health or Health Connect data you connect or import (see below)

An account is the exception. Everything above is stored only on your device while you have no account. If you create one, your tracking history is also backed up to our server so it survives a lost or wiped phone and follows you to a second device: food logs, custom foods and meal presets, recipes, workouts, fasting sessions, body measurements, weigh-ins, your supplement stack and check-offs, and your recovery and injury records.

What is still never sent, even with an account: any Apple Health or Health Connect data you connect or import. Health data never leaves your device.

Meal photos stay on your device by default and are not part of the backup. They leave it in two cases only. First, if you use food recognition or the label reader, the photo you take is sent to OpenAI for that one request so it can be read. Second, if you are in a club and turn on the separate photo sharing switch, your meal photos from the last 14 days are uploaded to a private storage bucket that only you and your club's staff can read. Turning that switch off, or deleting a photo on your phone, removes it from the server on the next sync. A note you write on a photo is never uploaded.

The backup is locked to your account at the database level — nobody else can read it, not another athlete and not a coach, unless you separately switch on club sharing below. Club sharing is a different thing with a different list, and each of its switches says exactly what it shares. Delete your account and the backup is deleted with it.

There is no account required to use the app. Without one, nothing above is sent anywhere, and deleting the app (or clearing site data) deletes this information permanently — so use the backup export in Settings if you want to keep it. "Wipe all data" in Settings clears this device and signs you out; it does not delete a server backup, because that belongs to the account — "Delete my account" does.

Apple Health

Fighter Cut can read a limited set of Apple Health data — body mass, body fat percentage, active and basal energy, steps, exercise minutes, resting heart rate, sleep, and workouts — so your cut plan and daily calorie target reflect what your body is actually doing, and so the app can show your calories burned, steps and workouts. There are two ways to provide it: tapping "Sync now" in the iOS app, which asks Apple for read access and then reads roughly the last four months on your device, or importing an export file you generate yourself in the Health app. Both paths are optional, and neither runs unless you start it.

Health data never leaves your device. It is read, processed on-device, and written to the same local database as everything else. Fighter Cut writes to Apple Health only what you switch on under Profile, Apple Health: your weigh-ins, your logged food calories and your logged water, so they appear on your Apple Watch and in other apps. Each switch is off until you turn it on, and turning it off stops new entries. Fighter Cut never stores health data in iCloud, and never uses it for advertising, marketing, or data mining. Read access is requested only when you tap "Sync now", and you can change or revoke it at any time in iOS Settings under Health → Data Access.

Health Connect (Android)

On Android, Fighter Cut can read the same limited set of data from Health Connect: weight, body fat, active calories burned, basal metabolic rate, steps, resting heart rate, sleep sessions and exercise sessions. It asks for read access when you tap "Sync now" or connect from Profile. If you turn on sharing under Profile, Apple Health, it also asks to write your weigh-ins, food calories and water, and writes only those. Because Health Connect limits apps to the last 30 days unless they also hold history access, the same request asks for permission to read older records, so a camp longer than a month is complete. You can refuse any single type.

Health Connect data never leaves your device. Fighter Cut writes to Health Connect only the weigh-ins, food calories and water you choose to share, never sends what it reads to our servers or to anyone else, never includes it in the account backup, a bug report or club sharing, and never uses it for advertising, marketing, credit or insurance decisions, or to train any model. It is used only to show your trends and adjust your cut plan and calorie target inside the app. You can change or revoke access at any time in the Health Connect app, under App permissions. Our use of data from Health Connect follows the Health Connect Permissions Policy, including its Limited Use requirements.

Analytics and tracking

Fighter Cut contains no advertising network and no third party trackers. It has one optional analytics tool, PostHog, and it is off until you turn it on. After you sign in, the app asks once on each device. Both answers start at No, and if your browser sends Do Not Track or Global Privacy Control we treat that as a No and do not ask.

Usage analytics, if you allow it, records which screens you open, which buttons you tap and a few milestones (account created, onboarding finished, a food logged, a weigh in logged, a plan created, a workout logged, a fight clip analysed, the paywall seen, a trial started). Each event is tied to your account id, never to your email or name. Events carry labels and counts only: never your weight, calories, food, doses, injuries or any other health value. The text of what you tap is not recorded.

Session replay is a separate choice, and it needs analytics turned on first. It records taps, scrolls and the layout of the screen so we can see where the app is confusing. Every input field is masked, every piece of text is masked, and images, video and drawings are hidden. The screens that show your weight, food log, supplements, recovery and injuries, profile health details and payment are not recorded at all, and neither is any sheet that opens over a screen.

PostHog is run by PostHog Inc. in the United States (US cloud), as our processor. Nothing is loaded from PostHog until you say yes. You can withdraw at any time in Settings → Privacy: turning the switches off stops collection and recording on that device at once. When you delete your account, your analytics profile in PostHog is deleted too. Past usage events are kept, with nothing linking them to you. To ask about anything else PostHog holds, write to privacy@fightercut.com.

The website fightercut.com is different. It uses Cloudflare Web Analytics, which counts page views without cookies and without identifying you, and it loads Google Analytics only if you press Accept in the cookie banner. If you decline, or your browser sends Global Privacy Control, Google Analytics is never loaded. The website's fonts are hosted on our own server, so no font request goes to Google. See the Cookie Policy.

There is no automatic crash reporter. If the app breaks, nothing is sent unless you choose to tell us — see the next section.

When you report a bug

The app has a Help & support screen where you can send us a bug report or a question. Nothing on that screen sends anything until you press Send, and you can see the exact payload before you do.

A report always contains what you typed. It can also contain, only if you leave the switches on:

Your setup — app version and build, device type, screen size, language, time zone, whether you are online, and how many rows are in each local table. Counts only. Never what is in them.
What you were doing — the last 40 screens you opened and any errors along the way, with links, email addresses and long numbers stripped out both on your device and again on our server.
A screenshot, only if you attach one. Everything visible in the image is uploaded, so check it first.
Your account id, only if you are signed in, so the report follows your account to your other devices. Signed out, a report carries no identifier at all.

A report never contains your food log, your weigh-ins, your measurements, your notes, your supplement stack, or anything from Apple Health. That is structural, not a policy: the code that assembles a report reads row counts and never row contents.

The report form does not ask for your email address. You get a reference code when a report is filed, and we answer inside the app under Help → Your reports. If you filed the report while signed in to an account, we also send our reply to that account's email address so you do not have to keep checking. Signed out, the reply is readable only on the device you filed from — wiping the app's data removes the key that reads it back.

An error message is written by the app, but it can occasionally quote something you typed — which is why the whole payload is shown to you before it is sent. Reports are kept until we resolve them, and are deleted on request: file a report of type “My data” quoting the reference code of the one you want erased.

The one exception: club and gym accounts

Fighter Cut has an optional feature for gyms and fight teams. It is off unless you seek it out, and the tracker never asks you to create an account. If you choose to use it:

You create an account with an email address and password, handled by our authentication provider (Supabase). This is the only point at which we hold an identifier for you.
You may publish a fighter profile — weight class, record, short bio, and a photo if you upload one — visible on your club's page. Your name is shown to others as a first name and last initial ("Chris M."), or as the fight name you choose; the full name you type is stored so that only you can read it, and is never shown to another athlete, a coach, or a visitor.
You may separately opt in to sharing progress with your coach. This is a second, explicit switch on top of having an account. When on, it shares your weigh-ins and training sessions (type, duration, distance, effort) with your club's staff. It does not share your food logs, measurements, supplements, or health data. Turning it off deletes the shared history from our servers.

Nutrition is a THIRD switch, separate again, and off unless you turn it on. The switch above never shares your food logs; this one does, and it says so when you turn it on. It shares with your club's staff each day's totals — calories, protein, carbohydrate and fat, minutes trained, distance covered, the kinds of session, and that day's weigh-in — and the individual foods, portions and recipes you logged, so a coach can see what a number was made of. It never shares a meal photo, your supplement stack, your measurements, or Apple Health data. Turning it off deletes every shared day, item and recipe from our servers; so does leaving your club.

Club data is access-controlled so that only you and your own club's staff can read your rows. If you never create an account, nothing is uploaded by simply using the app — the only thing that can leave the device is a bug report you write and send yourself.

Coaching emails

If you have an account, you can turn on Coaching emails in Settings. It is off until you switch it on. While it is on, we send a short course on using the app, then countdown emails before your date, and the app shares a small summary of your plan so we can pick the right one: your first name, discipline, goal type, your date, whether the plan uses a weigh in, your display units, whether your projection is on track and by roughly how much, whether you have reached your target, whether you said you have cut weight before, your current streak, how many weigh ins and logged days you have, and the dates you first logged a weigh in, a meal and a session and last logged anything. It never includes a weight, a food, a note, a measurement or Apple Health data.

Turning the switch off, or using the unsubscribe link in any of these emails, stops them and deletes that summary from our servers. We keep a record of which of these emails we sent you, and when, for as long as your account exists.

Other network requests

When you search the food or supplement catalogues, the app may query public reference databases (such as USDA FoodData Central, the NIH Dietary Supplement Label Database, and Open Food Facts) to look up an item. These requests carry your search term only — never your logs, your identity, or your health data. Product links may carry an affiliate tag, which tells the retailer the visit came from Fighter Cut; it does not tell them who you are.

Children

Fighter Cut is for people 13 and older. If you are 13 to 17, you need the consent of a parent or guardian to use it, and a purchase must be made by someone 18 or older or by a parent or guardian. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it. If you believe a child under 13 has given us data, write to privacy@fightercut.com. Weight cutting carries real health risks and should never be undertaken by a minor without adult supervision and professional advice.

Not medical advice

Fighter Cut is not a medical service. We are not doctors, registered dietitians, or licensed healthcare professionals. Everything in this app — including cut plans, nutrition targets, and supplement information — is general educational information for athletes, not medical advice, diagnosis, or treatment. Weight cutting carries serious health risks when done improperly. Always consult a qualified physician or registered dietitian before making significant changes to your diet, starting supplements, or undertaking a weight cut. You use this app at your own risk.

Who processes it, and for how long

Account, backup and club data, including shared meal photos, is stored with Supabase (database, sign in and file storage). The website and app are served by Cloudflare, which also runs Cloudflare Turnstile, the bot check on sign in, sign up and password reset (it sees your IP address and browser signals for that check), and Cloudflare Web Analytics, which counts visits without cookies. Email we send (sign in confirmations, password resets, coach digests, coaching emails, support replies, billing notices) goes through Resend. A photo you submit for food or label recognition is sent to OpenAI for that one request and is not kept by us. Pro subscriptions and gym seats are paid through Stripe checkout on fightercut.com; Stripe receives your email, payment details and the plan you buy, and nothing from your tracker. In the Android app, Pro is bought through Google Play: Google takes the payment, and we receive the purchase record (plan, price, order number, status) tied to your account so Pro works on every device. If you turn on notifications, your device's push token is stored with your account and used to deliver reminders and coach messages through Apple Push Notification service on iPhone or Firebase Cloud Messaging (Google) on Android; those services receive the token and the message text only. Food searches may go to Open Food Facts, USDA FoodData Central and the NIH Dietary Supplement Label Database, which receive the search term only. Google Analytics runs on fightercut.com only, and only after you accept analytics cookies; the app never loads it. PostHog Inc. (United States) receives app usage analytics and masked session replays, only from a device where you opted in; see Analytics and tracking. Fonts are self hosted, so Google Fonts receives nothing. Each of these processes data on our instructions under its own data-processing terms.

Retention is bounded. Your backup and profile last as long as your account. Coach notifications are deleted after 90 days, and the moment you withdraw a sharing switch or leave a club. Resolved support reports are deleted 180 days after the last activity; open ones stay until resolved. Rate-limiting counters are deleted after two days. Deleting your account deletes your backup, profile, shared data, notifications about you, support reports and recovery-email settings immediately.

Changes to this policy

If the app's data handling changes, this page changes with it, and the date at the top is updated. Material changes to what is collected or shared will be surfaced in the app.

Legal bases

Under the GDPR we rely on these legal bases. Contract: to run your account, backup, club features, support replies and any subscription you buy. Consent: for each sharing switch, for Coaching emails, for Apple Health access, for PostHog analytics and session replay in the app, and for Google Analytics on the website; you can withdraw consent at any time and it stops the processing from then on. Legitimate interests: to keep the service secure (bot checks, rate limits) and to count website visits without cookies. Legal obligation: to keep billing records as tax law requires.

Your rights and choices

Wherever you live, you can ask us to: access the personal data we hold about you; rectify it if it is wrong; erase it; receive it in a portable format (portability); object to a use based on legitimate interests; and restrict how we use it while a request is looked at. Much of this is self service: Settings lets you export and delete everything on your device, and Settings → Account deletes your account and everything held about it. For anything else, write to privacy@fightercut.com; we answer within a month. You also have the right to complain to the French data protection authority, the CNIL (cnil.fr), because our controller is established in France, or to the supervisory authority where you live.

California and other US state privacy rights

We do not sell or share personal information, as those words are defined in the California Consumer Privacy Act (CCPA, as amended by the CPRA), and we do not use it for cross context behavioural advertising. California residents, and residents of other states with similar laws, have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing (there is none to opt out of); to limit the use of sensitive personal information; and not to be treated differently for using these rights. The categories we collect are the ones described above: identifiers (email, account id), the tracking data you choose to back up or share, payment records held by Stripe, and support reports. We honour Global Privacy Control: if your browser sends it, fightercut.com treats it as a refusal of analytics and never loads Google Analytics, and the app keeps PostHog off unless you turn it on yourself. To make a request, write to privacy@fightercut.com. We may need to confirm the request comes from the account holder. An authorised agent may act for you with your signed permission.

Contact

Fighter Cut is published by SARL Machetto Douglas, 161 Rue de la Confrérie, 74500 Publier, France, which is the data controller for the account, club and support data described above. Write to privacy@fightercut.com for any privacy question or request.