Privacy policy

This privacy policy explains how Krav Maga Elite and Battlebridge Bootcamp ("we", "us", "our") collect, use, store, and share personal data when you use the Krav Maga & Bootcamp mobile application and related member services.

We operate two separate training brands from one app: Krav Maga Elite (KME) and Battlebridge Bootcamp. Your data is always scoped to the brand you belong to. KME data is never visible in Bootcamp views, and vice versa.

We are the data controller for personal data processed through the app. For questions or to exercise your rights, contact us using the details in the Support section.

Depending on how you use the app, we may process:

• Account details: name, email address, phone number, member number, and login credentials.
• Membership data: member type, programme tags, belt level (KME), subscription and billing status synced from our CRM and payment provider.
• Class activity: bookings, waitlist status, attendance, check-in records, no-shows, late cancellations, and training streaks.
• Curriculum and progress: syllabus completion, milestone badges, and event registrations.
• Optional health and fitness data (Bootcamp only): body metrics such as weight, waist, body fat, and resting heart rate, plus progress photos you choose to upload.
• Device and location data: approximate location when you check in at the gym (to verify you are on site), device push notification tokens, and basic device information needed to run the app.
• Communications: messages you send through in-app contact forms and retention notes logged by coaches (staff only).
• Payment data: when you pay for events or memberships through the app, payment is processed by Stripe. We do not store full card numbers on our servers.

Body metrics and progress photos are entirely optional for Bootcamp members. Metrics require your explicit consent when logging. Photos are stored in a private storage bucket and are not shared with other members.

We use personal data to:

• Create and manage your member account and family or guardian links where applicable.
• Let you browse classes, book sessions, check in, and view your training history.
• Operate membership billing, payment status, and access to paid features.
• Send service notifications such as class reminders, waitlist promotions, and account updates (you can manage notification permissions on your device).
• Support coaches and admins with retention, welfare, and operational tools scoped to your gym brand.
• Improve app reliability, troubleshoot issues, and maintain security.
• Comply with legal obligations and respond to lawful requests.

We do not use your data for third-party advertising. Location is used only for gym check-in verification, not for marketing or tracking outside the gym.

We rely on the following legal bases, as applicable:

• Contract — to provide the membership services you have signed up for.
• Legitimate interests — to operate the gym safely, manage classes, prevent fraud, and improve our services (balanced against your rights).
• Consent — for optional Bootcamp body metrics, progress photos, and push notifications where required.
• Legal obligation — where we must retain or disclose data by law.

• You can see your own member data in the app.
• KME instructors and coaches can see attendance and rosters for sessions they teach. Bootcamp coaches can see assigned members’ optional body metrics and progress photos for coaching purposes.
• Authorised admins and owners for your brand can access member data for operational, billing, and retention support.
• Other members cannot see your personal data, health metrics, or photos.
• Guardian accounts can manage linked child profiles where family linking is enabled.

We use trusted service providers who process data on our behalf only as needed to run the app:

• Supabase — secure hosting of member data, authentication, and file storage.
• Stripe — payment processing for memberships and event tickets.
• GoHighLevel (GHL) — CRM sync for membership tags, contact records, and billing status.
• Expo / Firebase Cloud Messaging — delivery of push notifications on your device.
• Resend — delivery of contact-form emails to our support inboxes.

These providers are bound by contractual obligations to protect your data and may only use it to deliver services to us. We do not sell your personal data.

We keep personal data for as long as your membership is active and for a reasonable period afterwards to handle billing queries, legal claims, and audit requirements. When you request deletion, we will remove or anonymise data unless we must retain it by law or for legitimate business records (for example, payment history).

We use industry-standard measures including encrypted connections (HTTPS), role-based access controls, tenant isolation between KME and Bootcamp, and secure storage for photos and credentials. No method of transmission over the internet is completely secure; please use a strong, unique password and keep your device secure.

Under UK GDPR and applicable data protection law, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion in certain circumstances.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Data portability for data you provided in a structured format.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise these rights, email the relevant gym using the contacts on our Support page. We will respond within one month unless the request is complex.

Family child profiles may be created under a parent or guardian account. Children’s profiles use the parent’s contact details and do not have separate app login credentials where login is disabled for minors. Parents and guardians are responsible for managing linked child accounts.

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as UK adequacy decisions or standard contractual clauses).

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy where permitted by law.

Unit 2 – The Mousery, Battlesbridge, Essex, SS11 8GH, United Kingdom

• Krav Maga Elite: team@kravmagaelite.co.uk · 01920 282 032
• Battlebridge Bootcamp: hello@battlebridgebootcamp.co.uk · 01920 282 032

See also our Terms and conditions.