Privacy Policy

Boxing Combo Trainer (Boxing Combo Timer & Coach) — Android and iOS

Last updated: August 22, 2026  ·  Effective: August 22, 2026

This Privacy Policy describes how Boxing Combo Trainer ("the App"), published by Jonathan Mondaut ("we", "us", or "our"), collects, uses, shares, retains, and deletes information when you use the App. It applies to the Android application com.boxingtrainer.boxing_combo_trainer and its iOS equivalent.

We do not require you to create an account, and we never ask for your name, email address, postal address, phone number, or payment details.

Summary

• We collect no directly identifying personal information. There is no sign-up, and no name or email is ever requested.

• Your workouts and combos are stored on your device. Pro subscribers may additionally sync them to our cloud under a random anonymous ID.

• Optional voice commands use your microphone. Audio is processed for command recognition only — we never record, store, or transmit it. This feature is off by default.

• Free users see ads from Google AdMob, which uses advertising identifiers.

• You can delete all of your data at any time.

Information We Collect

Information You Provide:

• Workout Data: Custom combo configurations, timer and round settings, training preferences, and workout session records you create within the App. This data is stored locally on your device. Pro subscribers also have this data mirrored to a secure cloud database linked to an anonymous account (see Cloud Firestore below).

Information Collected Automatically:

• Anonymous Identifier: On first launch the App signs in anonymously via Firebase Authentication. This creates a random, non-personally-identifiable user ID used solely to link your subscription entitlement and (for Pro users) your cloud data. No name, email, or other personal information is associated with this identifier.

• Usage & Analytics Events: Anonymised in-app events collected via Google Analytics for Firebase to understand how the App is used. See the Google Analytics for Firebase section below for the full event list.

• Device & Technical Information: Device model, manufacturer, operating system version, screen characteristics, language and country setting, app version, and coarse network information. Some of this is read on-device by the App to adapt the interface; some is collected by the third-party services listed below.

• Advertising Identifier: For free-tier users, Google AdMob accesses your device's resettable advertising identifier (Android Advertising ID or iOS IDFA) and IP address to serve and measure ads.

• Firebase Installation ID: A random per-installation identifier used by Firebase Analytics and Firebase Remote Config to deliver configuration and attribute events. It is reset when you uninstall the App or clear its data.

• Purchase & Subscription Status: Whether you hold an active Pro subscription or lifetime entitlement, the product purchased, purchase and expiry dates, and the store platform. Handled through RevenueCat (see below).

• Voice Command Audio (optional, Pro): When you explicitly enable Voice Control, the microphone is used to detect spoken workout commands. See the dedicated section below.

• Now Playing Metadata (optional, Pro, Android only): If you grant Notification Access, the App reads the title and artist of the track currently playing on your device via Android's media session system. This data is displayed on-screen only and is never transmitted off your device or stored.

We do not collect: your name, email address, phone number, postal address, contacts, photos, files, precise or approximate location, health records, browsing history outside the App, or payment card details.

Voice Commands and Microphone Access

The App offers an optional hands-free Voice Control feature for Pro subscribers, so you can say commands such as "pause", "resume", "next round", or "stop" without touching your phone mid-workout. This requires the microphone permission (android.permission.RECORD_AUDIO on Android; NSMicrophoneUsageDescription and NSSpeechRecognitionUsageDescription on iOS).

How it works and what happens to your audio:

• It is off by default. Voice Control must be switched on deliberately in Settings or from the workout screen, and you must then grant the microphone permission at the operating-system prompt. If you decline the permission, the feature is automatically switched back off and the App works normally without it.

• The microphone is only active during a workout while Voice Control is enabled. It is not used on other screens, and it is not used while the App is in the background.

• We never record, store, or transmit your audio. The App does not write audio files, does not keep an audio buffer after recognition, and does not send any audio to our servers — we operate no server that receives audio.

• Speech is converted to text by your device's operating system, not by us. On Android the App requests on-device recognition where the device supports it (Android 12 and later), so audio is processed locally; on older devices, and on iOS, recognition is handled by the platform's own speech recognition service (Google's Android speech recognition service, or Apple's Speech framework), which may process audio on Apple's or Google's servers under their privacy policies. See Google's Privacy Policy and Apple's Privacy Policy.

• The recognised text is discarded immediately. The App matches the transcript against a fixed, short list of workout commands and then drops it. Transcripts are never saved to your device or sent anywhere.

• Analytics record only which command matched — for example the literal word pause or next_round, or the fact that no command was recognised. The raw transcript of what you said is never included in analytics.

• You can revoke access at any time by turning off Voice Control in the App's Settings, or by removing the microphone permission in your device settings (Android: Settings > Apps > Boxing Combo Trainer > Permissions > Microphone; iOS: Settings > Privacy & Security > Microphone).

Third-Party Services

The App uses the following third-party services, which act as processors or independent controllers of the data described below. We share data with them only for the purposes stated. We do not share your data with any other category of third party.

Google AdMob (Google Ireland Ltd. / Google LLC) — advertising, free tier only

We use Google AdMob to display advertisements to free-tier users. AdMob may collect and use:

• Device advertising identifiers (Android Advertising ID / IDFA)

• IP address and approximate location derived from it

• Device, operating system, and app information

• Ad interaction data (impressions, clicks, viewability)

Pro subscribers receive an ad-free experience and no ad requests are made for them. You can limit or opt out of personalised advertising at any time through your device's advertising settings, as described under Your Rights. See Google's Privacy Policy and how Google uses data from apps that use its services.

Google Analytics for Firebase (Google) — product analytics

We collect anonymised usage events to understand how the App is used and to improve it. Events include:

• Workout started, completed, or ended early (round count, duration, combo settings)

• Individual round completions

• Custom combo saved or deleted; workout created or edited

• Workout summary shared, and the target platform (e.g. Instagram)

• Paywall viewed, dismissed, or a plan selected

• Pro subscription or free trial started

• Music overlay interactions (play/pause, skip)

• Stats, history, and training programme screen views; lesson started or completed

• Pro-gated feature taps

• Voice Control toggled on or off, voice command activated, which command matched, and whether recognition failed — never the raw transcript

Events are linked to the anonymous Firebase user ID and installation ID described above, never to personally identifiable information. See Firebase's Privacy Information.

Firebase Authentication (Google) — anonymous identity

Creates an anonymous account for each installation on first launch. This account:

• Does not require a name, email address, password, or any personal information

• Generates a random unique ID used to link your subscription entitlement and cloud-synced data

• Is discarded when you uninstall the App or clear its data

See Firebase's Privacy Information.

Cloud Firestore (Google) — cloud sync, Pro users only

Pro subscribers have their workout data mirrored to Cloud Firestore so it survives a reinstall or device change. Data stored under your anonymous Firebase user ID includes:

• Workout session records (rounds, duration, combos completed, timestamps)

• Custom combo and workout configurations

• App settings and training preferences

This data is protected by Firebase Security Rules so it is readable and writable only by your own anonymous account. It is never used for advertising and is never sold or shared with advertisers. Free-tier users' data never leaves their device.

Firebase Remote Config (Google) — feature configuration

Used to adjust App settings (such as pricing presentation, trial length, and feature availability) without shipping an update. It receives your Firebase installation ID, App version, platform, language, and country in order to return the correct configuration. It does not receive your workout data. See Firebase's Privacy Information.

RevenueCat (RevenueCat, Inc.) — subscription management

Manages in-app subscriptions and purchases for the Pro tier. RevenueCat receives:

• Your anonymous Firebase user ID, used as the RevenueCat app user ID

• Purchase transaction data (purchase date, product identifier, subscription status, renewal and expiry dates)

• Device platform, App version, and country

RevenueCat does not receive your name, email address, or payment details — payment is handled entirely by Apple's App Store or Google Play, and we never see your card or billing information. See RevenueCat's Privacy Policy.

Google Play Billing / Apple App Store — payment processing

All purchases are processed by Google or Apple under their own privacy policies. We receive only a confirmation that a purchase occurred and its status; we never receive or store payment card numbers or billing addresses.

Google Fonts (Google) — typography

The App may download typefaces from Google's font servers on first use. Such a request necessarily discloses your IP address and basic device information to Google. Fonts are then cached on your device. No workout or account data is sent.

Notification Access — Now Playing (optional, Pro, Android only)

Pro subscribers can optionally grant Notification Access so the App can show the currently playing track and offer media controls (play/pause, skip) during a workout.

• The App uses this permission solely to read the active media session (track title and artist). It does not read, store, or transmit the content of any other notification.

• Now Playing metadata is displayed on-screen only. It is never stored and never transmitted to us or any third party.

• Granting this permission is entirely optional; the App functions normally without it.

• You can revoke it at any time via Settings > Apps > Special app access > Notification access.

Permissions We Request and Why

• Microphone (RECORD_AUDIO, Android; NSMicrophoneUsageDescription, iOS) — optional, Pro only. Detects spoken workout commands. Off by default. See Voice Commands and Microphone Access.

• Speech Recognition (NSSpeechRecognitionUsageDescription, iOS) — optional. Converts spoken commands to text for matching.

• Internet / Network access (INTERNET) — required. Loads ads, syncs Pro cloud data, fetches remote configuration, and validates subscriptions.

• Vibration (VIBRATE) — required. Provides haptic round and interval cues.

• Keep screen awake (WAKE_LOCK) — required. Prevents the screen from sleeping during a timed workout.

• Notification access (optional, Pro, Android) — reads the active media session for Now Playing controls.

The App does not request location, camera, contacts, calendar, SMS, call log, or file storage permissions.

How We Use Information

• To operate the App's core features: timers, combos, workouts, statistics, and training programmes

• To recognise optional spoken commands so you can control a workout hands-free

• To sync Pro users' data across reinstalls and devices

• To determine whether you hold an active Pro entitlement and unlock the corresponding features

• To display advertising to free-tier users

• To understand aggregate usage patterns, diagnose problems, and improve the App

• To comply with legal obligations

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles ourselves.

Data Sharing

We do not sell, rent, or trade your personal information, and we do not share it for cross-context behavioural advertising beyond the AdMob processing described above. Information is shared only with these categories of party:

• Advertising partners: Google AdMob (free-tier users only).

• Analytics and cloud infrastructure providers: Google (Firebase Analytics, Authentication, Cloud Firestore, Remote Config, Google Fonts).

• Subscription infrastructure providers: RevenueCat; Google Play and Apple App Store for payment processing.

• Operating system speech services: Google or Apple, where on-device speech recognition is unavailable and you have enabled Voice Control.

• Legal and safety: We may disclose information if required by applicable law, regulation, legal process, or enforceable governmental request, or to protect our rights, safety, or property.

• Business transfer: If the App is acquired or merged, data may be transferred to the acquiring entity, which will remain bound by this Policy or provide notice of any change.

International Data Transfers

Our service providers may process and store data on servers located outside your country of residence, including in the United States. Where data originating in the European Economic Area, the United Kingdom, or Switzerland is transferred abroad, our providers rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Data Security

We take reasonable and appropriate technical and organisational measures to protect information:

• All network communication between the App and our service providers is encrypted in transit using HTTPS/TLS.

• Data at rest in Cloud Firestore is encrypted by Google's infrastructure.

• Cloud data is protected by Firebase Security Rules that restrict every document to the anonymous account that created it, so no user can read another user's data.

• Local data is stored in the App's private, sandboxed storage area, which the operating system isolates from other apps and encrypts at rest on modern devices.

• Access to production systems is limited to the developer and protected by multi-factor authentication.

No method of electronic transmission or storage is completely secure, so while we strive to protect your information we cannot guarantee absolute security.

Data Retention

• On-device data (workouts, combos, settings, cached anonymous ID): retained until you delete it in the App, clear the App's data, or uninstall the App.

• Cloud Firestore data (Pro): retained for as long as your anonymous account exists, and deleted within 30 days of a verified deletion request.

• Analytics events: retained by Google Analytics for Firebase for a maximum of 14 months from collection, after which they are automatically deleted or retained only in aggregated, non-identifying form.

• Subscription and purchase records: retained by RevenueCat and the app stores for the life of the entitlement and thereafter as required for tax, accounting, refund, and audit obligations (typically up to 7 years under applicable law).

• Advertising data: retained by Google in accordance with its own retention schedule.

• Voice audio and transcripts: not retained at all. Audio is processed transiently for command recognition and never written to storage by the App.

Your Rights and How to Delete Your Data

Delete everything yourself, at any time:

• On device: uninstalling the App, or clearing its data (Android: Settings > Apps > Boxing Combo Trainer > Storage > Clear data; iOS: delete the App), removes all locally stored information — workout history, combos, settings, and the cached anonymous identifier — immediately and permanently.

• In the App: individual workouts, combos, and history entries can be deleted at any time from the screens where they are listed.

Request deletion by email: write to mondautjonathan@gmail.com with the subject line "Data deletion request". If you are a Pro user, include your anonymous user ID (shown in the App under Settings > Account > Anonymous Account) so we can locate the correct record. We acknowledge requests within 7 days and complete deletion of cloud-stored data within 30 days. Deleting your data ends cloud sync; it does not cancel your subscription (see below).

Other rights. Depending on where you live — including under the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and comparable laws — you may have the right to access, correct, delete, restrict, or object to processing of your personal information, to withdraw consent, to data portability, and to opt out of the sale or sharing of personal information and of targeted advertising. Because we hold no directly identifying information about you, we may need the anonymous user ID above to act on a request. We do not discriminate against anyone for exercising these rights. To exercise any right, contact us at the email address above. EEA and UK users also have the right to lodge a complaint with their local supervisory authority.

Additional controls:

• Voice Control: turn it off in the App's Settings, or revoke the microphone permission in your device settings.

• Notification Access (Pro, Android): revoke via Settings > Apps > Special app access > Notification access.

• Personalised ads: reset or delete your advertising identifier and opt out of personalisation via Settings > Privacy > Ads on Android or Settings > Privacy & Security > Tracking on iOS. Upgrading to Pro removes ads entirely.

• Subscription management: manage or cancel Pro at any time through your Google Play or Apple ID account settings.

Children's Privacy

The App is intended for a general audience aged 13 and over and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where that is the applicable age of digital consent). If you are a parent or guardian and believe a child has provided us with personal information, contact us at mondautjonathan@gmail.com and we will delete it promptly.

Health and Fitness Disclaimer

Workout records you create are fitness activity records, not medical records. We do not collect data from Apple Health, Google Fit, Health Connect, or any wearable device, and we do not share fitness data with advertisers.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App and reflected by a new "Last updated" date at the top of this page. Continued use of the App after an update constitutes acceptance of the revised Policy. Previous versions are available on request.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, contact the data controller:

Jonathan Mondaut
Developer, Boxing Combo Trainer
Email: mondautjonathan@gmail.com

We aim to respond to all privacy enquiries within 7 days.

© 2026 Boxing Combo Trainer. All rights reserved.