Who is responsible
- Data controller: Thomas Sarhan and Raji Nasr Allah
- Contact: tappedoutnetwork@gmail.com
For anything about privacy, write to that address.
What data we process
- Account: email, date of birth, account type (fighter, gym or promotion) and language. Your password is handled by Amazon Cognito; we never see it.
- Profile: display name, disciplines, level, weight classes, city, photo, bio, record and affiliations. For gyms and promotions, also the name, the gym's address and any contact details you publish.
- Activity: applications to opportunities, messages, posts, connections and reports.
- Location: only the city or point you choose, or your position if you tap “Use my location”. It powers searches by distance; we never publish a fighter's address.
- Payments: if you buy a place or a boost, Stripe processes your card details. We only keep the amount and the payment status.
- Use of the service: usage events (pages viewed, searches, applications) linked to an internal account ID, not to your name or email.
- Technical data: IP address and browser details in our server logs.
Minors
You must be at least 14 to create an account. Accounts of people under 18 are private: they never appear on a public page or in search engines.
What we use it for, and the legal basis
- Providing the service: your account, your page, messages and applications. Basis: the contract you accept when you sign up (Art. 6(1)(b) GDPR).
- Moderating and protecting the platform: automatically screening the text of posts and messages, preventing abuse and keeping technical logs. Basis: our legitimate interest in a safe service (Art. 6(1)(f) GDPR).
- Improving the product with usage statistics. Basis: legitimate interest (Art. 6(1)(f) GDPR).
- Remembering which posts you open to order the public feed. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Taking payments and meeting tax and accounting duties. Basis: the contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR).
We do not sell your data or use it for advertising.
What is public
Profiles of adult fighters, gym and promotion pages, events and open opportunities are public, and search engines can index them. Your messages, applications, availability and private contact details never are.
We build some pages ourselves from public information before their owner signs up. You can claim a page that is yours, or ask us to remove it, by writing to tappedoutnetwork@gmail.com.
Who we share it with
Only with providers that process data on our behalf and under contract:
- Amazon Web Services EMEA SARL: hosting, database, sign-in, sending email, translation and maps. Data is stored in its Ireland region (EU).
- OpenAI: automatic screening of the text of posts and messages for prohibited content. It may be processed in the United States, under the EU-US Data Privacy Framework and standard contractual clauses. Under its terms, OpenAI does not use this data to train its models.
- Stripe: payment processing, when you pay for something on the platform.
We may also disclose data to the authorities when the law requires it.
How long we keep it
- Account and profile: for as long as your account exists. When you delete it, we remove your sign-in, anonymise your account, and your profile and posts stop being shown. Bouts you share with another fighter stay on their record, without your name.
- Technical logs: up to 30 days.
- Usage statistics: kept linked only to an internal ID; once your account is deleted they can no longer be tied to your email.
- Payment data: for as long as tax and accounting law requires.
Your rights
You can ask us for access to your data, to correct or erase it, object to or restrict a use of it, ask for it in a portable format, and withdraw your consent at any time. Write to us at tappedoutnetwork@gmail.com.
You can delete your account yourself from Settings. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Cookies
- to_session (necessary): keeps you signed in. Lasts 12 hours.
- to_consent (necessary): stores your cookie choice. Lasts one year.
- NEXT_LOCALE (necessary): remembers your language. Deleted when you close the browser.
- to_taste (optional): remembers which posts you open to order the public feed. Only set if you accept all cookies. Lasts six months.
We use no advertising or third-party cookies. You can change your choice at any time from “Cookie settings” at the foot of the page.
Changes
If we change this policy, we will update the date at the top. If the change is significant, we will tell you beforehand, in the platform or by email.