Legal

Privacy Policy

Matrix Fist is built on transparency. This policy explains exactly what data we collect, why we collect it, and how it is used — including what is shared publicly.

Effective: May 2026 · Developer: Creative Dissonance · App: Matrix Fist

01 — Overview

Who We Are

Matrix Fist is a competitive hand-combat tracking app developed by Creative Dissonance (Brampton, Ontario, Canada). The app allows players to log wins, confirm match results, climb a global leaderboard, and create shareable player trade cards.

Contact: matrixfist.official@gmail.com · matrixfist.com

02 — Public Leaderboard

Your Data Appears on a Public Leaderboard

⚠️ Important: When you create a Matrix Fist account, your handle (username), win/loss record, rank, and location (city/country if provided) are displayed on a public global leaderboard visible to all users of the app and on the Matrix Fist website. By creating an account you consent to this public display.

This is a core feature of the app — Matrix Fist is a competitive ranking system and your standing is inherently public. If you do not wish your record to be publicly visible, do not create an account.

Your email address, age, and device information are never shown publicly and are used only for account management.

03 — Data We Collect

What We Collect and Why

DataWhy We Collect ItPublicly Visible
Email addressAccount authentication onlyPrivate
Password (hashed)Account security — never stored in plain textPrivate
Handle (username)Your identity in the app and on the leaderboardPublic
Display nameShown on your profile and trade cardPublic
Win/loss record & rankCore ranking functionality; shown on leaderboard and trade cardPublic
Country & cityProfile display and challenge eligibility (same-country rule)Public
Age / age groupEnforcing age-group challenge restrictions (10–17 vs 18+)Private
Profile photoDisplayed on your profile and trade card (optional)Public
Match recordsWin/loss history for ranking and verificationPublic
Signature movesDisplayed on trade card at Fighter rank and abovePublic
Push notification tokenDelivering in-app alerts (win confirmations, challenges, rank-ups)Private
Device typeiOS/Android detection for push notificationsPrivate

Location data is user-entered text (city name, country selection). Matrix Fist does not use GPS or precise location tracking.

04 — How We Use Your Data

Use of Data

Account operation: Your email and password are used solely for authentication. We use Supabase (supabase.com) as our backend provider, which stores data encrypted at rest in secure data centres.

Ranking system: Match results, wins, losses, and rank are used to calculate your position on the global leaderboard and to determine rank promotions.

Push notifications: Your device push token is used to deliver real-time alerts for match confirmations, challenges, and rank changes. Tokens are stored securely and never shared.

Trade cards: Your public profile data (handle, record, rank, photo, location) is used to generate your shareable trade card at matrixfist.com/tradecard.

Challenge eligibility: Your country and age group are checked to enforce same-country and age-group challenge rules. This data is not shared with other users directly.

05 — Data Sharing

Who We Share Data With

Matrix Fist does not sell, rent, or trade your data with any third party. We share data only as follows:

Supabase: Our backend database and authentication provider. All data is stored on Supabase's servers under their privacy policy.

Resend: Used to send transactional emails (account confirmation, password reset). Only your email address is shared for this purpose.

Expo / Expo Push Notification Service: Your push notification token is passed to Expo's push service to deliver notifications to your device. Expo routes these through Apple APNs (iOS) and Google FCM (Android).

Printify: If you access rank-based merchandise stores, you are directed to Printify-hosted storefronts. No personal data is automatically shared — any purchase is between you and Printify.

No advertising networks. No analytics platforms. No data brokers.

06 — Children's Privacy

Users Under 18

Matrix Fist allows users aged 10 and older, with parental or guardian consent required for users under 13. Users aged 10–17 may only challenge other players in the same age group — they cannot be challenged by or challenge adults (18+).

We do not knowingly collect more data from minors than from adult users. The same data minimisation principles apply to all users regardless of age.

If you believe a minor has provided personal information without appropriate consent, contact us at matrixfist.official@gmail.com and we will delete it promptly.

07 — Your Rights

Your Rights and Controls

Access: You can view all your public data in the app at any time.

Correction: You can update your handle, display name, photo, location, and signature moves in the Profile section of the app.

Deletion: You can permanently delete your account and all associated data directly in the app (Profile → Delete Account) or by emailing matrixfist.official@gmail.com. See our full account deletion page for details.

Notifications: You can disable practice reminders in the app (Profile → Practice Reminders toggle). Push notifications can be disabled at the OS level in your device settings.

Opt out of public leaderboard: The only way to remove your record from the public leaderboard is to delete your account. The leaderboard is a core feature and cannot be opted out of while maintaining an account.

08 — Data Retention

How Long We Keep Your Data

Your data is retained as long as your account is active. Upon account deletion, all personal data is permanently and immediately deleted from our systems — including your profile, match records, notifications, and authentication credentials.

Server access logs held by Supabase may be retained for up to 30 days for security purposes before automatic deletion. These logs contain IP addresses and request timestamps and are not shared with third parties.

09 — Security

How We Protect Your Data

All data transmitted between the app and our servers is encrypted using HTTPS/TLS 1.2+. Passwords are stored as one-way hashes and are never retrievable. Data at rest is encrypted by Supabase infrastructure.

Push notification tokens and email addresses are never logged or exposed in client-accessible APIs beyond their required function.

10 — Changes & Contact

Policy Updates and Contact

This policy may be updated from time to time. Significant changes will be communicated via the app. Continued use of the app after changes constitutes acceptance of the updated policy.

For any privacy questions, data requests, or concerns:

Email: matrixfist.official@gmail.com
Website: matrixfist.com
Developer: Creative Dissonance, Brampton, Ontario, Canada
Response time: Within 7 business days