Last updated: October 8, 2026
ArmourID ("ArmourID," "we," "us") provides a digital identity and compliance platform for combat sports — connecting athletes, athletic commissions, promotions, gyms, and managers. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the ArmourID mobile app and website.
Medical and health information is sensitive, and we treat it that way. We use it solely to assess and communicate competition eligibility and clearance. We never use health data for advertising, and we never sell it. We share your verification status — not your underlying medical documents — with the commissions and promotions you choose to work with.
We do not sell your personal information and do not share it with advertisers or data brokers. We share information only:
Referral program. If you open an ArmourID referral link, or enter a referral code on one of our sign-up or profile set-up pages, we save the code in your browser. We save the time with it, and whether it came from a link or was typed. Only the latest code is saved. We use it for up to 30 days. After that we ignore it, and it is removed the next time one of our sign-up pages or the fighter portal reads it.
When the code is sent to us. The invitation page checks the code in the link with us, without an account, to show who invited you. Your browser sends the saved code with your account when you finish signing up on our website (not for gym accounts). It also sends it whenever a fighter opens the fighter portal in that browser, for whichever fighter is signed in, even if that account is not new. Once we record or refuse the code, it is removed from the browser. If you enter a code in a referral code box after your account exists, it is sent when you press Add code and is not saved in the browser. If the mobile app asks for a referral code at profile setup, the code you enter, or the code in a link you paste, is sent once, when you finish that step. The app does not store it on your device.
What we record. We record a referral only if the code reaches us within 72 hours of you creating your own account, or of you claiming a profile that someone else added for you. A claim counts whether you used the one-time claim code or signed in for the first time with the email the organization entered. The record holds your referrer and their code, your account and its type (for example, fighter or manager), whether the code came from a link or was typed, and the dates. For a claimed profile, we also note when and how you claimed it and who sent its claim invite. An account can have only one referrer, and it cannot be changed. We can later mark a referral as not counting.
What we check. To prevent self-referrals and duplicate accounts, we compare your email, phone numbers, name and date of birth with your referrer's and with other accounts and profiles. For a claimed profile, we also compare the phone number and email the profile held before your claim. If you claimed it with a one-time code, we keep those two details on your claim record, which is visible to you and to ArmourID administrators.
What we do not record. We record no referral when those checks match you to your referrer or to another person. We record none for an account you created more than 72 hours ago, or one that already has a referrer or already started a paid plan. We record none for your own code, a code that is no longer active, or a gym, demo or test account. We record none for a fighter whose profile, at that time, is flagged as under 18 or shows a date of birth under 18. For a claimed profile, we record none if your referrer sent its claim invite, or runs or works for an organization linked to that profile. When we refuse a code, we keep a note of the account, the code, the referrer and the reason. If a referral stops you connecting a profile that someone else added for you, we keep a note of that as well, with the reason.
Who can see it. If one of our website pages tells you that a code you entered was not recorded, it gives the reason only in four cases: we could not find the code, the code is no longer active, your 72 hours have passed, or your account already has a referrer. The mobile app does not show a result. Your referrer can see that an account was recorded to them, its type, the first letter of your first name, the date and whether it still counts. Your referrer cannot see refused attempts. ArmourID administrators can see referral records and refusal notes. We do not show them to commissions, promotions, gyms or managers.
How long we keep it. Referral records, refusal notes and claim records have no set deletion date. We keep them if an account is deleted.
If you refer others. Only fighters aged 18 or over with a confirmed date of birth can get a referral link. Getting a link creates your code and a record that you take part. Your code begins with your first name and cannot be changed, and anyone with your link or code can see your first name, including on your invitation page. Deleting your account switches your link and code off.
ArmourID uses artificial intelligence to power two features: the in-app AI Assistant, and document analysis of the identity and medical documents you upload. To provide these features, we share the relevant data with third-party AI services that process it on our behalf.
In both the mobile app and on the web, we disclose this processing and ask for your explicit consent before any message or document is sent to these AI services. AI data sharing is optional: you can decline — the AI feature will not send your data if you do — and you can withdraw a consent you previously gave at any time, which stops further AI processing. Your consent decision is recorded to your account, so it applies across the devices you sign in on.
We protect your information with encryption in transit (TLS) and at rest (AES-256), time-limited signed URLs for document access, and role-based access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.
We retain your information for as long as your account is active or as needed to provide the service and meet legal and regulatory obligations. You can permanently delete your account at any time from the mobile app under Settings → Danger Zone → Delete Account, or by emailing us. Deleting your account anonymizes your fighter profile; historical bouts and contracts remain on record but reference an anonymous fighter.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing (including rights under the GDPR and CCPA/CPRA). To exercise these rights, contact us at the address below. You can also manage notification preferences in the app.
ArmourID is not directed to children under 13, and we do not knowingly collect personal information from them. Where a participating athlete is a minor, the relevant account and consent requirements are handled through the athlete's parent or guardian and the governing commission.
We operate in the United States and may process and store information there. Where required, we provide appropriate safeguards for cross-border transfers.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app.
Questions or requests? Email support@armour-id.com.