ArmourID

Privacy Policy

Last updated: July 1, 2026

ArmourID ("ArmourID," "we," "us") provides a digital identity and compliance platform for combat sports — connecting athletes, athletic commissions, promotions, gyms, and managers. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the ArmourID mobile app and website.

1. Information we collect

  • Account information — name, email address, phone number, and the role you hold (e.g. fighter, official).
  • Identity documents — government-issued identification you upload for verification.
  • Medical and health information — medical clearances, blood-panel and test results, and related documents required to determine competition eligibility.
  • Profile and competition data — fighter profile, disciplines, bout and licensing history, and any highlights you upload.
  • Communications and content — messages you send to other users and content you submit through the service.
  • AI Assistant messages — the questions and messages you type to the in-app AI Assistant.
  • Technical data — device push-notification token, app and access logs, and basic diagnostics used to operate and secure the service.

2. How we use your information

  • Verify your identity and build your ArmourID profile.
  • Determine and communicate eligibility and clearance status to the commissions and promotions you choose to work with.
  • Analyze the identity and medical documents you upload — using AI — to classify, extract, and validate their contents for eligibility review.
  • Power the in-app AI Assistant so it can answer your questions about your fighter status, documents, and events.
  • Enable messaging, notifications, and the features you use.
  • Maintain security, prevent fraud and abuse, and keep audit records.
  • Provide support and comply with legal obligations.

3. Health and medical data

Medical and health information is sensitive, and we treat it that way. We use it solely to assess and communicate competition eligibility and clearance. We never use health data for advertising, and we never sell it. We share your verification status — not your underlying medical documents — with the commissions and promotions you choose to work with.

4. How we share information

We do not sell your personal information and do not share it with advertisers or data brokers. We share information only:

  • with the commissions and promotions you choose to work with — limited to verification status, not raw medical documents;
  • with service providers who operate the platform under contract — secure file storage (AWS), authentication (Auth0), hosting (Railway), email (SendGrid), and SMS (AWS End User Messaging);
  • with the third-party AI providers described in Section 5, who process your AI Assistant messages and uploaded documents on our behalf as data processors;
  • when required by law, or to protect the rights, safety, and security of our users and the public.

5. AI features and third-party AI processing

ArmourID uses artificial intelligence to power two features: the in-app AI Assistant, and document analysis of the identity and medical documents you upload. To provide these features, we share the relevant data with third-party AI services that process it on our behalf.

  • What we send — AI Assistant — the messages and questions you type, together with the profile context needed to answer them about you: your name and nickname, gym, weight class and disciplines, your fight record and bout history, your document and medical-compliance status (document types, statuses, and expiry dates — not the file contents), your license numbers and their status, and any active suspension status.
  • What we send — document analysis — the full contents of the identity or medical document (or image) you upload.
  • Who receives it — AI models operated by Anthropic, served through Amazon Web Services (AWS Bedrock), with OpenRouter as a fallback provider. Document text recognition also uses Amazon Textract.
  • Why — solely to generate Assistant responses and to classify, extract, and validate document information for eligibility review.
  • How it is protected — these providers act only as data processors under contract. They offer equivalent data protection, encrypt data in transit, and do not use your data to train their own models, sell it, or use it for advertising.

In both the mobile app and on the web, we disclose this processing and ask for your explicit consent before any message or document is sent to these AI services. AI data sharing is optional: you can decline — the AI feature will not send your data if you do — and you can withdraw a consent you previously gave at any time, which stops further AI processing. Your consent decision is recorded to your account, so it applies across the devices you sign in on.

6. Data security

We protect your information with encryption in transit (TLS) and at rest (AES-256), time-limited signed URLs for document access, and role-based access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.

7. Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the service and meet legal and regulatory obligations. You can permanently delete your account at any time from the mobile app under Settings → Danger Zone → Delete Account, or by emailing us. Deleting your account anonymizes your fighter profile; historical bouts and contracts remain on record but reference an anonymous fighter.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing (including rights under the GDPR and CCPA/CPRA). To exercise these rights, contact us at the address below. You can also manage notification preferences in the app.

9. Children's privacy

ArmourID is not directed to children under 13, and we do not knowingly collect personal information from them. Where a participating athlete is a minor, the relevant account and consent requirements are handled through the athlete's parent or guardian and the governing commission.

10. International users

We operate in the United States and may process and store information there. Where required, we provide appropriate safeguards for cross-border transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app.

12. Contact us

Questions or requests? Email support@armour-id.com.