Privacy Policy

What changed on September 18, 2026: this policy now describes the check the App makes with RevenueCat, our purchase provider, each time it starts, and the second place you can turn analytics on (after a completed session). The App also no longer starts its analytics software at all until you opt in.

This Privacy Policy explains how the Lower Beast Side Trainer app (“the App”, “LBS”, “we”, “us”, or “our”) handles information. The App is published by D2X Enterprises LLC (“D2X”), the data controller. We have tried to write this in plain language.

In short: the App has no account and no sign-in. It does not know who you are. Everything it remembers — your round settings, your preferences, your session and round counts — is stored only on your device, and we never receive it. The App is built to run offline. The only ways anything about you can leave your device are: (1) optional, anonymous usage analytics, which are OFF unless you turn them on, (2) a check with RevenueCat, our purchase provider, each time the App starts, to see whether this device owns Pro — it sends a random app-generated identifier, never your name or your settings; and (3) buying or restoring the optional one-time Pro upgrade, which is processed by the app store and verified through RevenueCat. That is the whole list.

1. Information We Do and Do Not Collect

What stays on your device. Your round configuration (number of rounds, round length, rest length, countdown length), your preferences (audio cues, music ducking, keep-screen-on, strike names in round, boxing mode, first-round Jab-Cross, language), your usage-analytics choice, the record that you accepted these terms and when, your completed-session count, your lifetime completed-round count, and a cached copy of whether you own Pro. All of this is written to your device’s local app storage. We do not receive, see, or store any of it.

We do not collect your name, email address, phone number, precise or approximate location, advertising identifier, contacts, photos, health or fitness records, or biometric data. The App has no microphone, camera, location, motion-sensor, or health-data access, and requests no such permission.

The only data we may collect is optional, anonymous product-usage analytics, and only if you opt in (Section 3).

2. Network Use (Offline by Default)

The App is designed to run entirely on your device. Its timer, its strike library, its combination generator, its audio cues, its fonts, and its translations are all built into the App and require no network connection.

Apart from the cases below, the App makes no network requests:

• Optional analytics (Section 3) — off unless you turn them on.
• Purchase check (Section 5) — each time the App starts, and when you buy or restore Pro.
• A link you tap yourself. The About screen shows our company website and support page, and the legal screens offer to open the current version of these documents online. If you tap one of these, your device opens that address in your browser, which — like visiting any website — reveals your device’s IP address to that site. Nothing about your training or your settings is attached, and no request is made unless you tap.

3. Optional Usage Analytics (Off by Default)

To understand how the App is used and improve it, the App can send anonymous product-analytics events using PostHog, a third-party analytics provider acting as our processor.

• Opt-in and revocable. Analytics are disabled by default. The App ships with your analytics choice recorded as “not yet asked”, and nothing is sent in that state or if you decline. Nothing is sent, and the analytics software is not started at all, unless you explicitly turn analytics on — using the Share usage data switch on the About screen, or by tapping Allow when the App asks after you finish a session. You can turn it off again at any time in the same place; turning it off stops all further collection.

• What is collected. Only a small, fixed set of anonymous interaction events, each carrying only numbers and fixed labels:

  • that a session was started, with the number of rounds, the round length in seconds, the rest length in seconds, whether boxing mode was on, and whether you are on the free or Pro tier;
  • that a session was completed, with the number of rounds configured and completed, and your tier;
  • that a session was abandoned, with the number of rounds configured, the round number it ended on, and your tier;
  • that the upgrade screen was viewed, and which part of the App it was opened from;
  • that a purchase completed;
  • that the combination generator failed to produce a combination for a round, with the round number and the size of the strike pool.

  Events also carry a fixed label identifying which of our apps sent them, plus the basic technical context the analytics SDK attaches (such as app version, device type, and operating-system version), and a random, app-generated identifier that is not linked to your name or identity.

• What is NOT collected. There is no free-text field anywhere in these events. We do not send your name, email, contacts, location, or any text you could type — the App has no field to type into. We instruct PostHog not to derive your location from your IP address (IP-based geolocation is disabled), and we do not enable session replay or screen recording; no image or recording of your screen is ever captured.

• Where it is processed. Analytics data is processed by PostHog in the United States. For users in the EEA, the UK, or other regions, this is an international transfer carried out under appropriate safeguards — see Section 8.

• Legal basis. Where the GDPR, UK GDPR, or similar laws apply, our legal basis for analytics is your consent, which you give by turning the switch on and may withdraw at any time.

• No advertising or sale. Analytics are used only to improve the App. We do not sell or share this data, and it is not used for advertising or cross-context behavioral tracking.

4. No Advertising

The App contains no advertisements and no advertising SDK. We do not collect an advertising identifier and do not use ad-based tracking. No advertising or attribution network receives anything from the App.

5. Purchases

The App offers an optional one-time “Pro” purchase (a non-consumable unlock, not a subscription). Payment is processed by the applicable app store — Google Play or the Apple App Store — as merchant of record under their own terms; we never receive or store your payment-card details.

To deliver, verify, and restore the purchase and to unlock Pro on your device, we use RevenueCat, Inc., a US purchase-management provider acting as our processor. RevenueCat receives the purchase and receipt data from the store and a randomly generated app-user identifier that lets the App recognize and restore your Pro entitlement. That identifier is not your name, email, or advertising ID, and it is not linked to your settings, your training history, or the analytics identifier in Section 3. The App can display this identifier to you on the Settings screen, behind a deliberate gesture, so that you can quote it to us for support; we do not otherwise publish or share it.

If you never buy or restore Pro, the App still initializes the purchase SDK and asks RevenueCat, once per launch, whether this device already owns Pro. That request carries the random app-user identifier and, like any network request, your device’s IP address — nothing else about you.

Google, Apple, and RevenueCat process this data in the United States (see Section 8). We use it only to provide, verify, restore, and support your purchase — never for advertising — and we do not sell or share it.

6. Age Requirement and Children’s Privacy

The App is for adults aged 18 or over. It is a combat-sports training tool that directs you to throw punches, kicks, knees, and elbows at speed. It is not directed to children, we do not knowingly collect personal information from anyone under 18, and we do not offer a parental- or guardian-consent path. If you believe a person under 18 has used the App and provided information to us, contact us at the address in Section 11 and we will delete anything we hold.

7. Your Rights and Choices

Because the App holds no account and your data lives only on your device:

• You can see and change every stored setting directly in the App at any time.
• Settings › Reset lifetime rounds clears your stored lifetime round count on your device.
• Deleting the App removes all of its on-device data, including your settings, your counts, and your analytics choice.
• You can enable or disable analytics at any time using the Share usage data switch on the About screen (you can also enable them by tapping Allow when the App asks after a completed session).

Depending on where you live, you may have rights under laws such as the LGPD (Brazil), the GDPR (EEA/UK), CCPA/CPRA (California), and Middle-East data-protection laws (for example Saudi Arabia’s PDPL and the UAE PDPL), including the rights to access, correct, delete, or object to processing of your personal data, to withdraw consent, and not to be discriminated against for exercising these rights. Because we hold no account and the analytics we process are anonymous and carry no identifying field, we generally cannot locate a specific individual within that data. You can still exercise the practical equivalents above, and you may contact us with any request (see Section 11). We do not sell or share your personal information for cross-context behavioral advertising or otherwise.

8. International Data Transfers

If you never enable analytics and never buy Pro, the only data that leaves your device is the purchase check described in Section 5: a random app-user identifier sent to RevenueCat in the United States.

If you do enable analytics, the anonymous analytics data is processed by PostHog in the United States. If you buy or restore Pro, the related purchase data is processed by Google or Apple and by RevenueCat in the United States. Where required (for example for users in the EEA or the UK), these transfers are carried out under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and/or the EU-US Data Privacy Framework, together with each provider’s data-processing commitments.

9. Security and Retention

Your on-device information is protected primarily by the fact that it never leaves your device, and by the operating system’s own app-sandbox protections. Any anonymous analytics you choose to enable are transmitted securely (encrypted in transit) to PostHog and retained only as long as needed for product analysis. Purchase records are retained by the app store and by RevenueCat for as long as needed to support and restore your entitlement. No method of storage or transmission is completely secure, but because we hold no account and the analytics carry no identifying field, the risk surface on our side is minimal.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice in the App. Your continued use of the App after an update means you accept the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact us through our support page at https://d2xenterprises.com/support/, or by email at support@d2xenterprises.com:

D2X Enterprises LLC 30 S 15th St Ste 1550 PMB 852931 Philadelphia, Pennsylvania 19102-4806 US

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, USA, without regard to its conflict-of-laws rules.

---