Last updated: July 3, 2026
This Privacy Policy explains how Andralynx ("Andralynx", "we", "us", or "our") collects, uses, shares, and protects personal information when you use the Andralynx platform, including the MTAAC websites and operator tools (together, the "Services").
Andralynx provides software that event organizers use to run amateur combat-sports events: registration, matchmaking, document collection, scoring, and results. Organizations that run events on the platform (for example, the chapter or promoter hosting an event you register for) decide which events to run and who their participants are. Andralynx operates the underlying platform and is responsible for this policy. Where an event organizer and Andralynx each make their own decisions about your data, each is responsible for its own use of it.
1. Information we collect
Information you provide to us
- Account information: name, email address, password (stored only as a secure hash), and, for operators and staff, job title and organization.
- Athlete and registration information: fighter name, date of birth, gender, weight and weight class, gym or club, coach, contact details, experience level, and fight record submitted when you register for, or are entered into, an event.
- Documents you upload: waivers, medical clearances, identification, and similar files required to compete. These can include health-related information.
- Communications: messages, support requests, and email you exchange with us or with an event organizer through the Services.
Coaches, gyms, parents, and guardians may submit information about athletes they are responsible for. If you submit another person's information, you confirm you are authorized to do so and to agree to this policy on their behalf.
Information collected automatically
- Device and log data: IP address, browser type, pages viewed, and timestamps, collected to operate and secure the Services.
- Local storage: we store sign-in tokens and basic preferences (such as your chosen theme) in your browser so you stay signed in and the site works. We do not use third-party advertising trackers.
2. How we use information
- To create and manage accounts and authenticate you.
- To process event registrations, build matchups, and record weigh-ins, scores, and results.
- To collect and track the documents required for an athlete to compete.
- To send service messages: confirmations, bout proposals, document reminders, and account notices.
- To provide support, maintain security, prevent fraud and abuse, and debug problems.
- To comply with legal obligations and enforce our terms.
We do not sell your personal information, and we do not use it for third-party advertising.
3. How we share information
- With event organizers: when you register for or are entered into an event, the organizer running that event can see the registration and documents needed to run it. For medical documents specifically (pre-fight physicals and Combatives Trio bloodwork), access is limited to event officials, sanctioning body medical staff, and the ringside physician — the roles that need the clearance to run the bout safely.
- With service providers (subprocessors): companies that host and operate the platform on our behalf, under contract, including:
- Cloud hosting for our application and database.
- Cloudflare R2 for secure storage of uploaded documents.
- Resend for sending transactional email.
- A payment processor (Stripe) where paid registration or billing is enabled.
- For legal reasons: when required by law, to respond to lawful requests, or to protect the rights, safety, and property of users, the public, or Andralynx.
- In a business transfer: if Andralynx is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.
4. Document storage and security
Uploaded documents are stored in a private cloud bucket (Cloudflare R2), encrypted at rest, and served only through authenticated, short-lived download links (typically valid for two minutes). Access to medical and bloodwork documents is limited to the roles that need it and is logged: every time one of those documents is opened, we record who opened it, when, and from where. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to limit who can reach it.
Before you (or an event organizer on your behalf) can upload a pre-fight physical or bloodwork result, we ask for a specific acknowledgment authorizing this storage and the limited sharing described in Section 3. That acknowledgment is recorded with a timestamp.
5. Data retention
We keep personal information for as long as needed to provide the Services, maintain athlete and event records (including historical fight results, which are intended to persist as part of the competitive record), comply with legal obligations, resolve disputes, and enforce our agreements.
Health-related documents have specific retention windows tied to their medical usefulness:
- Pre-fight physicals are typically valid for 12 months from the exam date.
- Combatives Trio bloodwork (HIV, Hepatitis B, Hepatitis C) is typically valid for 6 months from the draw date.
- After a physical or bloodwork document reaches its expiration date, we keep it for a short grace period (currently 30 days) to cover replacements and record disputes, then automatically and permanently delete the file from storage. The access log entries for that document are retained separately so we can still answer "who saw this?" if asked.
Other documents (photo ID, waivers, headshots) are kept for as long as needed to operate the Services and comply with legal record-keeping requirements.
6. Minors
Amateur events can include athletes under 18. Andralynx does not knowingly collect information directly from a child without involvement of a parent, guardian, coach, or gym. Where a minor competes, their information is submitted and managed by a responsible adult (a parent, guardian, coach, or event organizer), who is responsible for providing any required consent. If you believe a minor's information has been provided without proper authorization, contact us and we will review and, where appropriate, remove it.
7. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, contact us at the address below. Because event organizers also hold registration data for their own events, some requests may need to be directed to, or coordinated with, the organizer of the event you took part in. We will respond consistent with applicable law.
You can update most account details from within the Services, and you can opt out of non-essential email by following the instructions in those messages. Note that we still need to send essential service messages (for example, document or bout confirmations) while your account is active.
8. International users
Andralynx operates in the United States, and the Services are hosted in the United States. If you access the Services from outside the United States, you understand your information will be processed in the United States, where data protection laws may differ from those in your country.
9. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.
10. Contact us
Questions about this policy or your information? Contact us at privacy@andralynx.com.