Knockout
Menu
Get Knockout

Legal

Privacy Policy

Last updated: July 27, 2026

Scope

This policy explains how Kopytchuk Inc. handles personal information on the Knockout marketing website, including the Android waitlist. The Knockout iPhone application has a separate application privacy policy.

Android waitlist

When you join the Android waitlist, we collect your email address so we can tell you when an Android beta or public release is available. We also store a finite submission source, website locale, consent version, and consent time. We do not use the waitlist to subscribe you to a general marketing newsletter.

We do not store your IP address, user agent, device fingerprint, analytics identifier, full referrer, or boxing and health information with your waitlist record. We create a SHA-256 hash of the normalized email address only to prevent duplicate records; the email remains in the protected record because it is needed to send the requested update.

Firebase App Check and reCAPTCHA Enterprise help protect the form from abuse. Google necessarily receives technical request and browser information to assess whether a request is legitimate. The assessment does not add you to the waitlist and the website does not use it for advertising.

Storage, providers, and international transfers

Google LLC provides Firebase Cloud Functions, Cloud Firestore, App Check, and reCAPTCHA Enterprise. Waitlist records are stored in the existing Firestore database in the United States multi-regionnam5. Authorized project administrators can access the records; website visitors cannot read or write them directly.

Processing may involve a transfer outside the European Economic Area. Review Firebase privacy and security information and the Google Cloud Data Processing Addendum for Google’s processing terms and transfer safeguards.

No email delivery provider is used for the first version. Before Knockout sends a beta or launch email, this policy will identify the provider and every email will include a secure unsubscribe link.

Retention and your choices

  • We delete an address when a valid deletion request is completed.
  • An unsubscribe request takes effect immediately.
  • Active addresses are deleted within 90 days after the final Android launch notification.
  • If Android has not launched within 24 months, we request renewed confirmation or delete the records.

You may ask to access or delete your waitlist information, or leave the waitlist before emails begin, by contactingsupport@knockoutboxing.app. We may need enough information to verify and complete the request.

Website analytics and cookies

The Android waitlist works when optional analytics are rejected. Email addresses and derived email identifiers are never sent to analytics. See the Cookie Policy for details about optional Amplitude and Vercel processing and how to withdraw analytics consent.

Children, security, and changes

The website does not knowingly use the waitlist to collect personal information from children. We use access controls, App Check, server-side validation, and data minimization to protect submissions, but no internet service can guarantee absolute security.

We may update this policy when the service or legal requirements change. The current date appears at the top of this page.

Contact

For privacy questions and requests, contact Kopytchuk Inc. atsupport@knockoutboxing.app.

Always active

Required for core website functionality, security, and remembering your cookie preference.

Helps us understand website usage, improve content, and measure visits to the Knockout App Store page.

Learn more about analytics
Providers
Amplitude for manual interaction events and consented session replays; and Vercel Web Analytics for automatic page views.
Data collected
Amplitude receives the page path without query values, locale, referring hostname, allowlisted campaign values, and finite interaction events. Replays may include snapshots and changes in the rendered page, clicks, pointer movement, scrolling, viewport changes, and navigation. Vercel may receive a timestamp, page URL and route, referrer, filtered query values, approximate location, browser, operating system, device type, and analytics script version.
Cookies and local storage
None for analytics. Amplitude identity and replay buffering are configured in memory only.
Browser identifier duration
Amplitude’s random in-memory identifier lasts until this page is closed or refreshed. Replay capture begins only after consent. Vercel derives a request hash and discards it within 24 hours.
Provider retention
Amplitude event data is configured for 12 months or less and replay data for 30 days. Vercel reporting is available for 1, 12, or 24 months depending on the plan, and Vercel may retain data longer to support plan upgrades.
Processing purpose
Measure website visits, content use, and qualified App Store traffic, and diagnose interaction friction so we can improve the website.
Data location and international transfers
Analytics is sent to Amplitude’s EU data centre in Frankfurt. Amplitude states that EU-region customer data remains in the European Union. Vercel primarily processes analytics in the United States and may process it in other locations through subprocessors under its data processing terms.
Privacy protections
Both providers remain blocked until consent, and we honor Do Not Track and Global Privacy Control. Amplitude uses no website user ID or advertising identifier, keeps its browser identity in memory, and masks form fields and text inputs in replay. Vercel Analytics is cookieless and discards its request-derived hash within 24 hours.
Read Amplitude’s privacy informationRead Amplitude’s data processing termsRead Vercel Analytics’ privacy informationRead Vercel’s data processing terms