Introduction
MatchRox is built on one principle: the best doubles partnerships start with trust. That same trust applies to how we handle your data.
This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have. If you have questions, email us at privacy@matchrox.com.
Who We Are
MatchRox ("we," "us," or "our") is a platform that helps HYROX athletes find, evaluate, and connect with doubles race partners. If you are located in the European Union or United Kingdom, we act as the data controller of your personal information.
Information We Collect
What You Provide Directly
When you create an account and use MatchRox, you provide us with:
Account information — name, email address, and profile photo
Athlete profile — your HYROX division, age group, race goals, and self-described strengths by station (e.g., sled push, burpee broad jump, wall balls)
Race history — past events, finish times, divisions, and results
Injury and health disclosures — if you choose to share, the type, severity, and timing of any current injuries or physical conditions (sharing is always voluntary and under your control)
Partner history — records of past HYROX doubles partnerships, including shared race results
Race registration — ticket or registration confirmation for upcoming events, which we use to verify your availability
Preferences — travel radius, time preferences, notification settings, and contact preferences
Subscription and billing information — processed securely through our payment provider; we do not store raw card data
Information from Connected Third-Party Services
With your explicit permission, we connect to the following platforms to import your training and workout data:
Garmin Connect — activity data including runs, workouts, heart rate, pace splits, distance, and performance metrics from Garmin devices
Apple HealthKit — workout summaries and health metrics stored on your Apple device
You authorize each of these connections separately. You can revoke access at any time from Settings.
We only request the specific data types necessary to power MatchRox features. Garmin data, for example, is used to calculate projected run splits, station performance estimates, and partner compatibility — not for advertising or resale.
Information We Collect Automatically
When you use the app, we collect:
Device information — device type, operating system, and app version
Usage data — features used, screens viewed, and time spent (to improve the product)
Crash and error reports — to identify and fix bugs
Approximate location — to surface athletes and races near you, based on your travel radius preference
How We Use Your Information
Match you with compatible doubles partners — our core feature, using run pace, station strengths, race goals, injury status, and compatibility preferences
Generate projected finish times — estimated based on your actual training data and race history
Power the doubles lifecycle — Discover → Invite → Align → Prepare — including invitation management, race strategy tools, and partner communication
Show your public profile — only the information you choose to make visible is shown to other athletes
Operate subscriptions and add-ons — Race Strategy Packs and Performance Analytics features
Improve the product — aggregate, anonymized usage data helps us understand what's working
Send you relevant notifications — new invitations, partner responses, upcoming races (you control notification preferences)
Comply with legal obligations — where required by applicable law
We do not use your health or fitness data for advertising. We do not sell your data to third parties.
How We Share Your Information
With Other Athletes (Your Public Profile)
Some of your information is visible to other MatchRox athletes who are searching for partners:
Name, profile photo, location (city/region), division, age group, race goal
Best finish times, projected times, and station affinities
Past race history and partner count (if you enable this)
Injury and health information is never shown publicly without your explicit consent. You control whether to share injury severity, and at what level of detail.
With Service Providers
We work with trusted vendors to operate MatchRox:
Cloud infrastructure — to host and store your data securely
Payment processors — to handle subscriptions and transactions
Analytics tools — to understand aggregate usage patterns (no personal data sold)
Push notification services — to deliver alerts you have opted into
All vendors are required to handle your data only as directed by us and in accordance with applicable privacy law.
With Third-Party Integrations (at Your Direction)
When you connect Garmin, Apple HealthKit, or Strava, data flows from those platforms to MatchRox under the terms of your authorization. We do not send your MatchRox data back to those platforms.
Legal Requirements
We may disclose your information if required by law, court order, or regulatory authority, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of MatchRox, our users, or the public.
Health and Injury Data
Injury disclosures are among the most sensitive data in MatchRox. Our product philosophy is that honest self-representation leads to better partnerships and better races — but we never force disclosure.
You decide what to share. You can disclose injury severity only (e.g., "mild"), a body area (e.g., "left calf"), or full details.
You choose who sees it. Injury information is never shared with other athletes until you explicitly choose to share it with a specific partner invitation.
You can update or delete it anytime. Edit or remove any injury entry from your profile at any time.
We treat injury data with the same security standards as all sensitive personal data.
Data Retention
We retain your data for as long as your account is active or as needed to provide services.
If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records for billing).
Aggregated, anonymized performance data (e.g., average pace benchmarks by division) may be retained indefinitely to improve matching algorithms.
Your Rights
Depending on your location, you may have the following rights:
Access — request a copy of the personal data we hold about you
Correction — request that inaccurate or incomplete data be corrected
Deletion — request that we delete your personal data (subject to legal obligations)
Portability — request your data in a machine-readable format
Withdrawal of consent — revoke consent for data uses based on consent (e.g., third-party integrations)
Objection — object to certain data processing activities
To exercise any right, email privacy@matchrox.com. We will respond within 30 days.
If you are in the European Union or UK, you also have the right to lodge a complaint with your local data protection authority.
Data Security
We use industry-standard security measures to protect your data, including:
Encryption in transit (TLS) and at rest
Access controls limiting which team members can view personal data
Regular security reviews
No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@matchrox.com.
Children's Privacy
MatchRox is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such data, we will delete it promptly. If you believe a child has provided us with personal information, contact us at privacy@matchrox.com.
International Data Transfers
MatchRox operates primarily in the United States. If you are located outside the US, your data may be transferred to and processed in the US. Where required by law, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses for EU/UK users).
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app notification at least 14 days before the change takes effect. The "Last Updated" date at the top of this page will always reflect the current version.
Continued use of MatchRox after a policy update constitutes acceptance of the revised terms.
Contact Us
For privacy-related questions, data requests, or to exercise your rights contact privacy@matchrox.com