Privacy Policy

1. Information We Collect

We collect the following information when you use BJJ App:

• Account information — email address and display name provided by your OAuth provider (Google / GitHub) or directly by you
• Training data — session logs, technique records, streak data, goals, and notes you enter in the app
• Profile data — belt rank, gym name, BJJ start date, and any other profile fields you choose to fill in
• Usage data — basic analytics via Google Analytics 4 (anonymized, no personally identifiable information)

2. How We Use Your Information

• To provide and improve the Service
• To display your training data back to you in the dashboard
• To process subscription payments (via Stripe)
• To send product updates if you opt in to our newsletter (via Beehiiv)
• To analyze aggregate usage patterns and improve features

3. Data Storage

Your data is stored in Supabase (PostgreSQL), hosted on AWS. Data is encrypted at rest and in transit. Row-Level Security (RLS) ensures that each user can only access their own data.

4. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication
• Vercel — hosting and deployment
• Stripe — payment processing (Pro subscriptions)
• Google Analytics 4 — anonymized usage analytics
• Beehiiv — email newsletter (opt-in only)

Each of these services has its own privacy policy. We only share the minimum data necessary with each provider.

5. Cookies

We use only essential cookies required for authentication (Supabase session cookies). We do not use advertising cookies or tracking pixels beyond Google Analytics, which is configured in anonymized mode.

6. Data Sharing

We do not sell your personal data. We do not share your individual training data with third parties, except as required by law or to provide the Service through the processors listed above.

7. Your Rights

You have the right to:

• Access all data we hold about you (available via the dashboard export feature)
• Correct inaccurate data (editable in your profile)
• Delete your account and all associated data (Profile → Settings → Delete Account)
• Withdraw newsletter consent at any time via the unsubscribe link in any email

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is permanently removed from our primary database within 30 days. Backups may retain data for an additional 30 days before being purged.

9. Children's Privacy

BJJ App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via an in-app notice. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries or data deletion requests, please contact us at 307239t777@gmail.com.