1. Who this applies to,

This policy applies to coaches (“instructors”), students, parents or guardians, and anyone who creates an account or uses Dojo XP. If you are a parent or guardian, you may be asked to provide information for a minor; you represent that you have authority to do so where required by law.

​

2. Information we collect,

Account and profile: We collect information you provide when you sign up or update your profile, such as display name, role (coach, student, or parent), dojo join code, username and password (stored securely on your device for local accounts), legal name, address, date of birth, parent or guardian name and contact information when required for minors, profile photos you choose, and email or phone when you provide them.

 

Authentication: If you sign in with Apple, Google, Facebook, or email through our authentication provider (Supabase), we receive identifiers and, depending on the method, your name and email as permitted by that sign-in flow.

 

School and activity data: The Service stores martial arts school configuration you or your coach enter (e.g. belt programs, quests, attendance, XP, leaderboards, chat and community content, announcements, and vault or in-app items tied to your profile). Some of this may be stored on your device and may sync or be backed up according to your device settings.

 

Purchases: If you subscribe or buy in-app items through Apple’s App Store, Apple processes payment; we receive information needed to validate entitlements (for example, subscription status), not your full payment card details.

 

Technical data: We may collect device and app-related information typical for mobile apps, such as app version and diagnostic data, to operate and secure the Service. Our infrastructure providers may log technical metadata when you use network features.

​

3. How we use information,

We use the information above to provide, maintain, and improve the Service; authenticate you; display progress, quests, and school content; process subscriptions and permitted in-app purchases; communicate with you about the Service when appropriate; comply with law; and protect the security and integrity of the Service.

​

4. Local storage,

Much of your school data and progress may be stored locally on your device (for example using on-device storage). Data remains under your device’s security and backup settings. Uninstalling the app or clearing data may remove local information unless you have cloud backup or future sync features enabled.

​

5. Cloud services and third parties,

We use service providers to run parts of the Service. For example, Supabase may host authentication and related backend features; sign-in providers (Apple, Google, Meta) process OAuth according to their policies. These providers process data under their terms and as described in this policy. We do not sell your personal information for money.

​

6. Subscriptions and in-app purchases,

Paid features and future digital items (such as tokens) are offered through Apple In-App Purchase where required. Purchase history and entitlements are handled according to Apple’s rules and our Terms & Conditions. We do not use external payment links inside the app for digital content that must use Apple’s payment system.

​

7. Children and students,

The Service may be used by schools with minors. Where local law requires parental consent for collecting personal information from children, coaches and families are responsible for obtaining that consent. Parents may review or request deletion of certain child information as required by applicable law by contacting us through support.

​

8. Your choices and rights,

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You can update some profile fields in the app. To exercise other rights, contact us through app support. We may need to verify your request as permitted by law.

​

9. Security,

We use reasonable administrative, technical, and organizational measures appropriate to the Service. No method of transmission or storage is 100% secure; use a strong device passcode and keep login credentials private.

​

10. International users,

If you use the Service from outside the United States, your information may be processed in the United States or other countries where we or our providers operate, which may have different data protection laws than your country.

​

11. Retention,

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Local data on your device is retained until you remove it or uninstall the app, subject to device backups.

​

12. Changes to this Privacy Policy,

We may update this Privacy Policy from time to time. We will post the updated policy in the app and revise the “Last updated” date. Continued use after changes means you accept the updated policy, except where stricter consent is required by law.

​