Privacy Policy — The Matrix Jiujitsu

1. Who We Are

The Matrix Jiujitsu (“we”, “our”) operates the mobile application and related services for BJJ technique and training. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

We collect information necessary to provide and improve the Service:

Account data: email address, password (stored in hashed form), and optional profile information such as display name, belt, age division, club, preferred language, and avatar.
Usage and content: techniques you view or favorite, gameplans, training sessions (date, duration, techniques, notes), competitions, weight records, and referral or influencer code usage where applicable.
Subscription and purchase data: we use RevenueCat to manage subscriptions. RevenueCat and the app stores (Apple, Google) process purchase and subscription status; we receive subscription state (e.g. active, expiry) to grant access to premium features.
Technical data: we may collect device type, platform (iOS/Android/web), and app version to support and improve the Service.

3. How We Use Information

We use the information we collect to:

Provide, maintain, and improve the Service (e.g. sync your data across devices, enforce premium limits, personalize language and profile).
Process referral and influencer rewards (e.g. grant free premium time, track commissions for eligible influencers).
Communicate with you (e.g. account and security-related emails, password reset).
Protect the Service and our users (e.g. authentication, fraud prevention, enforcing our Terms).

4. Third-Party Services

We use the following third-party services to operate the Service:

Supabase: authentication, database, and serverless functions. Your account and app data (profile, gameplans, sessions, etc.) are stored and processed by Supabase in accordance with their privacy and data processing terms.
RevenueCat: subscription management and analytics. Purchase and subscription events are shared with RevenueCat so we can provide and restore premium access. See RevenueCat’s privacy policy for how they handle data.
Apple and Google: in-app purchases and subscriptions are processed by the respective store. We do not receive your payment card details; the stores provide us with subscription status via RevenueCat.

We do not sell your personal information to third parties.

5. Data Retention and Your Rights

We retain your data for as long as your account is active or as needed to provide the Service and comply with legal obligations. If you delete your account, we will delete or anonymize your personal data in line with our retention policy and applicable law.

Depending on your location, you may have the right to access, correct, delete, or port your data, or to object to or restrict certain processing. You can request full account and data deletion at any time from within the app: open your Profile and use “Delete my account” (your data will be permanently removed). You may also contact us at the email below. You may have the right to lodge a complaint with a supervisory authority.

6. Data Storage and Security

We implement appropriate technical and organizational measures (including encryption in transit and at rest, secure authentication, and access controls) to protect your data against unauthorized access, alteration, disclosure, or destruction. Data is stored on infrastructure operated by our providers (e.g. Supabase) in regions they specify; we rely on their compliance with applicable data protection and security standards.

7. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@thematrix-jiujitsu.com.