Privacy Policy
Last updated: [date]
MatNotes is a tool that jiu-jitsu academies use to record techniques and help students review them. This policy explains what we collect, how we use it, and the rights you and your child have — including protections for children under 13 under the U.S. Children's Online Privacy Protection Act (COPPA).
Who we are
Operator: [Operator legal name], [postal address]. Contact for privacy questions and parental requests: [name/role], [email], [phone]. MatNotes is provided to your academy; your academy's coaches decide who joins and what is recorded.
Information we collect
From coaches and adult students
Name, email address (used only for a passwordless login link), belt and program, questions and journal entries they write, and the videos a coach uploads.
About a child under 13
- The child's name, belt, stripes, and program.
- Notes the coach writes about the child's training. These may include injury or behavioral detail, which we treat as sensitive.
- Only if a parent has consented to the child using the app: the questions they ask, their private journal, and which lessons they've reviewed. A child may appear in a technique video a coach records.
Automatically, we collect a login/session token and IP address to keep the person signed in and to secure the service. We do not use advertising or behavioral tracking, and we do not allow third-party advertising or analytics to collect information through MatNotes. We do not collect more than is reasonably necessary to use MatNotes.
How we use information
To let coaches record and organize techniques and track progress; to let students review lessons, ask questions, and keep a personal journal; and to let a parent view their own child's belt and progress notes. We do not use children's information for advertising, and we do not sell personal information.
Who can see it
Within a gym, coaches and members see content per their role; a parent sees only their own child's belt and progress notes. We use service providers to run MatNotes on our behalf, who may access information only to provide their service: Supabase (database, login, storage), Mux (video), Vercel (hosting), and [email provider] (login email). We do not otherwise disclose personal information to third parties.
Children under 13 — parents' rights
Before we collect personal information from or about a child under 13, we obtain verifiable parental consent (typically a form the parent signs, arranged through the academy). At any time you may reviewyour child's information, withdraw your consent and have us stop collecting or using it, and delete it — by contacting [name/role] at [email] / [phone]. We verify you are the parent or guardian before acting. We will not require a child to disclose more than is reasonably necessary to participate.
How long we keep it, and deletion
We keep a member's information only while they are part of the academy on MatNotes, plus a short backup window. When a member leaves or a parent requests deletion, we delete their personal information. We do not retain personal information indefinitely.
Security
We maintain a written information security program with safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest and role-based access controls enforced at the database layer. No system is perfectly secure, but we take reasonable steps to protect information and oversee our providers.
Contact
[Operator legal name], [postal address], [email], [phone].