King of the Mat

♛Privacy Policy

Last updated: [EFFECTIVE DATE]

Operated by [LEGAL ENTITY NAME] ("we", "us", "our").

1.Who we are & scope

King of the Mat is operated by [LEGAL ENTITY NAME]. For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controller of the personal data described in this policy, except where we act as a processor on behalf of an academy (see below).

This policy applies to the web app, the iOS app, and any related pages we operate under kingofthemat.app. It does not apply to your physical gym, your instructors, or any third-party website or service that we link to but do not control.

Academies. When a gym uses King of the Mat to run rankings for its members, that academy's administrators can see and manage member activity within their academy (for example, roster membership, logged matches, and moderation of posts and chat). In that context the academy operates its own community, and its own conduct and privacy practices are its responsibility. We provide the tools; academies are responsible for how they use them.

2.Data we collect

We collect only what we need to run the Service. Here is the complete picture.

What we do not collect. We do not run advertising networks, we do not build advertising profiles, and we do not use third-party ad trackers. We do not collect precise GPS location. We do not store your payment card numbers (see §5 for how payments are handled). We do not sell your personal data.

Sensitive data. Some of the profile fields above — for example, gender, and information that can indicate physical characteristics such as weight class — may be considered sensitive in some jurisdictions. We collect these only to power fair matchmaking and ranking (the whole point of the Service is a rating that is fair across belt, weight, and gender) and for no other purpose.

3.How we use your data

We use your data to:

• Create and secure your account and let you sign in.
• Let you join an academy with an invite code and appear on its roster.
• Record your matches and challenges, calculate your Glicko-2-based rating, and place you on live rankings, leaderboards, crowns, badges, streaks, and seasons.
• Power the social features — the feed, reactions, comments, academy chat, and check-ins.
• Send you push notifications you have enabled (for example, a new challenge or a rank change) — see §12.
• Detect, investigate, and fix errors, crashes, abuse, and security issues.
• Provide customer support when you contact us.
• Comply with our legal obligations and enforce our Terms of Service.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you. Your rating is calculated automatically, but it is a game and community statistic — it does not determine anything of legal significance.

4.Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the Service you signed up for (accounts, memberships, matches, ranking, feed, and chat).
• Legitimate interests — to keep the Service secure, prevent abuse and cheating, fix bugs using diagnostic data, and understand aggregate usage. We balance these interests against your rights.
• Consent — for push notifications, and for any optional feature that asks for it. You can withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law.

5.Who we share data with (subprocessors)

We do not sell your data and we do not share it for advertising. We do rely on a small set of trusted service providers ("subprocessors") to operate the Service. Each processes data only on our instructions and only as needed for its function.

Each provider has its own privacy policy governing how it handles data. We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and property of our users, the public, or us. If we are ever involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, and we will notify you of any change in control or use of your personal data.

6.What other members can see

King of the Mat is a community product, so some information is visible to others by design:

• Within an academy you have joined, other members and academy admins can see your display name, avatar, belt, and ranking-related information (your rating, rank, crowns, badges, and streaks), your logged matches and challenges involving them, and anything you post in the feed or academy chat.
• Academy administrators can moderate posts and chat and manage the roster.
• Content you post to the feed or chat is shared with the members who can see that academy. Please do not post anything you would not want other members to see.

Your email address and password are never shown to other members.

7.International data transfers

Our primary backend (Supabase) is hosted in the United States, and some of our other providers are also based in the United States. If you access the Service from outside the United States, your personal data will be transferred to and processed in the United States and other countries whose data-protection laws may differ from those in your country.

Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses, together with any additional measures needed to protect the data.

↑ Back to top

8.How long we keep data

We keep your personal data for as long as your account is active and for as long as we need it for the purposes described in this policy. In particular:

• Account and profile — kept while your account exists.
• Activity (matches, challenges, ratings, posts, comments, chat, check-ins) — kept while your account exists so rankings and history remain accurate. Note that matches and interactions also involve other members; content that references another member may remain visible to them as part of their own history even after edits.
• Diagnostic and error data — kept for a limited period sufficient to investigate and fix issues, then deleted or aggregated.

When you delete your account (§11), we delete or de-identify your personal data as described there, except where we must retain certain records to comply with the law, resolve disputes, or enforce our agreements.

9.How we protect your data

We take reasonable and appropriate technical and organizational measures to protect your data, including encryption of data in transit, access controls on our backend, and reliance on established infrastructure providers. Passwords are handled by our authentication provider and are not stored by us in plain text.

No method of transmission or storage is ever completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential. If we become aware of a data breach affecting your personal data, we will notify you and any regulators as required by applicable law.

10.Your rights & choices

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccurate or incomplete data. You can edit most of your profile (belt, stripes, weight class, gender, avatar, name) directly in the app.
• Deletion — delete your account and associated data (see §11).
• Portability — receive certain data in a portable format, where applicable.
• Objection & restriction — object to or restrict certain processing based on our legitimate interests.
• Withdraw consent — where we rely on consent (for example, push notifications), withdraw it at any time without affecting processing already carried out.

To exercise any of these rights, email privacy@kingofthemat.app. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. You will not be charged for exercising your rights in ordinary cases, and we will not discriminate against you for doing so.

If you are in the EEA or UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority — though we would appreciate the chance to address your concern first.

11.Deleting your account

You can delete your account at any time, directly in the app:

When you delete your account, we remove your account and the personal data associated with it. Please note:

• Because matches and social interactions involve other members, some content that references you may persist in another member's match history or in an academy's records where deleting it would affect the integrity of their history. Where we retain such content, we take reasonable steps to de-identify your personal information within it.
• We may retain a limited amount of data where we are legally required to, or where we need it to resolve disputes, prevent abuse, or enforce our Terms.
• Backups are cycled out on a rolling basis, so residual copies may persist for a short period before they are overwritten.

If you cannot access the in-app option for any reason, email privacy@kingofthemat.app and we will help.

12.Push notifications

With your permission, we send push notifications (for example, when you receive a challenge, when your rank changes, or when there is academy activity). To do this we store a device push-notification token and deliver messages through Expo.

You can turn push notifications off at any time in two places:

• Your device settings — disable notifications for King of the Mat in iOS Settings (or your browser's notification settings on the web).
• In-app notification settings — adjust which notifications you receive inside the app.

13.Children & minors

BJJ academies commonly include children and teenagers, so we want to be clear about age.

The Service is intended for users who are at least 13 years old (or the minimum age of digital consent in your country, if that is higher — for example, 16 in some parts of the EEA). The Service is not directed to children under 13, and we do not knowingly create accounts for or collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact privacy@kingofthemat.app and we will take steps to delete it.

Where a minor above that minimum age uses the Service, it must be with the knowledge and consent of, and under the supervision of, a parent or legal guardian and the minor's academy. Parents, guardians, and academies are responsible for supervising a minor's use of the Service, including what the minor posts and who they interact with.

14.U.S. state privacy rights

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, correct, delete, and obtain a copy of your personal information, and to be free from discrimination for exercising those rights. You can exercise these rights as described in §10 and §11.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We do not run advertising networks. Because we do not sell or share personal information for advertising, there is no "Do Not Sell or Share My Personal Information" action to take — but if you have questions, email privacy@kingofthemat.app.

15.Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

16.How to contact us

For any privacy question or to exercise your rights, contact:

• Privacy: privacy@kingofthemat.app (set up before launch)
• General support: support@kingofthemat.app (set up before launch)
• Operator: [LEGAL ENTITY NAME]