What the member area collects, why it collects it, and how to get rid of it. No lawyer wrote this. It is written plainly because it is meant to be read.
The short version. Your training record is yours. It is not sold, not shared, not advertised against, and not read for anything other than keeping the app working. You can download all of it or delete all of it from inside the app, whenever you like, without asking anyone.
| What | Why |
|---|---|
| Your email address | It is how you sign in. There are no passwords, so every sign-in sends a link and a code to this address. It is also given to Kit, which sends the training notes, and which you can stop without closing your account — see Notes about training. |
| Your name, belt and stripes, and the date you started | Shown back to you, and stamped on each journal entry so you can see which belt wrote it. The name can be anything you like. |
| Your training record | The days you plan to train, the goal you set for each class, what you wrote about what was taught, and one entry per round you log. This is the app. |
| The position you pick for the month, and the one focus inside it for the week | So the app can put it in front of you before a class, and draw where your mat time actually goes. |
| Your journal entries | Written by you, for you. |
| Videos you save | The YouTube video's id, whatever you called it, any note you added, and the labels you made for filing it. No video is stored — see Videos you save. |
| Whose invite link you joined on, if you joined on one | Recorded once, when your account is made, so the person who sent it gets the credit. It is one row saying who invited whom, and it is not used for anything else. Your own link carries a code that cannot be turned back into your email address or anything else about you. |
| Your gym's class times | So planning a week is taps rather than typing. The gym is not identified or contacted. |
| A sign-in token in a cookie | So you stay signed in. The browser cannot read it from script, and the database keeps only a one-way hash of it, never the token itself. |
| A hashed record of sign-in attempts | To stop somebody hammering the sign-in page. Your email address and IP address are hashed before they are written, so the stored value cannot be turned back into either. These rows are cleared after a day. |
What is not collected. No advertising identifiers. No analytics. No tracking pixels. No location. No contacts. No payment details, because nothing costs anything yet. Nothing is bought from or sold to a data broker.
Three companies, and only because the app cannot exist without them:
Nobody else. No analytics company, no advertising network, no "partners."
You can save YouTube links and file them under labels you invent — whatever names make sense to you. No video is copied or stored anywhere here. What is kept is the eleven characters that identify the video on YouTube, the labels you put on it, what you called it, and your own note.
Nothing from YouTube loads until you press play. The picture on each card looks like it comes from YouTube, and it does — but this server fetches it, keeps a copy, and serves it to you. YouTube sees this server ask for a picture once. It does not see you, your address or your device, and it does not know your shelf exists. The moment you press play is the moment your browser talks to YouTube, and from then on you are watching a YouTube player with everything that normally involves. The player used here is the no-cookie one.
The labels you make and the names you give your videos are kept and looked at together with everyone else's, to work out what people are actually trying to learn and build the app around that. Your notes are not part of that, and nothing that plays is.
Signing up puts you on a short run of emails about training — one thing worth thinking about at a time. They are written in advance and sent on a schedule by Kit, which is given your email address and nothing else. Nothing in them is picked out by watching what you do in the app, and your journal, your goals and your round log are never read to decide what you are sent.
Every one of them carries an unsubscribe link, and it takes one tap. Unsubscribing stops the training notes only. Sign-in emails keep working, because without them you could not get into your own account, and nothing else about your account changes.
Your address is not given, sold or rented to anybody for their own mailing, here or anywhere else.
That is your decision, and there is a switch for it in the app under Who sees what you write.
Left as it is, your journal, your goals and the position you pick for the month reach the coach page. That is what makes a reply possible, and it means you should write as though one other person will read it — because one other person can.
Turned off, none of it is sent. Not filtered at the far end, not hidden on a page somebody could still open: not sent. Your writing stays on your own page, still yours to read, download and delete, and no notification goes out when you write. Nothing already written is deleted, and you can change your mind as often as you like.
It is all or nothing on purpose. A switch that says "this is private" should not have exceptions buried in it, so there is no carve-out for notes filed under a lesson or anything else.
Either way, nothing is scanned, scored, flagged or run through any system that decides things about you. Nothing is read by a machine for any purpose.
Until you delete it. A sign-in code expires after fifteen minutes. A sign-in session lasts 180 days and renews while you use the app; signing out ends it everywhere.
Your invite link carries an eight-character code. It is a one-way hash: it is the same every time, and it cannot be turned back into your email address, your name or anything else about you. Anyone can be handed the link without being handed a key.
If somebody joins on it, one row records that they did. They are told nothing about you beyond the fact that somebody invited them, and you are told nothing about them beyond a count. Nobody's training record is ever visible to anybody else.
Both live in the app itself, under Your account:
You do not need to ask, explain or wait.
This is for adults. You confirm you are 18 or over when you join, and accounts for anyone younger are not accepted. If one is created anyway, write to the address below and it will be deleted.
The app is being built and tested in the open. Things will change, and something may occasionally break. Your record is backed up by the host, but while this is a beta you should not treat it as the only copy of anything you would hate to lose — that is what the download button is for.
If this policy changes in a way that matters, members will be emailed. It will not change quietly.
Write to info@whitebeltjiujitsu.com. A real person reads it.