Privacy Policy

Last Updated: January 28, 2026

1. Introduction

Welcome to Flowstate BJJ ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

            Key Points:
            We only collect data necessary to provide our services
Your training data is private and secure
We never sell your personal information
You can delete your account and data at any time

        

2. Information We Collect

2.1 Information You Provide

When you use Flowstate BJJ, you may provide us with:

Account Information: Name, email address, username, profile photo
Training Data: Rolling sessions, sparring records, techniques learned, drilling logs, opponents, submissions, notes
Goals and Preferences: Training goals, belt rank, weight class, training style preferences
Voice Data: Voice recordings when using voice logging features (processed and deleted immediately after transcription)
Social Information: Friends list, gym affiliations, comments, challenge participation
Payment Information: Processed securely through Apple's In-App Purchase system (we do not store credit card details)

2.2 Automatically Collected Information

Device Information: Device type, operating system, unique device identifiers
Usage Data: App features used, session duration, crash reports
Health Data: With your permission, we may sync with Apple Health (heart rate, workout data, recovery metrics)
Location Data: We do NOT collect precise location data. Gym affiliations are entered manually by users.

3. How We Use Your Information

We use your information to:

Provide Core Services: Track training sessions, store technique logs, generate analytics
AI Insights: Analyze your training data to provide personalized recommendations and identify patterns
Social Features: Enable leaderboards, friend connections, and community challenges
Personalization: Customize your experience with video recommendations and technique suggestions
Communication: Send important updates about your account, new features, or subscription status
Improvement: Analyze app usage to improve features and fix bugs
Security: Detect and prevent fraud, abuse, or security issues
Legal Compliance: Comply with applicable laws and regulations

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 When We Share Data

We may share your information only in these limited circumstances:

With Your Consent: When you choose to share training data with friends or on leaderboards
Service Providers: We use trusted third-party services:
- Supabase (database hosting and authentication)
- RevenueCat (subscription management)
- Sentry (crash reporting and error tracking)
- Apple (In-App Purchase processing)
These providers are contractually obligated to protect your data and use it only for providing services to us.
Legal Requirements: If required by law, court order, or government regulation
Business Transfers: If we merge with or are acquired by another company (your data would remain protected under this privacy policy)
Safety: To protect the rights, property, or safety of our users or others

5. Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit (TLS/SSL)
Database encryption at rest
Secure authentication with Supabase
Regular security audits and updates
Access controls and monitoring

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your data:

6.1 Access and Portability

View Your Data: Access all your training data in the app at any time
Export Your Data: Premium users can export all data as CSV or HTML files (Settings → Data Export)

6.2 Correction and Deletion

Update Information: Edit your profile, training logs, and preferences at any time
Delete Specific Data: Delete individual sessions, techniques, or posts
Delete Account: Permanently delete your account and all associated data (Settings → Account → Delete Account)

6.3 Privacy Controls

Social Features: Choose to opt out of leaderboards and public profiles
Data Sharing: Control what information is visible to friends
Notifications: Manage email and push notification preferences
Health Data: Revoke health data access permissions at any time

6.4 Do Not Sell My Information

We do not sell personal information. If you want to opt out of any data sharing (beyond what's necessary to provide the service), contact us at support@bjjflowstate.com.

7. Children's Privacy

Flowstate BJJ is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@bjjflowstate.com, and we will delete such information.

For users aged 13-17, parental consent may be required depending on your location.

8. International Users

Flowstate BJJ is operated from Cyprus. If you are accessing the app from outside this jurisdiction, please be aware that your information may be transferred to, stored, and processed in our servers where data protection laws may differ from Cyprus.

For EU/UK Users: We comply with GDPR. Your data is processed based on:

Your consent (when you create an account)
Contractual necessity (to provide services you've requested)
Legitimate interests (to improve our app and prevent fraud)

You have additional rights under GDPR, including the right to object to processing and the right to lodge a complaint with a supervisory authority.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

All personal data is immediately deleted from our active databases
Backups are purged within 30 days
Anonymized analytics data may be retained for statistical purposes

10. Voice Data Processing

When you use voice logging features:

Voice recordings are processed locally on your device when possible
If cloud processing is needed, recordings are immediately transcribed and then deleted
We do not store voice recordings
Only the transcribed text is saved to your training log
You can delete transcribed data at any time

11. Third-Party Links

Our app may contain links to third-party websites or services (such as video tutorials on YouTube or BJJ instructional sites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. When we make changes:

We will update the "Last Updated" date at the top of this policy
For material changes, we will notify you via email or in-app notification
Continued use of the app after changes constitutes acceptance of the updated policy

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your data, please contact us:

Email: support@bjjflowstate.com
Response Time: We aim to respond within 48 hours

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do not sell personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, email us at support@bjjflowstate.com with "CCPA Request" in the subject line.

15. State-Specific Disclosures

Health Data (HIPAA)

Flowstate BJJ is NOT a HIPAA-covered entity. While we integrate with health data (via Apple Health), we do not provide medical services. If you sync health data, it is governed by this privacy policy and Apple's privacy policy.

Biometric Data

If you use Face ID or Touch ID for app authentication, this biometric data is processed entirely on your device by Apple's Secure Enclave. We do not collect, store, or have access to your biometric information.