Privacy Policy

This policy explains how BJJ AI collects, uses, and protects your information when you use the BJJ AI mobile application (the “App”). By creating an account and using the App, you agree to the practices described here.

1. Information We Collect

1.1 Account information

• Sign in with Apple: If you sign in with Apple, Apple provides us with a stable user identifier, and (if you choose to share it) your name and email. Your Apple ID password is never shared with us.
• Email/password accounts: If you create a local account, we store the username, email, and a password hash on your device using the iOS Keychain. These credentials never leave your device.
• Optional profile fields: First name, last name, date of birth, height, weight, belt rank, experience level, training style, positions, submissions, takedowns, injuries, and free-text goals. These are used to personalize AI coaching and are stored on-device and in your iCloud account (see Section 3).

1.2 Training and coaching data

• Training sessions you log (date, duration, type, techniques, notes, intensity).
• Video analyses — when you analyze a roll, we extract still frames from your video and send them to our AI provider for analysis (see Section 4). The original video is not uploaded; only sampled frames.
• AI Coach conversations and generated lessons.
• Coach memory — a rolling summary of your recent activity used to keep coaching personalized.
• Progress statistics — XP, streaks, milestones, and drill history.

1.3 Photos and camera

• Profile photo — if you choose to add one. Stored locally on your device only (not synced to iCloud).
• Camera recording — used when you record training footage directly in the App for analysis. Frames are sent to the AI provider; the full recording is processed on-device and is not uploaded.
• Photos library — accessed only when you select a video or photo for analysis, with your permission.

1.4 Microphone

• Used for the dictation feature (speech-to-text) when composing notes or coach messages. Audio is processed by Apple’s on-device speech recognition framework and is not sent to our servers.

1.5 What we do not collect

• Precise GPS location.
• Contacts, calendar, or social graph.
• Browsing history or cross-app activity.
• We do not integrate any third-party advertising or analytics SDKs (no Firebase, no AdMob, no Facebook SDK). No behavioral tracking occurs.

2. How We Use Your Information

• To create and manage your account and session.
• To provide personalized AI coaching, video analysis, and lesson generation.
• To sync your training data across your Apple devices via iCloud.
• To verify subscription status and grant access to premium features.
• To display your progress, streaks, and coach memory inside the App.

3. Where Your Data Is Stored

iCloud sync requires that you are signed in to the same Apple ID on each device and have iCloud enabled for BJJ AI in Settings → [Your Name] → iCloud → Apps Using iCloud. If iCloud is unavailable, the App continues to work with on-device storage only.

4. Third-Party Services

4.1 Apple

• Sign in with Apple — authenticates your identity without sharing your real Apple ID password with us.
• iCloud / CloudKit — syncs your data across your own Apple devices. Your data lives in your private iCloud database; only you can read it.
• StoreKit / App Store — processes subscription purchases and renewals. Payment is handled entirely by Apple; we never see your card or bank details.

4.2 AI model providers

To generate video analyses, lessons, and coaching responses, the App sends the following to our AI provider through our secure proxy:

• Up to six down-sampled still frames (max 640px, JPEG quality ~50%) extracted from your video.
• Your athlete profile context (belt, style, positions, injuries, goals).
• Your recent coach memory summary.
• The specific question or analysis mode you selected.

The full video is never uploaded. Processing follows each provider’s data retention policy; we select providers that do not use customer inputs to train their models.

4.3 Rork Auth (Sign in with Apple relay)

The OAuth token exchange for Sign in with Apple is relayed through Rork’s authentication service, which issues and stores encrypted access/refresh tokens in your device’s Keychain. The relay sees your Apple user identifier and (if shared) your email; it does not see your password.

5. Data Sharing and Selling

We do not sell, rent, or trade your personal information. We do not share your data with third parties for advertising. Data is shared only with the services listed in Section 4, strictly as needed to operate the App’s features.

6. Data Retention and Deletion

• In-app: You can delete your account at any time from Profile → Account → Delete Account. This removes your local account, credentials, and on-device data immediately.
• iCloud: Deleting your account does not automatically delete data already synced to your iCloud account. To remove synced data, sign out of iCloud or disable iCloud for BJJ AI in Settings → [Your Name] → iCloud → Apps Using iCloud.
• AI providers: Frames and prompts sent for analysis are processed transiently; we do not maintain a separate server-side archive of your AI inputs.

7. Your Privacy Rights

Depending on your jurisdiction (e.g., California, the EU/UK, and other regions with privacy laws), you may have the right to:

• Know what personal data we hold and how we use it.
• Request access to or a copy of your data.
• Request correction or deletion of your data.
• Opt out of any “sale” or “sharing” of personal data (we do not engage in either).

Because your training data is stored on your device and in your personal iCloud account, you have direct control: deleting the App, deleting your account, or managing iCloud settings exercises these rights without needing to contact us. For other requests, email the address in Section 10.

8. Children’s Privacy

BJJ AI is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

9. Security

Credentials are stored in the iOS Keychain, encrypted by Apple. Data synced through iCloud is transmitted over HTTPS and stored in your private CloudKit database. AI requests are sent over HTTPS to our proxy. No method of transmission or storage is fully secure, but we rely on Apple’s platform security to protect your data.

10. Contact Us

Questions about this policy or your data? Email support@bjjaiapp.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective” date above. Continued use of the App after a change constitutes acceptance of the updated policy.