Privacy Policy

Who is responsible for your data

The data controller is PPCWAY — Sole proprietorship (JDG) registered in CEIDG, Poland — at the address in the imprint at the bottom of this page. For anything about your data, a copy, a correction, a deletion or a complaint, write to support@buildmygame.app.

This policy covers the BJJ Game Builder Android app and this website.

What the app collects

• Your e-mail address, to create and sign you into your account. If you sign in with Google we receive the address and basic profile information Google supplies.
• Your training log — the techniques and positions you record, and what happened to each one. This is the app's purpose; it is yours, and it is what My Game, Analysis and AI Coach are built from.
• A pseudonymous account identifier. A random identifier, not your name or your e-mail.
• Your purchase status, so the app knows whether you have PRO. Google Play handles the payment; we never see a card or a bank detail.
• Anonymous usage statistics and crash reports — only if you agree. Which screens are opened, whether a training gets logged, whether a purchase succeeded.

What the app never collects

Never sent to analytics, under any setting:

• The techniques or positions you train, or their names
• Anything you type into search
• What the AI Coach wrote, or the text it was given
• Your notes, or any free text
• Your exact training counts or the exact size of your game
• Your location, or an advertising identifier
• Purchase tokens, order numbers or any access token
• Your e-mail address or your name

The app also has no access at all to your location, microphone, camera, photos, contacts or health data. It asks for none of those permissions.

Analytics are optional

The app asks once, and collects nothing until you say yes. Declining changes nothing about what the app can do — no feature is limited, and you are not asked again on every launch. You can change your mind at any time in Settings → Privacy.

Withdrawing consent does two things rather than one: it stops collection, and it resets the identifiers the analytics provider assigned, so nothing sent afterwards can be joined to anything sent before.

Why we are allowed to process it

• To provide the app you asked for — your account, your training log, My Game, Analysis, AI Coach and your subscription. This is necessary to perform our agreement with you.
• Because you agreed — usage analytics and crash reports, and nothing else. You can withdraw at any time and it stops.
• Because we have to — keeping records of transactions, which tax and accounting law requires.
• Because we have a legitimate interest — keeping the service secure and working, and answering you when you contact support.

Who processes your data

• Supabase — your account, your training log, and authentication.
• Google Firebase (Analytics and Crashlytics) — usage statistics and crash reports, only if you consent.
• Google — if you choose to sign in with a Google account.
• Google Play and RevenueCat — taking payment and keeping track of whether your subscription is active.
• OpenAI — the AI Coach. See below for exactly what reaches it.
• Hetzner and Cloudflare — hosting and serving this website. They handle ordinary request information such as your IP address; the website itself sets no tracking cookies and runs no analytics.

Where your data goes

Some of these providers are based in, or process data in, the United States. Where data leaves the European Economic Area it is transferred under the safeguards those providers offer for international transfers, such as the European Commission's standard contractual clauses or an adequacy decision. If you want to know the current arrangement for a specific provider, ask us.

What the AI Coach sends

AI Coach does not see your training log. The app counts your results itself and decides what is working, what to improve and what to focus on; only those counted conclusions are sent, to be turned into sentences.

That means no technique history, no notes, no search terms, no e-mail address and no account identifier leave the app for this. What the AI Coach writes is stored with your account so it can be shown again, and it is deleted with your account.

Summaries are written automatically and can be wrong. Check anything important with your instructor. It is not medical or health advice.

We use OpenAI's API for this, as a processor acting on our instructions. OpenAI's stated default for API traffic is that inputs and outputs are not used to train their models unless the customer opts in, and we have not opted in.

We cannot tell you which country that request is served from — the API is a global endpoint — so we describe it as a transfer outside the EEA covered by the safeguards in OpenAI's data processing terms, rather than promising it stays in Europe.

How long things are kept

• Your account and training log — until you delete them. There is no expiry.
• Usage analytics — 14 months, then removed by the analytics provider.
• Payment records — kept as long as we are required to, and anonymised as soon as an account is deleted.

Keeping it safe

Data is encrypted in transit. Your training log is stored so that it is reachable only by your own signed-in account, and the keys that could read anyone's data live on our servers and never in the app. No system is perfectly secure, and we do not claim otherwise — but if something goes wrong that affects you, we will tell you.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct or erase it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for your data in a portable form. Where we rely on your consent you can withdraw it at any time without affecting what was done before.

You can also complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office; you may instead complain to the authority where you live.

Deleting your account is a two-step action in Settings and takes effect immediately — here is what it does. For anything else, write to support@buildmygame.app; we aim to answer within 14 days.

This website

The site sets no cookies, runs no analytics and embeds no third-party trackers. Our host and our DNS provider process ordinary request information, such as your IP address, in order to serve the page and keep it available.

Children

BJJ Game Builder is intended for people aged 16 and over. It is not directed at children and we do not knowingly collect their data.

Changes

If this notice changes in a way that matters, the date at the top changes with it and the app will tell you.