Privacy Policy

Who is responsible for your data

The data controller is PPCWAY — Sole proprietorship (JDG) registered in CEIDG, Poland — at the address in the imprint at the bottom of this page. For anything about your data, a copy, a correction, a deletion or a complaint, write to support@buildmygame.app.

This policy covers the BJJ Game Builder iOS and Android apps and this website.

What the app collects

• Your e-mail address, to create and sign you into your account. If you sign in with Google on Android we receive the address and basic profile information Google supplies.
• Your training log — the techniques and positions you record, and what happened to each one. This is the app's purpose; it is yours, and it is what My Game, Analysis and AI Coach are built from.
• A pseudonymous account identifier. A random identifier, not your name or your e-mail.
• Your purchase status, so the app knows whether you have PRO. Apple on iOS and Google Play on Android handle the payment; we never see a card or a bank detail.
• Anonymous usage statistics and crash reports — only if you agree. Which screens are opened, whether a training gets logged, whether a purchase succeeded.

What the app never collects

Never sent to analytics, under any setting:

• The techniques or positions you train, or their names
• Anything you type into search
• What the AI Coach wrote, or the text it was given
• Your notes, or any free text
• Your exact training counts or the exact size of your game
• Your location, or an advertising identifier
• Purchase tokens, order numbers or any access token
• Your e-mail address or your name

The app also has no access at all to your location, microphone, camera, photos, contacts or health data. It asks for none of those permissions.

Analytics are optional

The app asks once, and collects nothing until you say yes. Declining changes nothing about what the app can do — no feature is limited, and you are not asked again on every launch. You can change your mind at any time in Settings → Privacy.

Withdrawing consent does two things rather than one: it stops collection, and it resets the identifiers the analytics provider assigned, so nothing sent afterwards can be joined to anything sent before.

Why we are allowed to process it

• To provide the app you asked for — your account, your training log, My Game, Analysis, AI Coach and your subscription. This is necessary to perform our agreement with you.
• Because you agreed — usage analytics and crash reports, and nothing else. You can withdraw at any time and it stops.
• Because we have to — keeping records of transactions, which tax and accounting law requires.
• Because we have a legitimate interest — keeping the service secure and working, and answering you when you contact support.

Who processes your data

• Supabase — your account, your training log, and authentication.
• Google Firebase (Analytics and Crashlytics) — usage statistics and crash reports, only if you consent.
• Google — if you choose Google sign-in on Android. iOS uses e-mail and password.
• Apple App Store, Google Play and RevenueCat — taking payment through the applicable store and keeping track of whether your subscription is active.
• OpenAI — the AI Coach. See below for exactly what reaches it.
• Hetzner and Cloudflare — hosting and serving this website. They handle ordinary request information such as your IP address.
• Google Analytics — counting visits to this website, and only if you allow it. What that involves is set out below.

Where your data goes

Some of these providers are based in, or process data in, the United States. Where data leaves the European Economic Area it is transferred under the safeguards those providers offer for international transfers, such as the European Commission's standard contractual clauses or an adequacy decision. If you want to know the current arrangement for a specific provider, ask us.

What the AI Coach sends

AI Coach does not see your training log. The app counts your results itself and decides what is working, what to improve and what to focus on; only those counted conclusions are sent, to be turned into sentences.

That means no technique history, no notes, no search terms, no e-mail address and no account identifier leave the app for this. What the AI Coach writes is stored with your account so it can be shown again, and it is deleted with your account.

Summaries are written automatically and can be wrong. Check anything important with your instructor. It is not medical or health advice.

We use OpenAI's API for this, as a processor acting on our instructions. OpenAI's stated default for API traffic is that inputs and outputs are not used to train their models unless the customer opts in, and we have not opted in.

We cannot tell you which country that request is served from — the API is a global endpoint — so we describe it as a transfer outside the EEA covered by the safeguards in OpenAI's data processing terms, rather than promising it stays in Europe.

How long things are kept

• Your account and training log — until you delete them. There is no expiry.
• Usage analytics, from the app and from this website alike — 14 months, then removed by the analytics provider.
• Payment records — kept as long as we are required to, and anonymised as soon as an account is deleted.

Keeping it safe

Data is encrypted in transit. Your training log is stored so that it is reachable only by your own signed-in account, and the keys that could read anyone's data live on our servers and never in the app. No system is perfectly secure, and we do not claim otherwise — but if something goes wrong that affects you, we will tell you.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct or erase it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for your data in a portable form. Where we rely on your consent you can withdraw it at any time without affecting what was done before.

You can also complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office; you may instead complain to the authority where you live.

Deleting your account is a two-step action in Settings and takes effect immediately — here is what it does. For anything else, write to support@buildmygame.app; we aim to answer within 14 days.

This website

Until you say otherwise, this site loads nothing from anybody else and stores nothing in your browser. There is no tag and no cookie on a page you have not agreed to be counted on.

If you allow it, we count visits with Google Analytics 4 — the same measurement property the app uses, in a separate data stream, so website traffic and app usage are never mixed together. What that involves:

• What is measured — which page you opened, how you arrived at it (a search, a link, or directly), roughly where in the world you are, and your browser and device type. Clicks on the Google Play button and on our support address are counted too. Nothing you type is recorded, and no free text of any kind is sent.
• What is stored in your browser — two Google Analytics cookies, _ga and _ga_47WY24GFTH, which mark this browser as a returning visitor. Both expire after two years. Nothing else is stored.
• Who receives it — Google, as our processor under the Google Analytics terms. This is a transfer outside the European Economic Area, under the safeguards described above.
• How long — 14 months, the same as the app.
• What is switched off — Google Signals, advertising personalisation and advertising identifiers. We do not advertise with this data and we do not build advertising audiences from it.
• Why we are allowed to — because you agreed. Art. 6(1)(a) GDPR, together with art. 173 of the Polish Prawo komunikacji elektronicznej for the storage in your browser.

Separately, and whatever you answer, our host and our CDN process ordinary request information such as your IP address in order to serve the page and keep it available. That is server logging rather than analytics: it involves no cookie and no tag, and we cannot switch it off without switching the website off.

/admin is an internal tool, is excluded from search engines, and carries no analytics at all.

Children

BJJ Game Builder is intended for people aged 16 and over. It is not directed at children and we do not knowingly collect their data.

Changes

If this notice changes in a way that matters, the date at the top changes with it and the app will tell you.