Privacy Policy

Last updated: May 25, 2026

1. Introduction

GrapplingU Inc. ("we," "our," or "us") operates the GrapplingU mobile application and website at grapplingu.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using GrapplingU, you agree to the collection and use of information in accordance with this policy.

Privacy Officer: Mark Youngson — grapplinguteam@gmail.com

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Belt rank, training experience, role (student or coach), gym affiliation
• Payment Information: Billing details processed by Stripe, Inc. We do not store your full credit card number, expiration date, or CVV.
• Training Data: Session logs, roll outcomes, game results, technique notes, skill progression, and training frequency
• Chat Messages: Questions and conversations with the AI coaching assistant
• Coach Feedback: Anonymous feedback on games and training sessions
• Gym Waiver Data: If your gym requires a liability waiver, we collect your typed legal name, acceptance timestamp, and waiver document reference

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, app version
• Usage Data: Features used, pages viewed, time spent on features, interaction patterns
• Log Data: IP address, browser type, access times, referring URLs
• Analytics Data: See Section 8 for specifics

2.3 Information from Third Parties

If you sign in using Google or Apple, we receive basic profile information (name, email, profile photo) as permitted by your privacy settings with those services.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Generate personalized AI coaching responses and training recommendations
• Track your BJJ learning progress and skill development
• Process subscription payments and send billing-related communications
• Enable coaches to monitor student progress within their gym (see Section 6)
• Monitor and analyze usage trends to improve the Service
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations

4. Artificial Intelligence and Data Processing

GrapplingU uses two AI providers to generate coaching responses, session summaries, and training recommendations: Anthropic (Claude) and Google (Gemini, via Vertex AI).

What data is sent to the AI: Your chat queries and relevant training context (recent sessions, skill levels, focus areas). No payment information or account credentials are sent.

How the AI providers handle your data: Anthropic processes this data under its Commercial Terms and Usage Policy and does not use your inputs or outputs to train its models. Google processes this data under its Cloud Data Processing Addendum and does not use your data to train its AI models.

Important: AI coaching responses are informational only, may contain errors, and are not a substitute for qualified in-person instruction.

We may use aggregated, anonymized training data to improve our recommendation algorithms. Your individual chat conversations are not used to train AI models.

5. Sharing of Information

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third parties who perform services on our behalf (see Section 7)
• Coach-Student Relationship: See Section 6
• Legal Requirements: If required by law, regulation, or legal process
• Protection of Rights: To protect the rights, property, and safety of GrapplingU, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share

5.1 Marketplace Payment Data

GrapplingU facilitates payments between students and coaches using Stripe Connect.

• Connected Account Data: When coaches connect their Stripe account to GrapplingU, we access account status information (charges enabled, payouts enabled, verification status, and account identifiers). This data is used solely to facilitate payment processing on the platform.
• Transaction Data: When students pay for gym memberships, Stripe processes the payment. GrapplingU receives transaction metadata (amount, status, subscription ID, membership tier) but does not access full payment card details such as card numbers, expiration dates, or CVVs.
• Membership Data: We store membership status (active, canceling, canceled, past due), tier information, and billing period dates to display membership information to both coaches and students.

For more information about how Stripe handles your data, see Stripe's Privacy Policy.

6. Data Sharing Between Coaches and Students

When you join a gym on GrapplingU, your coach(es) can see:

• Training session history (dates, positions worked, outcomes)
• Skill progression and technique focus areas
• Game and drill participation and performance
• In-app messages within your gym's context
• Weekly training summaries and patterns

Your coach(es) cannot see your private AI chat conversations, payment information, training data at other gyms, or account credentials.

Coaches agree to use student data only for coaching and instruction purposes within their gym.

By joining a gym on GrapplingU, you consent to your coach(es) viewing your training data as described above.

7. Third-Party Services

8. Analytics and Tracking Technologies

PostHog: Tracks pageviews, clicks, feature usage, and user properties (role, gym, belt level, subscription tier). Data is linked to your user account. Hosted in the US.

Firebase Analytics: Collects app instance IDs, device identifiers, and usage metrics for the iOS app.

Cookies: We use essential cookies (authentication, session management) and analytics cookies (PostHog, Firebase). You can disable analytics cookies in your browser settings. Essential cookies cannot be disabled without breaking core functionality.

9. International Data Transfers

Your information is stored and processed on servers located in the United States (Google Cloud, Vercel, PostHog). By using the Service, you consent to the transfer of your information to the United States.

10. Data Retention

• Account and training data: Duration of your active account plus 30 days after deletion
• AI chat history: Duration of your active account plus 30 days after deletion
• Payment records: As required by tax regulations (typically 7 years)
• Gym waiver records: Duration of your gym membership plus 7 years (for legal compliance)
• Analytics data: 26 months from collection
• Server logs: 90 days

You may request deletion of your account at any time by contacting grapplinguteam@gmail.com.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure authentication, and access controls. No method of transmission over the Internet is 100% secure.

12. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as required by PIPEDA.

13. Your Rights

For Canadian Users (PIPEDA):

• Access your personal information
• Correct inaccurate information
• Withdraw consent for data processing
• Request deletion of your information
• File a complaint with the Office of the Privacy Commissioner of Canada

For EU/UK Users (GDPR):

• Right of access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability and to withdraw consent

For California Users (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• We do not sell your data

To exercise any of these rights, contact grapplinguteam@gmail.com.

14. Children's Privacy

GrapplingU is not intended for children under 16. We do not knowingly collect personal information from children under 16.

15. Commercial Electronic Messages (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send marketing emails with your express consent. Every commercial message includes our name, contact information, and a working unsubscribe mechanism.

16. SMS / Text Messaging

Consent

GrapplingU sends SMS text messages on behalf of partnered gyms (the "Gyms") only when you have given your explicit, informed consent at a Gym-branded lead form hosted by GrapplingU — by ticking an unchecked SMS-consent box that displays the Gym's name and the substance of the messages you will receive. We do not enrol you in SMS messaging from any other channel. We record the timestamp of your consent and the exact disclosure text you saw at the moment of consent, both for legal compliance and so we can show you what you agreed to if you ask.

What you'll receive

Once you've opted in for a specific Gym, that Gym (acting through GrapplingU) may text you about: your trial class booking, scheduling and class times, any logistical details for your first visit, and short follow-ups if you don't respond. Message frequency varies based on your conversation with the Gym. Standard message and data rates from your mobile carrier may apply.

Opting out

Reply STOP to any text message and we will stop sending you SMS from that Gym immediately. Reply HELP to receive contact information. Opting out of SMS does not opt you out of email; if you want to stop email as well, use the unsubscribe link in any email or contact us at the address below.

Mobile information sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information — and specifically including mobile phone numbers and SMS opt-in status — are excluded from any sharing or sale to third parties or affiliates for marketing or promotional purposes. Mobile information stays between you, the Gym you opted in to, and GrapplingU as the platform delivering the messages.

What we store

For each SMS opt-in we retain: the phone number you provided, the timestamp of your consent, the exact opt-in disclosure text shown at consent time, the Gym you opted in to, the conversation history of messages exchanged, and any STOP/HELP keyword history. We retain this for as long as the Gym is an active GrapplingU customer plus six (6) months for compliance audit purposes, after which we delete it.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the date at the top of this page.

18. Contact Us

GrapplingU Inc.

Privacy Officer: Mark Youngson

Email: grapplinguteam@gmail.com

Address: 48 Fifth Ave, Ottawa, ON K1S 2M5, Canada