Privacy Policy

Effective date: August 31, 2026

This privacy policy applies to the Plata app for mobile devices, together with any related services operated by Plata Interactive LLC (collectively, the "Application"). Plata Interactive LLC is hereby referred to as the "Service Provider". If the Service Provider later offers a web version of the Application, this policy will be updated to cover it.

Information Collection and Use

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to: email address, username, display name, avatar, belt rank and stripes, affiliate school, bio text, Instagram handle, training session content, photos posted in sessions, comments and @mentions, training partner tags, and follow relationships. The information the Service Provider requests will be retained and used as described in this privacy policy.

At sign-up, the Service Provider asks for your date of birth solely to confirm that you meet the minimum age requirement to use the Application (see "Children" below). Your date of birth is used to perform this age check and is not stored; the Service Provider retains only an indicator that you met the minimum age requirement.

The Application also automatically collects limited technical information when you use it:

• Your device's Internet Protocol (IP) address, received by the Service Provider's servers when the Application connects to them
• The operating system you use
• Your device's timezone setting
• Device information such as device model and operating system version, included in crash reports

Location Data

The Application does not collect device location data, GPS coordinates, or precise geographic location. The "affiliate school" you select is user-provided text from a predefined list and does not represent your actual location. Your device's timezone is recorded to display training dates correctly; a timezone identifies a broad region, not your location.

Photos uploaded to sessions and avatars are re-encoded before being stored on our servers, which removes GPS coordinates and other embedded metadata (EXIF data).

Voice Logging and Automated Text Extraction

The Application offers an optional voice logging feature that lets you describe a training session in your own words instead of filling in a form. This feature is entirely optional, and you can always log a session by typing instead.

If you use the in-app recording button, your device's microphone audio is processed by your operating system's speech recognition service — Apple's Speech framework on iOS, or Google's speech recognition service on Android — to convert what you say into text. Depending on your device, operating system version, and language settings, that audio may be transmitted to and processed by Apple or Google on their servers, subject to their own privacy policies. The Service Provider does not record, store, or transmit your audio, and never receives it. The same applies if you dictate using your keyboard's microphone key.

The resulting text remains on your device, in an editable field, until you choose to submit it for extraction. Only when you tap to extract is the text transmitted to the Service Provider's servers and then to Anthropic's API, which analyses it to suggest values for the session form, such as duration, class type, and techniques. Anthropic processes this text to return the extraction and does not use it to train its models.

The Service Provider does not store the text of your voice logs. A usage record is kept for each extraction attempt containing your user identifier, a timestamp, usage metadata such as the character count of the submitted text, and, where an extraction fails, technical diagnostic information about the failure. This record is used solely to enforce a daily usage limit and to operate and troubleshoot the feature. The content of the text you submit is not recorded.

Extracted values are presented to you as a pre-filled form. Nothing is saved to your training log until you review it and choose to save.

The Application requests microphone and speech recognition permission only when you first use the in-app recording button. Declining has no effect on any other feature, and you can continue to log sessions by typing.

User-Generated Content

When you post sessions, comments, or photos, this content is displayed within the Application to other users in accordance with the privacy settings you choose for each session — public, followers-only, or private to you alone. Content you post remains your property; by posting, you grant the Service Provider a non-exclusive, worldwide, royalty-free license to host, store, reproduce, adapt (including generating structured session details from voice transcripts), and display your content as needed to operate and provide the Application. This license does not permit the Service Provider to sell your content or license it to third parties independently of the Application.

When you @mention another user in a comment, that user is notified of the mention. When you tag another user as a training partner on a session, that user is notified of the tag.

The Application screens text you submit — including session content, comments, and profile fields — against a list of prohibited terms before it is saved. Content matching that list is rejected and not stored. You can also report content and block other users from within the Application.

Photos attached to sessions are stored in a manner that allows them to be retrieved by direct link. While a session's privacy setting governs where the session and its photos appear inside the Application, anyone who obtains the direct link to a photo file may be able to view that file outside the Application. You should not post photos you would not be willing to have seen by someone outside your intended audience.

Cookies and Tracking Technologies

The Application does not currently use analytics SDKs, advertising identifiers, or cross-site tracking technologies. The Service Provider does not sell or share personal information for cross-context behavioral advertising. Should this change, this policy will be updated and, where required by applicable law, consent obtained before non-essential tracking technologies are used.

Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at alex@platabjj.com.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell or share personal information. To exercise your CCPA/CPRA rights, contact the Service Provider at alex@platabjj.com.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

Third-Party Service Providers

The Service Provider uses the following third-party services to operate the Application:

• Supabase — database, authentication, and file storage. User data (including profile information, training sessions, comments, and photos) is stored and processed by Supabase. Privacy policy: https://supabase.com/privacy
• Anthropic — automated text extraction for the optional voice logging feature. Text you submit for extraction is processed by Anthropic's API to suggest session form values. Privacy policy: https://www.anthropic.com/legal/privacy
• Apple — App Store distribution and app account management. Privacy policy: https://www.apple.com/legal/privacy/
• Google — Google Play Store distribution. Privacy policy: https://policies.google.com/privacy
• Sentry — error and crash reporting. When the Application encounters an error, diagnostic information including device model, operating system version, application version, and technical details of the error is transmitted to Sentry so that faults can be diagnosed and fixed. Privacy policy: https://sentry.io/privacy/
• Resend — transactional email delivery. Your email address is processed by Resend to send account confirmation, password reset, and similar service messages. Privacy policy: https://resend.com/legal/privacy-policy

Supabase, Anthropic, Sentry, and Resend process user data on the Service Provider's behalf, do not have independent rights to use your information, and have agreed to confidentiality obligations consistent with this Privacy Policy.

Separately, when you use the voice logging feature, your device's speech recognition is provided by Apple (on iOS) or Google (on Android) as an operating-system service. These services operate under Apple's and Google's own terms and privacy policies and are not processors acting on the Service Provider's behalf.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Disclosure of Information

The Service Provider may disclose user-provided and automatically collected information:

• As required by law, such as to comply with a subpoena or similar legal process
• When the Service Provider believes in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
• With trusted service providers who work on the Service Provider's behalf, as described in the "Third-Party Service Providers" section above

Opt-Out Rights

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at alex@platabjj.com.

Data Retention

The Service Provider retains personal data as follows:

• Your account and the content you post: retained until you delete your account or request deletion, unless longer retention is required by law.
• Voice logging usage records: retained while your account is active and removed when your account is deleted. The text of your voice logs is not retained at any point.
• Error and crash reports: retained by our error reporting provider in accordance with its standard retention period.
• Aggregated and anonymized data: retained indefinitely, as it no longer identifies you.
• Data required for legal compliance: retained as long as required by applicable law.

Data removed from active databases as part of account deletion may persist in routine database backups until those backups are overwritten as part of normal backup rotation.

Account Deletion

You can delete your account at any time from within the Application (Settings → Delete Account). Deletion is permanent and cannot be undone.

When you delete your account:

• Your ability to sign in is removed.
• Your profile is anonymized: your email, username, bio, avatar, Instagram handle, belt information, school affiliation, and timezone are cleared, your display name is changed to "Deleted User," and your account is marked as deleted.
• Your training sessions, session photos, and the photos stored on our servers are deleted.
• Your follows, fist bumps, notifications, and feature usage records are deleted.
• Comments and @mentions you made on other members' content remain, so that those conversations stay readable, but are no longer attributed to you by name and appear only as "Deleted User."
• If another user has blocked you, that block is retained. It reflects their choice, not your data, and removing it would change what they see.
• If any user reported content, those moderation records are retained. Where you were the reporter, the text of your report is removed.

You may also request deletion by contacting the Service Provider at alex@platabjj.com.

Children

The Application is intended only for people 17 years of age or older. The Service Provider does not knowingly collect personally identifiable information from anyone under 17, and does not market the Application to them. At sign-up, the Service Provider checks date of birth to enforce this minimum age.

If the Service Provider learns that it has collected personal information from someone under 17, it will delete that information and remove the account. If you have reason to believe that someone under 17 has provided personally identifiable information through the Application, please contact the Service Provider at alex@platabjj.com so that necessary action can be taken.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect the information it processes and maintains, including encryption of data in transit, secure authentication mechanisms, and database-level access controls. Data stored with our hosting provider is encrypted at rest in accordance with that provider's practices.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at alex@platabjj.com.

Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at alex@platabjj.com.