Privacy Policy

1. Who is responsible

For members buying on the website in Brazilian reais, the controller under Brazil's LGPD is Samurai Jiu-Jitsu Ltda, CNPJ 57.590.954/0001-19, Av. Mario Theophilo Guerra, 11, São Pedro da Aldeia, RJ, 28940-880, Brasil. For all other members, including everyone who buys in the app, it is Samurai Jiu-Jitsu Inc, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.

Privacy contact (including the LGPD data protection contact, "encarregado"): support@renzogracie.online.

2. What we collect

• Account: your email address, and the language you use on the site or in the app.
• Membership: plan, status, renewal dates and the Stripe customer and subscription references. Card details are handled by Stripe, never by us.
• In-app purchases: the store (App Store or Google Play), product, status and renewal dates of a membership bought in the app. Apple or Google handle the payment; we never see your payment details.
• In the app: notes you write, lessons you save for your next class, days you log as trained, and your answers to the first-launch questions (belt, how often you train, where you get stuck).
• Training activity: lessons you watched, completed and where you stopped, so we can show your progress and resume videos.
• If you were a member of the previous Renzo Gracie Online platform: the lessons you had watched there, which we brought over so your progress continues.
• Academy pass: if you train at a participating Renzo Gracie academy, whether your email belongs to an active member there, and the dates you checked in there, to fill your training week in the app.
• Notifications: if you allow them, a device token that lets us send notifications to your phone.
• Technical data: IP address, approximate country (used to show prices in your currency), browser, device and app version information in server logs.
• Messages you send us.

3. Why we use it

• To provide the membership you asked for: sign-in, access, progress, billing (performance of contract).
• To keep the service secure and working, and prevent fraud and account sharing (legitimate interest).
• To send service emails: sign-in links and codes, receipts, renewal and account notices.
• To send app notifications you allowed, such as the lesson of the week. You can turn them off in your phone's settings.
• To send news about the Academy. You can unsubscribe from these at any time using the link in each email.
• To meet legal obligations, such as tax and accounting records.

We don't sell your personal data and don't share it for advertising.

4. Who processes it for us

We use these service providers, each only for its task:

• Supabase: database and sign-in.
• Vercel: website hosting.
• Stripe: payments and subscriptions.
• Vimeo: video hosting and the video player. Vimeo processes viewing data under its own privacy policy and may set cookies in the player.
• Resend: sending our emails.
• Voyage AI: turns the text of a search into a form our search can compare. Only the search text is sent, not who searched.
• Cloudflare: domain and DNS.
• Google Workspace: our support mailbox.
• Kiso Academy: the membership system of the participating Renzo Gracie academies, which confirms whether an email belongs to an active academy member for the academy pass, and shares the dates of their check-ins for the training week in the app.
• RevenueCat: records of memberships bought in the app.
• Apple and Google: payments for memberships bought in the app, and delivery of notifications, under their own privacy policies.
• Expo: app updates and passing notifications to Apple and Google.

Most of these providers are in the United States, so data may be transferred and stored there, with safeguards required by applicable law.

5. Cookies

We only use cookies needed for the site to work: one keeps you signed in, one remembers your language. Stripe's checkout page and Vimeo's video player may set their own cookies under their policies. We use no advertising or analytics cookies. The app doesn't use cookies: it keeps your sign-in, your settings, lessons saved for offline viewing and a copy of recent data on your phone.

6. How long we keep it

We keep your account and training data while your account exists. Billing records are kept for as long as tax and accounting law requires. If you delete your account (in the app: Account → Delete account) or ask us to, we delete your personal data within 30 days, except what the law requires us to keep.

7. Your rights

You can ask us to confirm what data we hold, give you a copy, correct it, delete it, or stop using it for news emails. Brazilian residents have the rights in art. 18 of the LGPD; California residents have the rights of the CCPA, and we don't sell or share personal data as defined there. Write to support@renzogracie.online; we answer within 15 days. You can also complain to your data protection authority (in Brazil, the ANPD).

8. Children

The Academy is for people aged 18 and over. We don't knowingly collect data from children.

9. Security

Access to personal data is restricted to the people and providers who need it, data is encrypted in transit, and sign-in uses one-time links and codes instead of passwords that could leak. No system is perfectly secure; if a breach affects you, we tell you as the law requires.

10. Changes

We may update this policy. The date at the top shows the latest version; for important changes we notify members by email.