Privacy Policy
Contents
1. Who We Are
Mat Log ("we", "us") is a training companion app for BJJ and grappling athletes. This policy explains what we collect when you use the app, why we collect it, and what control you have over it. It applies to the Mat Log mobile app and this website.
2. What We Collect
Account information
To use Mat Log you create an account — with an email address and password, or by signing in with Google or Apple. We store your email address, a display name if you set one, and an internal account identifier. We never receive or store your Google or Apple password. Mat Log does not offer anonymous or guest accounts.
Profile information
Anything you choose to add to your profile: belt rank and stripes, the gym you train at, your training goals, and a profile photo if you upload one. All of it is optional beyond the account itself.
Training content you create
This is the substance of the app, and all of it is created by you:
- Training sessions — dates, duration, session type (gi / no-gi / open mat), rounds, training partners you name, and any notes you attach.
- Journal entries — free-text notes and reflections.
- Game plans — positions, transitions, and the cues you write for them.
- Reference library — links to instructional videos and techniques (pasted or captured via your device share menu/clipboard), cached thumbnail images stored securely in cloud storage, title and tag metadata, and your personal study notes. We do not store video files.
- Tags, focus periods, and training targets you define.
Technical information
Standard information needed to run the service: device and app version, IP address at the time of a request, timestamps, and error diagnostics. If you enable notifications, we store a device push token so we can send them; you can turn notifications off at any time in your device settings. App preferences (such as App Lock state, clipboard prompt interactions, and theme settings) are stored locally on your device.
What we do not collect
- Video footage of your training. Ever.
- Payment card details — purchases are handled by Apple or Google.
- Contacts, precise location, health data from other apps, or advertising identifiers.
- Biometric data — Face ID, Touch ID, or device passcodes used for optional App Lock are handled entirely by your device's operating system. Mat Log never receives, collects, or stores your biometric data or passcode.
3. How We Use It
| Purpose | Data used |
|---|---|
| Provide the app — store and sync your training records across your devices | Account, profile, training content |
| Authenticate you and keep your account secure | Account, technical |
| Show your stats, streaks, and progress | Training content |
| Verify attendance and belt rank against your gym (only if you link one) | Account identifier, gym membership |
| Generate AI suggestions and summaries (only if you use those features) | The training content relevant to the request |
| Diagnose crashes and fix bugs | Technical |
| Respond to your support requests | Account, plus whatever you tell us |
We do not sell your data, rent it, or share it with advertisers, and we do not use your training content to train third-party AI models.
4. Gym Linking
Mat Log works completely on its own. If your gym uses Flow Roll, you can choose to link your account to it. When you do:
- Your gym can confirm your attendance and your belt promotions, which marks those records gym-verified instead of self-reported.
- The app can show you gym information such as the class schedule and announcements. That data is read-only in Mat Log.
- Your journal entries, reference library, game plans, and session notes are never shared with your gym. Linking does not give your gym a window into your private training content.
You can unlink your gym at any time. Records your gym previously verified remain in your log.
5. AI Features
Some optional features use AI to summarise your training, generate study notes for reference clips, suggest focus tags/titles, or answer questions about your own notes. These features are available to users with an active AI Pro subscription.
- When you use an AI feature, the relevant training or reference content is sent to Google's Vertex AI (Gemini) through our secure servers to produce a response.
- Your content is not used to train Google's models — Vertex AI is used under Google Cloud's enterprise terms, which prohibit model training on customer data.
- AI answers can be wrong. They are not coaching, medical, or safety advice.
6. Who We Share It With
We share data only with service providers who process it on our behalf, under contract, for the purposes above:
| Provider | What for |
|---|---|
| Google Firebase (Google LLC) | Authentication, database, file storage, server functions, and push notifications |
| Google Cloud Vertex AI | AI features, when you use them |
| Apple / Google Play | Processing in-app purchases and subscriptions |
| Flow Roll | Gym verification, only if you link a gym |
We may also disclose data if we are legally required to, or to protect the rights and safety of our users. Data is stored on Google Cloud infrastructure and may be processed in the United States and other countries where Google operates.
7. Retention and Deletion
We keep your data for as long as your account exists. If you delete your account, we delete your account record, Firestore data, and stored reference thumbnails from our production systems within 30 days. Backups are purged on their own rolling schedule, within 90 days. We keep only what the law requires us to keep, such as purchase transaction records.
You can delete your account at any time directly within the app under Profile, or by emailing us at support@matlog.app.
Important note on subscriptions: Deleting your Mat Log account deletes your personal data and account record, but does not automatically cancel active subscriptions (such as AI Pro). Subscriptions are managed directly by Apple or Google. To prevent future charges, you must cancel your subscription through your device's Apple ID or Google Play Store account settings.
8. Your Rights
Depending on where you live — including under the GDPR in the UK and EEA, and the CCPA/CPRA in California — you have the right to:
- Access a copy of the data we hold about you
- Correct data that is wrong
- Delete your account and your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing relies on it
Email support@matlog.app and we will respond within 30 days. We will not discriminate against you for exercising any of these rights. Where the GDPR applies, our legal bases are contract (providing the app you signed up for), legitimate interests (security and fixing bugs), and consent (optional features such as AI and push notifications).
9. Security
Data is encrypted in transit (TLS) and at rest by our infrastructure provider. Access to your records is enforced server-side, so one account cannot read another's. We limit internal access to what is needed for support and operations. To secure your app on your device, Mat Log also provides an optional on-device App Lock using Face ID, Touch ID, or passcode. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant regulator as the law requires.
10. Children
Mat Log is not directed at children under 13 (or under 16 where local law sets that bar), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it. Younger athletes should use the app through a parent or guardian's account.
11. Changes to This Policy
We may update this policy as the app changes. The "last updated" date at the top always reflects the current version, and we will notify you in the app before any material change takes effect.
12. Contact
Questions about this policy, or about your data: support@matlog.app.