Privacy Policy

Last updated: March 27, 2026

The Guard BJJ ("we", "our", or "the app") is a Brazilian Jiu-Jitsu training tracker developed by Luis Braga. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information: When you create an account, we collect your email address, display name, and belt rank. If you sign in with Apple, we receive the identifiers Apple provides (which may include a private relay email).

Training data: Training sessions you log, including date, duration, type, notes, heart rate, and calories burned. This data is stored locally on your device and optionally synced to our servers if you choose to create an account.

Health data: With your explicit permission, we read and write workout data from Apple Health (HealthKit). We access heart rate, active energy burned, and workout sessions. We never share HealthKit data with third parties or use it for advertising.

Photos: If you attach photos to training sessions, they are stored locally on your device and optionally synced to our secure cloud storage. We do not access your photo library without your permission.

Heart rate monitor: If you connect a Bluetooth heart rate monitor, we read real-time heart rate data during your training session. This data is processed locally and not sent to any third party.

2. How We Use Your Data

To provide and improve the training tracking experience
To display your training history, statistics, and progress
To sync your data across devices (if you opt in by creating an account)
To save workouts to Apple Health (with your permission)
To process your subscription purchases

3. Data Storage and Security

Your training data is stored locally on your device using secure on-device storage. If you create an account, data is synced to our servers hosted on secure infrastructure (Render) with a PostgreSQL database (Neon). Photos are stored on Cloudflare R2 with access-controlled URLs.

Authentication tokens are stored in your device's Keychain, the most secure storage available on iOS.

4. Third-Party Services

Sentry — crash reporting and error tracking. We do not send personally identifiable information (PII) to Sentry. Only anonymous crash data and stack traces are collected to help us fix bugs.
Apple (StoreKit) — subscription payment processing. We do not have access to your payment details; Apple handles all transactions.
Apple (HealthKit) — health data integration, only with your explicit consent.
Sign in with Apple — authentication. We only receive the identifiers Apple provides.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. We do not use your data for tracking across apps or websites.

6. Your Rights

Access: You can view all your data within the app.
Export: You can export your training history as CSV or PDF.
Deletion: You can delete your account and all associated data from within the app. This permanently removes all your data from our servers, local storage, and caches. See how to delete your account for step-by-step instructions and an email-based option.
Revoke permissions: You can revoke HealthKit, Bluetooth, or photo access at any time in iOS Settings.

7. Children's Privacy

The app is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by updating the date at the top of this page.

9. Contact

If you have questions about this privacy policy or your data, contact us at:

hello@theguardbjj.app