Privacy Policy

Information you provide:

• Email address (for account creation and authentication)
• Password (stored as a secure hash; we never see your actual password)
• Payment information (processed and stored by Stripe; we do not see or store card details)

Information collected automatically:

• Usage data: which roadmaps you view, your progress on techniques, when you access the Service
• Technical data: IP address, browser type, device information, approximate location derived from IP
• Cookies and similar technologies for authentication and session management

Information from third-party login providers:

• If you sign in with Google, we receive your email address and basic profile information from Google

We use your information to:

• Provide and operate the Service (authentication, tracking your progress, delivering content)
• Process payments and manage subscriptions
• Communicate with you about your account or the Service
• Improve and develop the Service
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

We do not sell your personal information.

We process your information under the following legal bases:

• Performance of a contract: to deliver the Service you signed up for
• Legitimate interests: to operate, secure, and improve the Service
• Consent: for any optional features you opt into
• Legal obligation: where required by law

We use the following third parties to operate the Service. They process your data on our behalf under their own privacy terms:

• Supabase: authentication and database (data stored in their secure infrastructure)
• Stripe: payment processing
• Vercel: application hosting
• Anthropic: AI features, where used
• Google: optional sign-in

We choose providers that meet recognized data protection standards.

Your data may be processed and stored outside Brazil, including in the United States and Europe, where our service providers operate. We rely on contractual safeguards and recognized transfer mechanisms (such as Standard Contractual Clauses) to protect your data.

We retain your data for as long as your account is active. If you close your account, we delete or anonymize your personal data within 90 days, except where we are required to retain it longer for legal, tax, or fraud-prevention reasons.

Under LGPD, GDPR, and other applicable laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at support@encyclopediaofjiujitsu.com. We will respond within 30 days.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encrypted storage, hashed passwords, and access controls on production systems. No system is 100% secure; we do our best, but cannot guarantee absolute security.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, contact us and we will delete it.

We use cookies and similar technologies for:

• Authentication (keeping you logged in)
• Session management
• Basic analytics about how the Service is used

You can control cookies through your browser settings. Disabling them may break parts of the Service.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service before taking effect.