Privacy Policy

Mr. Jiu Jitsu ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding it. By using the Service, you agree to the practices described here.

Account information: Your name, email address, and hashed password when you register. If you sign in with Google, we receive your name and email from Google.

Training content: Journal entries, session notes, uploaded images and videos, and AI coaching conversations you create within the Service.

Usage data: Token balances, transaction history, and feature usage to operate the billing system and detect abuse.

Payment information: Payment is processed entirely by Stripe. We do not store card numbers or payment details on our servers.

• To provide, operate, and improve the Service
• To personalize AI coaching responses based on your journal entries and training history
• To process token purchases and maintain billing records
• To send account-related emails (verification, password reset, billing receipts)
• To detect and prevent fraud, abuse, or violations of our Terms of Service

We do not sell your personal data or training content to third parties.

We share data with the following third parties solely to operate the Service:

• Anthropic, OpenAI, Google: Your chat messages and journal entries are sent to AI model providers to generate coaching responses. These providers have their own privacy policies and data retention practices.
• Stripe: Processes token purchases. Stripe receives your payment details directly and is subject to its own privacy policy.
• Amazon Web Services (S3): Stores media files (images and videos) you upload to your journal. Files are stored privately and are not publicly accessible.
• Vercel: Hosts the application. Request logs may be retained per Vercel's data retention policy.

We retain your account data and training content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required for legal or billing compliance purposes.

Passwords are stored as bcrypt hashes. Media files are stored in private S3 buckets accessible only through authenticated requests. We use HTTPS for all data in transit. No security system is perfect — please use a strong, unique password.

We use secure, HTTP-only session cookies for authentication. We do not use third-party tracking cookies or advertising cookies.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your journal entries and chat history

To exercise these rights, email support@mrjiujitsu.com.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

Questions or concerns about your privacy? Email us at support@mrjiujitsu.com.