Privacy Policy
Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how you can control it.
Table of Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Data Storage & Security
- Cookies & Tracking
- Your Rights & Controls
- Google Sign-In & Third-Party Data
- Location & Beacon Data
- Children's Privacy
- International Users
- Data Retention
- Changes to This Policy
- Contact & DPO
1 Who We Are
OpenMat is operated by Proscris LLC, a company registered in the State of Florida, United States. We are the data controller for personal information collected through the OpenMat platform at openmat.ai and our mobile applications.
For privacy inquiries, contact our Privacy Team at privacy@openmat.ai.
2 Information We Collect
We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.
2.1 Information You Provide
- Account Registration: First name, email address, @handle, password (hashed), and optionally your full name, date of birth, and location.
- Profile Information: Bio, profile photo, martial arts disciplines, belt/rank, training academies, and lineage.
- Training Data: Session logs, duration, intensity, techniques practiced, drill completions, XP earned, streaks, and notes.
- Community Content: Posts, comments, photos, reactions, and messages you send to other users.
- Payment Information: Billing details are processed and stored by Stripe. We store only the last 4 digits of your card, billing country, and subscription status. We never see your full card number.
- Assessments & Ratings: Belt assessments submitted by coaches, and partner training ratings.
- Gear & Weight Data: Equipment records, weight logs, and training goals you voluntarily enter.
- Support Communications: Any messages you send to our support team.
2.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type and version, screen resolution.
- Usage Analytics: Pages visited, features used, session duration, clicks, scrolls, and navigation patterns.
- IP Address: Used to approximate country/city-level location for analytics and fraud prevention. Not stored long-term.
- Session Data: Session start/end times, engagement scores, idle detection, and error logs.
- Performance Data: Page load times, API response times, and crash reports.
2.3 Information from Third Parties
- Google Sign-In: If you sign in with Google, we receive your name, email, profile picture, and locale from Google. With your explicit consent, we may also receive your general location and birth year to personalize your profile. See Section 8 for details.
- Facebook Login: If you sign in with Facebook, we receive your name, email, and profile picture.
3 How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Create and manage your account | Email, name, handle | Contract |
| Deliver core app features | Training data, disciplines, profile | Contract |
| Process subscription payments | Email, billing info (via Stripe) | Contract |
| Send session reminders & streak alerts | Email, notification preferences | Consent |
| Personalize AI coaching & recommendations | Training history, disciplines, goals | Legitimate Interest |
| Show you nearby training partners (Beacon) | Approximate location (opt-in) | Consent |
| Improve the platform | Aggregated & anonymized usage data | Legitimate Interest |
| Fraud prevention & security | IP address, device fingerprint, login history | Legitimate Interest |
| Respond to support requests | Communications, account data | Contract / Legitimate Interest |
| Comply with legal obligations | As required by applicable law | Legal Obligation |
4 How We Share Your Information
We do not sell your personal information. We share your data only in these limited circumstances:
- Other Users (by your choice): Your profile, posts, training stats, and community content are visible to other OpenMat users based on your privacy settings.
- Your Coach or Academy: If you join an academy on OpenMat, your coach or academy owner can see your attendance, session frequency, and progress data you've made visible to them.
- Service Providers: We share data with trusted third parties who help us operate the platform, including Stripe (payments), n8n Cloud (workflow automation), hosting/CDN providers, and email delivery providers. All service providers are bound by data processing agreements.
- Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, we will notify you before your data is transferred.
- With Your Consent: We may share your information for any other purpose with your explicit consent.
5 Data Storage & Security
Your data is stored on servers located in the United States. We implement industry-standard security measures including HTTPS/TLS encryption, bcrypt-hashed passwords, access controls, and regular security reviews.
6 Cookies & Tracking
| Type | Purpose | Can You Opt Out? |
|---|---|---|
| localStorage | App state, preferences, training data | No (essential) |
| sessionStorage | Temporary session identifiers | No (resets on close) |
| Session Analytics | Anonymous usage metrics | Yes (contact us) |
| IP Geolocation | Country/city-level analytics via ipapi.co | Yes (VPN or contact us) |
We do not use third-party advertising cookies or cross-site tracking technologies.
7 Your Rights & Controls
Rights available to all users:
- Access: Request a copy of your personal data via Settings β Export Data, or email privacy@openmat.ai.
- Correction: Update your profile and preferences directly in the app.
- Deletion: Delete your account via Settings β Delete Account. Processing takes up to 30 days.
- Data Portability: Export your training data as a JSON file.
- Notification Opt-Out: Manage all preferences in Settings β Notifications.
Additional rights for EU/EEA residents (GDPR): Right to restrict processing, right to object, right to lodge a complaint with your local data protection authority.
Additional rights for California residents (CCPA): Right to know, right to opt out of sale (we do not sell data), right to non-discrimination.
8 Google Sign-In & Third-Party Data
When you sign in with Google, OpenMat requests access to specific data through Google's OAuth system:
| Scope | Data Accessed | How We Use It |
|---|---|---|
| profile | Full name, first name, last name, profile picture | Pre-fills your OpenMat profile and avatar |
| Email address | Account identification and communications | |
| user.birthday.read | Birth year, month, day (optional) | Age note in bio β never stored without consent |
| user.addresses.read | City and country (if available) | Location note in bio; helps Beacon suggest nearby partners |
9 Location & Beacon Data
The OpenMat Beacon feature is entirely opt-in. We use approximate IP-based location (city level) β not precise GPS. Your exact address is never shared with other users. Beacon data is not stored after your session ends.
10 Children's Privacy
OpenMat is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users 13β17 may use OpenMat with parental consent.
11 International Users
OpenMat is operated from the United States. If you access the platform from outside the US, your data will be transferred to and processed in the United States. For EU/EEA users we rely on Standard Contractual Clauses (SCCs). We also comply with UK GDPR, Brazil's LGPD, and Canada's PIPEDA to the extent applicable.
12 Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Until account deletion + 30 days |
| Training logs & session data | Until account deletion + 30 days |
| Community posts & photos | Until deleted by user or account deletion + 30 days |
| Payment & billing records | 7 years (legal / tax requirement) |
| Support communications | 3 years from last contact |
| Session analytics (anonymized) | 24 months, then permanently anonymized |
| IP address logs | 90 days maximum |
| Beacon data | Session duration only β not persisted |
| Google OAuth tokens | Not stored β used only at sign-in |
| Google profile picture (avatar) | Until you change/remove it or delete your account |
13 Changes to This Policy
When we make material changes we will post the updated policy, display an in-app notification, and for significant changes send an email at least 14 days before the effective date. Continued use after that date constitutes acceptance.
14 Contact & Data Protection Officer
| Privacy Requests | privacy@openmat.ai |
| Security Issues | security@openmat.ai |
| General Contact | support@openmat.ai |
| Legal / DPO | legal@openmat.ai |
| Company | Proscris LLC, State of Florida, USA |
| Website | openmat.ai |
We aim to respond to all privacy inquiries within 30 days. For urgent security matters, within 72 hours.
Questions about your privacy?
Our privacy team is here to help with any data requests or concerns.
π Email Privacy TeamTerms of Service
Please read these terms carefully before using OpenMat. By accessing or using our platform, you agree to be bound by these terms.
Table of Contents
1 Acceptance of Terms
By creating an account, accessing, or using the OpenMat platform (the "Service"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree to these Terms, do not use the Service.
These Terms constitute a legally binding agreement between you and Proscris LLC ("OpenMat," "we," "us," or "our"), a Florida limited liability company.
2 Eligibility
- You must be at least 13 years old to use OpenMat.
- Users between 13β17 must have verifiable parental or guardian consent.
- You must be able to form a legally binding contract in your jurisdiction.
- You may not use the Service if you have previously been banned or removed from the platform.
- By using the Service you represent that all information you provide is accurate and truthful.
3 Your Account
- You are responsible for maintaining the confidentiality of your login credentials.
- You are responsible for all activity that occurs under your account.
- You must notify us immediately at security@openmat.ai of any unauthorized use of your account.
- You may not create accounts using automated means or under false pretenses.
- Your @handle is unique and permanent β choose carefully as it cannot be changed after 30 days.
- We reserve the right to reclaim handles that are inactive, misleading, or in violation of these Terms.
4 Acceptable Use
You agree not to:
- Use the Service for any unlawful purpose or in violation of any regulations.
- Harass, bully, threaten, intimidate, or discriminate against any user.
- Post false, misleading, or fraudulent content including fake belt ranks or credentials.
- Impersonate any person, athlete, coach, or organization.
- Scrape, crawl, or collect data from the Service without written permission.
- Attempt to gain unauthorized access to any system, account, or data.
- Upload or transmit malware, viruses, or any malicious code.
- Interfere with or disrupt the integrity or performance of the Service.
- Use the Service to send unsolicited commercial messages (spam).
- Engage in or promote dangerous, illegal, or harmful fighting activities.
- Sell, trade, or transfer your account to another person.
5 User Content
You retain ownership of all content you post ("User Content"). By posting User Content, you grant OpenMat a non-exclusive, royalty-free, worldwide, sublicensable license to use, display, reproduce, and distribute your User Content solely for the purpose of operating and improving the Service.
- You are solely responsible for your User Content and its accuracy.
- User Content must not infringe any third-party intellectual property rights.
- We may remove any User Content that violates these Terms without notice.
- Training data you log (sessions, XP, streaks) belongs to you and can be exported at any time.
6 Subscriptions & Payments
OpenMat offers a free tier (Student) and paid subscription plans (Coach at $19/mo, Academy Owner at $49/mo). Payments are processed by Stripe.
- Subscriptions renew automatically until cancelled.
- You may cancel at any time from Settings β Subscription. Cancellation takes effect at the end of the current billing period.
- Refunds are not generally provided for partial billing periods, but we will evaluate requests on a case-by-case basis. Contact support@openmat.ai.
- Prices are in USD and subject to change with 30 days' notice.
- Founding Member pricing is locked for the life of the subscription while active.
- Mat Points purchased are non-refundable and non-transferable.
- We reserve the right to suspend access for non-payment.
7 Intellectual Property
The OpenMat platform, including its design, code, logos, trademarks, and content created by us, is owned by Proscris LLC and protected by copyright, trademark, and other intellectual property laws.
- You may not copy, modify, distribute, sell, or lease any part of the Service without written permission.
- "OpenMat" and the OpenMat yin-yang logo are trademarks of Proscris LLC.
- The Sensei AI coaching system, XP/belt progression system, and Beacon feature are proprietary to OpenMat.
- All martial arts technique content provided by OpenMat is for personal use only and may not be redistributed commercially.
8 Physical Activity Disclaimer
- Always consult a licensed medical professional before beginning any martial arts program.
- Train only under the supervision of a qualified, certified instructor.
- Never train through injuries β rest and seek medical attention as needed.
- Children under 18 must have parental or guardian consent to participate in training.
- OpenMat is not responsible for any injuries, health complications, or damages resulting from activities logged, suggested, or inspired by the platform.
- Training timer and drill features are tools only β they do not guarantee safe training outcomes.
9 Disclaimer of Warranties
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR UNINTERRUPTED ACCESS.
We do not warrant that the Service will be error-free, virus-free, or that defects will be corrected. We do not warrant the accuracy, completeness, or usefulness of any information provided through the Service.
10 Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, PROSCRIS LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR:
- Any indirect, incidental, special, consequential, or punitive damages.
- Loss of profits, data, goodwill, or other intangible losses.
- Physical injury or property damage resulting from your use of the Service.
- Unauthorized access to or alteration of your data.
- Any other matters relating to the Service.
OUR TOTAL LIABILITY TO YOU FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) $100 USD.
11 Indemnification
You agree to defend, indemnify, and hold harmless Proscris LLC and its officers, directors, employees, contractors, and agents from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from:
- Your use of the Service.
- Your User Content.
- Your violation of these Terms.
- Your violation of any third-party rights.
- Any physical injury or property damage caused by your training activities.
12 Termination
We may terminate or suspend your account and access to the Service at any time, with or without notice, for:
- Violation of these Terms.
- Conduct we determine to be harmful to other users, us, or the community.
- Extended inactivity (accounts inactive for more than 2 years may be deactivated with 30 days' notice).
- Failure to pay applicable fees.
You may delete your account at any time from Settings β Delete Account. Upon deletion, your personal data will be removed within 30 days, subject to legal retention requirements outlined in our Privacy Policy.
13 Governing Law & Disputes
These Terms are governed by the laws of the State of Florida, United States, without regard to conflict of law principles.
Informal Resolution: Before filing any formal dispute, you agree to first contact us at legal@openmat.ai and attempt to resolve the issue informally within 30 days.
Binding Arbitration: If informal resolution fails, disputes shall be resolved by binding arbitration under the rules of the American Arbitration Association (AAA), conducted in English in Florida, USA. Class action lawsuits and class-wide arbitration are waived.
Small Claims Exception: Either party may bring qualifying claims in small claims court instead of arbitration.
14 Changes to Terms
We may update these Terms at any time. For material changes, we will provide at least 14 days' notice via in-app notification and email before the new terms take effect. Continued use of the Service after that date constitutes acceptance of the updated Terms.
15 Contact
| General Legal | legal@openmat.ai |
| Support | support@openmat.ai |
| Company | Proscris LLC, State of Florida, USA |
| Website | openmat.ai |
Questions about our Terms?
Contact our legal team for any questions about these Terms of Service.
βοΈ Email Legal TeamCookie Policy
This policy explains how OpenMat uses cookies and similar storage technologies, and what choices you have.
1 What Are Cookies?
Cookies are small text files stored on your device. OpenMat primarily uses browser storage technologies (localStorage and sessionStorage) rather than traditional cookies, as we operate as a Progressive Web App (PWA).
2 What We Use
| Technology | Name / Prefix | Purpose | Duration | Essential? |
|---|---|---|---|---|
| localStorage | openmat_* | Saves your account, training data, preferences, theme, and app state so you don't lose progress | Until cleared | Yes |
| sessionStorage | openmat_analytics_* | Temporary session identifier for anonymous usage analytics | Browser session | No |
| sessionStorage | openmat_google_pending | Saves onboarding state during Google OAuth redirect so data isn't lost mid-flow | Browser session | Yes (for Google login) |
| IP Geolocation | ipapi.co request | Approximates your country/city for session analytics and Beacon distance calculations | Request only β not stored | No |
3 What We Don't Use
- Third-party advertising cookies or pixels.
- Cross-site tracking technologies.
- Social media tracking (Facebook Pixel, Twitter/X Pixel, etc.).
- Fingerprinting technologies for identification.
- Google Analytics, Mixpanel, or other external analytics platforms (we use our own session tracking webhooks).
4 Your Choices
- Clear storage: You can clear all OpenMat data from your browser settings β Application β Local Storage. Note this will log you out and reset the app.
- Opt out of analytics: Email privacy@openmat.ai to opt out of session analytics tracking.
- Use a VPN: To prevent IP geolocation approximation.
- Cookie banner: Accept or reject non-essential cookies via the banner shown on first visit.
5 Contact
Questions about cookies? Email privacy@openmat.ai.
Accessibility Statement
OpenMat is committed to making our platform accessible to everyone, including people with disabilities.
1 Our Commitment
Proscris LLC is committed to ensuring digital accessibility for people with disabilities. We continually improve the user experience for everyone and apply relevant accessibility standards.
2 Conformance Status
OpenMat is partially conformant with WCAG 2.2 Level AA. Partially conformant means that some parts of the content do not fully conform to the accessibility standard. We are actively working to address all known issues.
Current accessibility features implemented:
- Skip navigation link on all app pages.
- All interactive elements have descriptive ARIA labels.
- Keyboard navigation support throughout the app.
- Focus-visible styles on all focusable elements (3px solid accent color).
- Minimum touch target size of 44Γ44px on all buttons.
- Color contrast ratios meeting WCAG AA requirements for all text.
- Semantic HTML with proper heading hierarchy (h1 β h2 β h3).
- All images have descriptive alt text or aria-hidden for decorative images.
- ARIA live regions for toast notifications and dynamic content.
- Form labels explicitly associated with all inputs.
- Dark mode with appropriate contrast ratios in both themes.
- No auto-playing media or animations that can't be paused.
- Screen reader compatible navigation and page structure.
3 Known Limitations
We are aware of the following areas being actively improved:
- Some complex data tables may need additional ARIA descriptions for screen reader users.
- The Beacon map feature may have reduced keyboard navigability β a text-based alternative is in development.
- Some animation-heavy transitions may affect users with vestibular disorders β a reduced motion setting is planned.
4 Technical Specifications
OpenMat is built with the following technologies that support accessibility:
- HTML5 semantic elements.
- CSS (custom properties, responsive design with rem units).
- JavaScript (keyboard event handling, focus management).
- WAI-ARIA 1.2 roles, states, and properties.
- Progressive Web App (PWA) with full offline support.
5 Feedback & Contact
We welcome your feedback on the accessibility of OpenMat. If you experience accessibility barriers, please contact us:
| accessibility@openmat.ai | |
| Response time | Within 5 business days |
| General support | support@openmat.ai |
We take all accessibility feedback seriously and will work to resolve reported issues as quickly as possible.
6 Formal Complaints
If you are not satisfied with our response to your accessibility feedback, you may contact your country's relevant enforcement body:
- United States: US Department of Justice Civil Rights Division
- European Union: Your national disability rights authority
- United Kingdom: Equality and Human Rights Commission (EHRC)
Disclaimer
Important limitations on OpenMat's liability and the scope of information provided on this platform.
1 Physical Activity & Health
- OpenMat provides training tracking tools and educational content only. We are not a licensed medical provider, personal trainer, or sports medicine professional.
- Nothing on this platform constitutes medical advice, fitness advice, or a guarantee of any health outcome.
- Always consult a physician before beginning any new exercise program.
- Always train under the supervision of a qualified, licensed instructor.
- OpenMat is not liable for any injury, illness, death, or property damage arising from training activities.
2 Training Information Accuracy
- Technique descriptions, belt requirements, and training guides are provided for general informational purposes only.
- Martial arts standards vary between academies, instructors, and governing bodies. Information on this platform may not reflect your specific academy's requirements.
- The Belt Estimator tool provides estimates only based on general data β it is not a guarantee of promotion or official assessment.
- XP and rank progression in the app are gamification elements and do not replace formal belt promotions by qualified instructors.
3 AI Coaching (Sensei AI)
- Sensei AI responses are generated by AI and may contain errors or outdated information.
- Never follow AI training advice without validating it with your coach or instructor.
- Sensei AI is not qualified to provide medical, legal, or professional advice of any kind.
4 External Links
OpenMat may link to third-party websites, academies, or resources. We are not responsible for the content, accuracy, or practices of any third-party sites. Links do not constitute endorsement.
5 No Endorsement of Academies
Listing an academy on OpenMat does not constitute endorsement of that academy, its instructors, or its teaching methods. Conduct your own due diligence before joining any martial arts school.
6 Affiliate & Partnership Disclosures
OpenMat may have sponsorship or partnership relationships with martial arts brands, equipment companies, or events. Where applicable, sponsored content will be clearly labeled as such. We only promote products and partners we believe provide genuine value to our community.
Questions about our disclaimer?
Contact our legal team for any specific concerns.
β οΈ Email Legal TeamData Deletion Request
You have the right to request deletion of your personal data. Here's exactly how to do it and what happens when you do.
1 How to Delete Your Data
Option A β In the App (fastest):
- Open OpenMat and go to your Account.
- Tap Settings β Account Settings β Delete Account.
- Confirm your deletion request. Your account will be queued for deletion immediately.
Option B β Email Request:
- Email privacy@openmat.ai with subject line: "Data Deletion Request β [your @handle or email]"
- Include the email address associated with your account.
- We will verify your identity and confirm deletion within 5 business days.
- Full deletion completes within 30 days of verification.
Option C β Google Sign-In Users:
If you signed in via Google, you can also revoke OpenMat's access to your Google account at myaccount.google.com/permissions. This does not delete your OpenMat data β you must also use Option A or B above.
2 What Gets Deleted
| Data | Deleted? | Timeline |
|---|---|---|
| Account & login credentials | β Yes | Within 30 days |
| Profile information (name, bio, avatar) | β Yes | Within 30 days |
| Training logs & session data | β Yes | Within 30 days |
| Community posts & photos | β Yes | Within 30 days |
| Messages & chat history | β Yes | Within 30 days |
| XP, points, achievements, streaks | β Yes | Within 30 days |
| Weight logs & gear tracker data | β Yes | Within 30 days |
| Local device data (localStorage) | β Yes (device-side) | Immediately on account deletion via app |
| Payment billing records | β οΈ Partial | Retained 7 years (legal requirement). Card details held by Stripe. |
| Anonymized aggregate analytics | β οΈ Partial | Anonymous data may be retained β it cannot be linked back to you |
| Support email threads | β οΈ Partial | Retained up to 3 years for legal/compliance |
3 Before You Delete β Export Your Data
We strongly recommend exporting your training data before deleting your account. You can download everything as a JSON file:
- In the app: Settings β Export Data β Download JSON
- Via email request: privacy@openmat.ai β we'll send you a download link within 5 days
Your export includes all session logs, XP history, achievements, weight logs, gear records, and profile data.
4 Effect of Deletion
- Your @handle will be permanently released and may be claimed by another user after 90 days.
- Your Founding Member status cannot be recovered after deletion.
- Any Mat Points balance will be forfeited β they cannot be refunded.
- Active subscriptions will be cancelled at the end of the current billing period.
- Deletion is permanent and irreversible β data cannot be recovered after processing.
Ready to delete your data?
Email our privacy team to submit your deletion request.
ποΈ Submit Deletion RequestGDPR Privacy Notice
This notice is for users in the European Union, European Economic Area, and United Kingdom, detailing our compliance with the General Data Protection Regulation.
1 Data Controller
| Data Controller | Proscris LLC |
| Registered in | State of Florida, United States |
| DPO / Privacy Contact | privacy@openmat.ai |
| Legal Contact | legal@openmat.ai |
We have appointed a designated privacy contact responsible for overseeing data protection compliance. While we are not legally required to appoint a formal Data Protection Officer (DPO) given our current size, our privacy team fulfills this role.
2 Legal Bases for Processing
Under GDPR Article 6, we process your personal data under the following legal bases:
| Processing Activity | Legal Basis | GDPR Article |
|---|---|---|
| Account creation and management | Performance of a contract | Art. 6(1)(b) |
| Providing app features and services | Performance of a contract | Art. 6(1)(b) |
| Payment processing | Performance of a contract | Art. 6(1)(b) |
| Beacon / location features | Consent | Art. 6(1)(a) |
| Marketing communications | Consent | Art. 6(1)(a) |
| Service improvement & analytics | Legitimate interests | Art. 6(1)(f) |
| Fraud prevention & security | Legitimate interests | Art. 6(1)(f) |
| Legal compliance | Legal obligation | Art. 6(1)(c) |
| Special category data (if any) | Explicit consent | Art. 9(2)(a) |
3 International Data Transfers
As a US-based company, your data is transferred to and processed in the United States, which may not have the same level of data protection as the EU/EEA.
We protect these transfers using:
- Standard Contractual Clauses (SCCs): Approved by the European Commission for transfers to third countries.
- Data Processing Agreements: In place with all sub-processors (Stripe, n8n, hosting providers).
You may request a copy of the SCCs we use by emailing legal@openmat.ai.
4 Your GDPR Rights
Under GDPR, you have the following rights which you can exercise at any time:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access (Art. 15) | Obtain a copy of all personal data we hold about you | Settings β Export Data, or email privacy@openmat.ai |
| Right to Rectification (Art. 16) | Correct inaccurate or incomplete personal data | Update directly in app settings |
| Right to Erasure (Art. 17) | "Right to be forgotten" β deletion of your personal data | Settings β Delete Account, or email privacy@openmat.ai |
| Right to Restrict Processing (Art. 18) | Limit how we process your data in certain circumstances | Email privacy@openmat.ai |
| Right to Data Portability (Art. 20) | Receive your data in a structured, machine-readable format (JSON) | Settings β Export Data |
| Right to Object (Art. 21) | Object to processing based on legitimate interests | Email privacy@openmat.ai |
| Right to Withdraw Consent (Art. 7) | Withdraw any consent you have given at any time | App settings or email privacy@openmat.ai |
5 Right to Lodge a Complaint
If you believe we have not handled your personal data in compliance with GDPR, you have the right to lodge a complaint with your local supervisory authority:
- Ireland: Data Protection Commission (DPC) β dataprotection.ie
- Germany: Your state's (LΓ€nder) data protection authority
- France: Commission nationale de l'informatique et des libertΓ©s (CNIL) β cnil.fr
- UK: Information Commissioner's Office (ICO) β ico.org.uk
- Other EU/EEA: Your national data protection authority
We encourage you to contact us first at privacy@openmat.ai so we can try to resolve your concern directly.
6 Data Retention
We retain your personal data only for as long as necessary for the purposes described in our Privacy Policy, or as required by law. See Section 12 of our Privacy Policy for a detailed retention schedule.
GDPR questions or rights requests?
Our privacy team handles all EU/UK data protection matters.
πͺπΊ Email Privacy TeamCalifornia Privacy Notice
This notice is for California residents and describes your rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
1 Categories of Personal Information We Collect
In the preceding 12 months, we have collected the following categories of personal information from California consumers:
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email, IP address, @handle, device ID | β Yes |
| Personal information (Cal. Civ. Code Β§1798.80) | Name, email address | β Yes |
| Protected classification characteristics | Age (if provided via Google), gender (if provided) | β Yes (optional) |
| Commercial information | Subscription plan, Mat Points balance, purchase history | β Yes |
| Internet/network activity | Pages visited, features used, session data, clicks | β Yes |
| Geolocation data | City/country level approximation from IP address | β Yes (approximate) |
| Audio, visual, or electronic data | Profile photos uploaded by user | β Yes (user-provided) |
| Professional/employment information | Martial arts rank, academy affiliation (user-provided) | β Yes |
| Inferences drawn from above | Training preferences, engagement level, discipline focus | β Yes |
| Sensitive personal information | Precise geolocation, health/fitness data (training logs) | β οΈ Limited (see below) |
| Financial information | Payment processed by Stripe only β we see last 4 digits only | β οΈ Limited |
| Biometric data | None | β No |
| Education information | None | β No |
2 Sources of Personal Information
- Directly from you: Account registration, profile setup, training logs, community content.
- Automatically: Device information, usage analytics, IP address, session data.
- Third parties: Google (if you use Google Sign-In), Stripe (payment confirmation).
3 Business Purposes for Collection
We collect personal information for the following business purposes:
- Providing and improving the OpenMat platform.
- Processing subscriptions and payments.
- Personalizing your training experience and AI coaching.
- Enabling the Beacon partner-finding feature.
- Sending training reminders and streak alerts (with consent).
- Fraud prevention, security, and legal compliance.
- Conducting analytics to improve our services.
- Responding to support requests.
4 Sale or Sharing of Personal Information
We do not "share" personal information with third parties for cross-context behavioral advertising as defined under CPRA.
We disclose personal information to service providers (Stripe, n8n, hosting providers) solely for business purposes under written data processing agreements that prohibit them from using the data for any other purpose.
5 Your California Privacy Rights
| Right | Description |
|---|---|
| Right to Know | Request disclosure of what personal information we collect, use, disclose, and sell about you. Covers the prior 12 months. |
| Right to Delete | Request deletion of personal information we have collected from you, subject to certain exceptions. |
| Right to Correct | Request correction of inaccurate personal information we maintain about you. |
| Right to Opt Out of Sale/Sharing | Opt out of the sale or sharing of your personal information. (We do not sell or share data β this right is not applicable but we honor it regardless.) |
| Right to Limit Sensitive PI Use | Limit our use and disclosure of sensitive personal information to what is necessary to provide the requested service. |
| Right to Non-Discrimination | We will not discriminate against you for exercising your CCPA rights β no denial of service, different pricing, or different quality of service. |
6 Authorized Agents
You may designate an authorized agent to make a CCPA request on your behalf. Authorized agents must provide proof of your written permission and may be required to verify their own identity. Contact privacy@openmat.ai with subject "CCPA Authorized Agent Request" and include both your identity verification and the agent's authorization documentation.
7 Shine the Light
California Civil Code Section 1798.83 ("Shine the Light") permits California residents to request certain information about our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for direct marketing purposes. If you have questions, email privacy@openmat.ai.
8 Do Not Track
California law requires us to disclose how we respond to "Do Not Track" (DNT) signals. Currently, OpenMat does not alter its data collection practices in response to DNT signals because there is no universally accepted standard for what constitutes a DNT signal. We do not sell your data regardless of DNT status.
California privacy rights?
Submit your CCPA request to our privacy team β we respond within 45 days.
ποΈ Submit CCPA Request