Back to Home

Privacy Policy

Last updated: March 9, 2026

1. Introduction

FLOWPRIMO LLC ("we", "us", "our") operates GrappleKit, a Brazilian Jiu-Jitsu AND Grappling training companion app for iOS and Android. This Privacy Policy explains how we collect, use, and protect your information when you use GrappleKit.

By using GrappleKit, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

2. Information We Collect

2.1 Data Stored Locally on Your Device

GrappleKit stores all user data locally on your device using platform storage (iOS: UserDefaults, Android: DataStore). This includes:

  • Training journal entries (session notes, dates, linked videos)
  • Technique progress tracking (learning status per technique)
  • Timer templates and preferences
  • Playlist configurations
  • Channel subscription preferences
  • Coach dashboard data (schedules, lessons, trainers) for Coach tier users
  • Challenge session history

This data never leaves your device. We do not have access to it, cannot read it, and do not transmit it to any server.

2.2 Data Processed by Third-Party Services

GrappleKit integrates with the following third-party services:

  • YouTube (via our server-side cache): GrappleKit displays BJJ instructional videos from YouTube. Video metadata (titles, thumbnails, channel names) is cached on our Supabase server to minimize API usage. When you search for videos, your search queries are sent to our server to return relevant results.
  • Apple StoreKit (iOS): Subscription purchases and management are handled entirely by Apple. We do not process or store payment information.
  • Google Play Billing (Android): Subscription purchases and management are handled entirely by Google. We do not process or store payment information. Google's privacy policy applies: https://policies.google.com/privacy
  • Apple Music (iOS, optional): If you grant permission, GrappleKit can play music from your Apple Music library during timer sessions. We do not access your music library data beyond playback.
  • Advertising (Free Tier): If you are using the free version of GrappleKit, we may display advertisements.
  • iOS: Ads may be displayed to free-tier users. Apple's App Tracking Transparency framework applies. You can manage tracking permissions in Settings > Privacy & Security > Tracking.
  • Android: Ads are served through Google AdMob. Google may collect device identifiers (such as the Android Advertising ID) to provide personalized ads. You can opt out of ad personalization in your device settings under Settings > Google > Ads > Opt out of Ads Personalization.
  • We do not use advertising data for any other purpose.

Your use of YouTube content within the App is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and Google's Privacy Policy (https://policies.google.com/privacy). GrappleKit uses YouTube API Services to provide video content.

2.3 Device Permissions

GrappleKit may request the following permissions, all optional:

IOS

  • Camera: To capture photos/videos for your training journal
  • Photo Library: To add photos/videos to journal entries
  • Microphone: To record audio with training videos
  • Apple Music: To play music during timer sessions

Media captured through the app is stored only on your device. We never upload, access, or transmit your photos, videos, or recordings.

Android:

  • Internet: Required for loading video content and processing subscriptions
  • Billing: Required for Google Play in-app purchases
  • Vibrate: Used for timer haptic feedback during training
  • Foreground Service: Required for the training timer to run while the app is in the background
  • Notifications: For timer alerts and reminders

No sensitive permissions (location, contacts, calendar) are requested on either platform.

2.4 Anonymous Analytics Data

To improve the app experience, GrappleKit collects anonymous usage analytics. This data is sent to our Supabase server and includes:

  • App interaction events (e.g. video opened, technique progress updated, playlist modified, channel subscribed)
  • Search queries (the terms you search for to find videos)
  • Subscription events (which product was purchased and whether it succeeded — no payment details)
  • Paywall view events (which screens triggered a subscription prompt)
  • App version, platform (iOS/Android), and content domain (BJJ or Mobility)

This analytics data is completely anonymous. We do not collect or store any user IDs, device IDs, IP addresses, or any other personal identifiers. There is no way to link analytics events to a specific user or device.

3. How We Use Information

We use the limited information available to us solely to:

  • Provide and maintain the video content feed (server-side YouTube cache)
  • Process subscription transactions through Apple (iOS) or Google (Android), no direct access to payment data
  • Improve app performance and fix bugs (anonymized crash reports via Apple/Google, if you opt in through your device settings
  • Understand how the app is used to prioritize features and improvements (anonymous analytics)
  • Return relevant video search results based on your queries

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. The only data that leaves your device is:

  • Network requests to our Supabase server for video metadata and search results (no user identification)
  • Anonymous analytics events sent to our Supabase server (no personal identifiers)
  • Subscription verification with Apple servers (iOS) or Google servers (Android) - handled by the respective platform
  • Playlist sharing data you explicitly choose to export (via share links)
  • Ad requests to advertising networks for free-tier users (Android: Google AdMob)

5. Data Retention and Deletion

Since all personal data is stored locally on your device, you have full control:

  • Delete individual journal entries, playlists, or progress data within the app
  • Delete all app data by uninstalling GrappleKit
  • iOS: Manage subscriptions through Settings > Apple ID > Subscriptions> -
  • Android: Manage subscriptions through Google Play Store > Payments & subscriptions >

Our Supabase server stores publicly available YouTube video metadata and anonymous, aggregated analytics data. Since analytics data contains no personal identifiers, it cannot be attributed to any individual user.

6. Children's Privacy

GrappleKit is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to address the situation.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you (note: we hold no personal data — local data is on your device, analytics are anonymous)
  • Request deletion of your data (delete the app to remove all local data; analytics data is anonymous and cannot be linked to you)
  • Opt out of data collection (we collect no personal data; analytics are anonymous with no identifiers)
  • Data portability (your data is stored locally and accessible to you)

For EU/EEA residents (GDPR): The anonymous analytics data we collect does not constitute personal data under GDPR as it contains no personal identifiers and cannot be linked to any individual. All personal data (journal entries, progress, etc.) remains under your control on your device.

For California residents (CCPA): We do not sell personal information. We do not collect personal information for commercial purposes beyond providing the app's core functionality. The anonymous analytics we collect cannot identify you.

8. Security

We take reasonable measures to protect information. All network communication uses HTTPS encryption. Local data is protected by your device's built-in security features (passcode, biometric authentication, device encryption). Subscription verification uses secure platform frameworks (Apple StoreKit on iOS, Google Play Billing on Android).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of GrappleKit after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

  • Email: support@grapplekit.com
  • Website: grapplekit.com