Privacy Policy

Last Updated: 20.2.2025

Introduction

Welcome to the Privacy Policy for the Strength & Conditioning AI Program Generator tailored for BJJ (Brazilian Jiu-Jitsu) athletes. This service provides personalized training programs using artificial intelligence. We are committed to protecting your privacy and ensuring that any personal information you provide is handled responsibly. This policy explains what data we collect, how we use and protect it, and your rights regarding your information. By using our service, you agree to the practices described in this Privacy Policy.

Data Collection & Use

We collect personal data that you provide directly to us, as well as data that may be generated through your use of the service. The types of information we collect and how we use it include:

Personal Information

When you use our program generator, you may provide information such as your name and email address. We use your name to personalize your training program and your email to send you the generated program (for example, as a PDF) or to communicate with you about your training plan. This information is used exclusively for providing you with the service you requested and improving your experience, and will not be shared with third parties. We do not use your personal information for marketing (unless you separately consent to receive a newsletter or updates).

Fitness and Training Data

To generate a customized strength & conditioning program, we collect data you input about your athletic profile and goals. This may include details like your age, weight, training experience, fitness level, any injuries or physical limitations, and your training objectives. We use this information solely to tailor your BJJ conditioning program to your needs. For example, the AI uses these metrics to create workouts that match your skill level and goals. All such data is used only for generating your program and supporting your training progress.

Usage Data (Analytics)

We currently do not collect detailed analytics data about how you use the program generator. However, in the future, we may incorporate usage analytics tools (such as Google Analytics or similar) to help us understand service usage and improve our platform. This could include data like how often the generator is used, which features are most popular, or aggregate performance statistics. If implemented, any usage data collected will be usage-related only (e.g., pages visited, time spent, interactions) and will not directly identify you. Such data would only be used to enhance the user experience and refine our programs, and we will update this policy to inform you before analytics are enabled. We will also ensure any analytics data is anonymized or aggregated where possible to protect your privacy.

Purpose of Data Use: Any personal and fitness data you provide is used strictly to deliver and improve the service. This includes generating your personalized training program, emailing you the program or related updates you requested, and potentially understanding trends to improve our AI recommendations. We do not use the data for any other purpose. If we ever intend to use your information for a new purpose, we will seek your permission first.

Data Storage

We store your data securely on a third-party cloud service. This means that the information you provide (such as your profile and generated training plans) is saved on cloud servers operated by an external provider, rather than on our physical premises. We choose reputable cloud providers that implement robust security measures to protect user data. All data is stored in encrypted form or within secure systems to prevent unauthorized access.

Our use of a cloud service ensures reliable storage and backup of your information, but it also means your data might be stored in data centers in different regions. Regardless of where the cloud servers are located, we take steps to ensure that your data is handled in compliance with this Privacy Policy and applicable data protection laws. The cloud provider acts only on our instructions and does not access your personal data for their own purposes. In summary, your personal information and training data are securely stored and managed through trusted third-party cloud infrastructure with high levels of protection.

Data Sharing

We do not share, sell, or rent your personal data to any third parties. The information you provide is used exclusively by our service to generate your BJJ training program and communicate it to you. This means we will never disclose your personal details or fitness data to unrelated companies for marketing or any other independent use.

The only instances in which we would ever disclose your data to someone else are the following, and even these are handled with care and within legal requirements:

• Service Providers (Limited Use): We may use trusted third-party services to help us operate the platform or carry out certain functions (for example, an email service to send you the PDF program, or cloud hosting as mentioned above). In such cases, those providers process data on our behalf but are not permitted to use your information for anything other than the specific service we’ve requested. They are bound by confidentiality and security obligations. For example, if we use an email delivery service to send out your training program, your email address will be used by that service solely to send you the email and for no other purpose.
• Legal Requirements: We would only share user data if required to comply with a legal obligation (such as a valid court order or law enforcement request), or to protect our rights, your safety, or the safety of others. If we are ever compelled by law to disclose any of your personal data, we will, if permitted, inform you about the request.

Aside from the above rare circumstances, your data stays within our organization. We do not engage in any form of selling personal information. Your privacy is paramount, and you can rest assured that your personal and training information remains confidential and used only for its intended purpose.

Data Retention

We will retain your personal information only for as long as it is necessary to fulfill the purposes outlined in this policy or as required by law. In practice, this means we keep your data for up to two years from your last interaction with our service. “Last interaction” could be the last time you generated a program, last logged in (if applicable), or last communicated with us, whichever is later. We set this two-year retention period to allow you to return and access your past training programs or reuse the service without losing your data, and to facilitate improvements to our AI with reference to past inputs.

If you remain inactive and do not use the Strength & Conditioning AI Program Generator for over two years, we will consider your account and data to be dormant. At that point, we will either securely delete your personal data from our systems or anonymize it (so it can no longer be linked to you) as part of a regular data cleanup process.

Importantly, you have the right to request deletion of your data at any time (see User Rights below). If you ask us to delete your information, we will erase your personal data from our records, and will only retain whatever is necessary to comply with legal obligations or resolve disputes. Outside of those legal obligations, a deletion request means we will remove your identifiable information from our production databases and backups within a reasonable period.

Please note that even after we delete your data, it may persist in secure backups for a short duration (due to how backups work), but if so it will remain protected until those backups are routinely destroyed. Rest assured, we will not keep your data longer than needed. Our default policy is: retain for two years, or delete upon user request, whichever comes first.

Security Measures

We take the security of your personal data seriously and employ industry-standard practices to protect it. We have implemented a variety of technical and organizational measures designed to safeguard your information from unauthorized access, disclosure, alteration, or destruction. These security measures include, but are not limited to:

• Encryption: We use encryption to protect your data both in transit and at rest. This means that when your data is sent to our cloud servers (for example, when you submit your information to get a training program), it is encrypted via HTTPS/SSL so that it cannot be eavesdropped on. Similarly, our databases use encryption or other protective measures to ensure your information is not readable by anyone without proper authorization.
• Access Controls: We restrict access to personal data to authorized personnel who need it to operate or improve the service. Our team members and any service providers are only given the minimum access necessary. Strong authentication methods (such as passwords and possibly two-factor authentication) are in place for any systems that handle personal information. By limiting who can access your data and implementing permission levels, we reduce the risk of unauthorized disclosure.
• Secure Storage Practices: As noted, your data is stored on secure third-party cloud servers with robust security protocols. These data centers typically employ multi-layered security (both physical and electronic) to protect data. We take care to choose cloud infrastructure that complies with high security standards (for example, ISO 27001 or SOC 2 certified data centers).
• Regular Monitoring and Updates: We continuously monitor our systems for vulnerabilities and attacks. Security patches and software updates are applied regularly to keep our environment up-to-date against threats. We also conduct periodic security assessments or reviews of our practices to ensure that your data remains safe over time.
• Anonymization & Minimization: Wherever possible, we minimize the amount of personal data we store. For instance, if detailed personal information is not required for our service, we won’t collect it. In any future analytics, we aim to analyze data in aggregate form. By collecting only what we need and by anonymizing data when feasible, we limit the impact of any potential data incident.
• Training and Policies: We ensure that anyone on our team who handles personal data is trained in privacy and security best practices. We have internal policies in place to prevent unauthorized access or sharing of user data.

No method of transmission over the internet or method of electronic storage is 100% secure. While we cannot guarantee absolute security, we follow best practices and take all reasonable measures to protect your personal information. If there is ever a security breach that affects your personal data, we will notify you and the appropriate authorities as required by law.

User Rights

We respect your rights to control your personal data. Depending on your jurisdiction, including the European Union (GDPR) and California (CCPA), you have various rights regarding the personal information we hold about you. We are committed to honoring these rights and have processes in place for you to exercise them. These rights include, but are not limited to, the following:

• Right to Be Informed: You have the right to know what personal data we collect and why, as we are informing you through this Privacy Policy. This policy aims to provide transparency about how your data is used.
• Right of Access / Right to Know: You have the right to request a copy of the personal information we hold about you. Under GDPR this is known as a Subject Access Request, and under CCPA it is called the right to know. Upon verification of your identity, we will provide you with a summary of the data we have about you, including the categories of data, sources, purposes for collection, and any parties with whom it has been shared (which, as noted, we generally do not do).
• Right to Rectification / Correction: If any of your information is incorrect or has changed, you have the right to ask us to correct or update it. We encourage you to keep your information up-to-date and will make corrections promptly upon request.
• Right to Erasure / Deletion (“Right to be Forgotten”): You may request that we delete your personal data. Under GDPR, we must comply with this request unless we have a specific legal reason to retain the data. Under CCPA, you can similarly ask that we delete the personal information we have collected from you (with certain exceptions allowed by law). As noted in the Data Retention section, we will remove your data from our systems when you ask, provided we are not required to keep it for legal reasons. This deletion is permanent and your data will not be recoverable, so please be certain when making such a request.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances. For example, if you contest the accuracy of the data or object to our use of it, you can ask us to restrict processing while your concern is being resolved. During the restriction period, we can store the data but not use it for anything other than addressing your request.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another service provider (where technically feasible). In plain terms, you can ask us to give you a copy of the key information you’ve provided to us so you can reuse it elsewhere. For example, if you want to port your fitness profile to another app, we will provide your data in a usable format upon request.
• Right to Object / Opt-Out: You have the right to object to certain types of processing of your personal data. For instance, you can object to receiving promotional emails (if we were sending any) or to any processing based on our legitimate interests. If we were to use your data for direct marketing, you could opt out at any time and we would stop. Under CCPA, this also includes the right to opt-out of the sale of your personal information. We want to emphasize that we do not sell your personal data. However, if you are a California resident, you have the legal right to direct us not to sell your information should that ever change. We honor opt-out requests and have mechanisms to ensure your data is excluded from any sale or sharing if that policy were to ever arise.
• Right to Withdraw Consent: In cases where we rely on your consent to process data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the legality of any processing we carried out prior to your withdrawal. If you withdraw consent for a service that requires it, we will no longer be able to provide that service to you.
• Right to Non-Discrimination: If you exercise any of the above rights, especially under laws like the CCPA, we will not discriminate against you. This means we won’t deny you the service, charge you a different price, or provide a lesser quality of service because you exercised your privacy rights.

To exercise any of your rights, please contact us using the contact information provided in the Contact Information section below. We may need to verify your identity before fulfilling certain requests to ensure that we do not release or delete data to the wrong person. Verification might involve confirming your email address or other details we have on file. We will respond to your request as soon as possible and at most within the timeframe required by applicable law.

Please note that some rights (such as the right to deletion or portability) may have exceptions under the law. If we cannot comply with a request for a legitimate reason, we will explain the reason to you. For instance, if you request deletion but we are required by law to keep certain records, we will let you know what we must retain and why.

Overall, we want you to have control over your data. We will do our best to honor your requests and make the process of exercising your rights as straightforward as possible.

Legal Compliance

We operate our services in compliance with applicable data protection laws and regulations. In particular, our data practices are designed to meet the requirements of the European Union’s General Data Protection Regulation (GDPR) and California’s privacy laws, including the California Consumer Privacy Act (CCPA) and its amendments (such as the California Privacy Rights Act, CPRA).

• GDPR (General Data Protection Regulation): For users located in the European Economic Area (EEA) or the United Kingdom, we ensure that your personal data is handled according to the high standards of the GDPR. This includes implementing the principles of transparency, data minimization, purpose limitation, security, and accountability in how we process your data. As a “data controller” under GDPR, we have put in place measures to facilitate your rights and to ensure any processing of your data has a lawful basis. If you are an EU/EEA user, you also have the right to lodge a complaint with a Data Protection Authority in your country if you believe we have violated GDPR, though we encourage you to contact us first so we can address any concerns.
• CCPA/CPRA (California Consumer Privacy Act & California Privacy Rights Act):For residents of California, we uphold the privacy rights granted by the CCPA and reinforced by the CPRA. Even though, as a business, we do not sell personal information or share it for behavioral advertising, we still provide California users the ability to exercise all applicable rights such as access, deletion, and information about data collection practices. We also honor the required disclosures of these laws through this Privacy Policy. We do not discriminate against users who exercise their CCPA rights, in accordance with California law. If you are a California resident and have questions about this Privacy Policy or your personal data rights under CCPA, you can reach out to us at the contact information below.
• Other Jurisdictions: We strive to respect privacy laws around the world. If you are located in a region with specific privacy regulations (for example, Canada’s PIPEDA, Australia’s Privacy Act, etc.), we will also endeavor to respect those where applicable. Generally, by adhering to GDPR and CCPA standards, we meet or exceed the requirements of most other privacy frameworks. If you have any questions about how we comply with your country or state’s laws, please contact us.

By using our service, you acknowledge that we may process your personal information in accordance with these laws and as described in this policy. In the event of any conflict between this Privacy Policy and a requirement of applicable law, the applicable law will prevail, and we will adjust our practices accordingly.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us. We are here to help and address any issues related to privacy or security. You can reach us at:

Email: miha@matstrong.com

This email is monitored by our privacy team (or the responsible individual/owner of the Strength & Conditioning AI Program Generator). We will respond to inquiries as quickly as possible, generally within a few business days.

Use this contact to:

• Ask questions about the data we have about you or about our privacy practices.
• Request to exercise any of your rights (access, correction, deletion, etc.).
• Provide feedback or report any concerns about data handling.
• Request the deletion of your data or withdraw consent.

We value the trust you place in us by using this service, and we want to ensure you feel comfortable with how your information is handled. If you reach out to us, we may ask for some verification information (to confirm identity) before proceeding with certain requests, especially if it’s related to accessing or deleting personal data, to safeguard against unauthorized requests.

For mailing address or other contact methods, please refer to our website’s contact page or include a note in your email if an alternative contact method is needed. Currently, email is the preferred and fastest way to get in touch regarding privacy matters.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We reserve the right to modify this policy, and will do so by posting the revised version on our website or application interface with a new “Last Updated” date. When we make significant changes to how we handle personal data, we will take additional steps to inform you: for example, we might send a notice to the email address you have provided or display a prominent announcement within the service.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you continue to use the Strength & Conditioning AI Program Generator after a new privacy policy becomes effective, that will indicate your acceptance of the revised policy. However, if the changes are material and you do not agree with them, you may discontinue using the service and request us to delete your data.

In summary, any updates will be communicated as follows: we will update the policy document here, and for major changes, we will notify active users via email or through the service interface. The updated Privacy Policy will be effective as of the time of posting, or as otherwise indicated at the time of posting. We will not reduce your rights under this Privacy Policy without your explicit consent.

By using the Strength & Conditioning AI Program Generator, you acknowledge that you have read and understood this Privacy Policy. We are committed to protecting your privacy and empowering you with control over your personal data. If you have any questions or concerns, please contact us at the email provided above. Thank you for trusting us with your training journey and personal information.

For more information about your use of our service, please read our Terms and Conditions.

Back to Home