Privacy Policy

1. Information We Collect

DojoNinja collects the following information to operate the service:

• Student names, email addresses, and phone numbers
• Date of birth and belt rank
• Attendance records and class history
• Payment information — processed securely by Stripe

We do not store credit card numbers. All payment data is handled directly by Stripe in accordance with PCI-DSS standards.

2. How We Use Data

We use the data we collect for the following purposes:

• Operating and maintaining the DojoNinja platform
• Sending SMS and email communications on behalf of your school
• Analytics and reporting to help you manage your school
• Improving the service, fixing bugs, and developing new features

3. Data Sharing

We share data only with the following third-party services necessary to operate DojoNinja:

• Stripe — payment processing
• Twilio — SMS messaging
• SendGrid — email delivery

We never sell your data to third parties. We do not share your data with advertisers or data brokers.

4. Data Security

We take security seriously and implement the following measures to protect your data:

• PostgreSQL database with encryption at rest
• All traffic encrypted via HTTPS/TLS
• JWT-based authentication
• Passwords hashed with bcrypt
• Role-based access controls

5. Children's Privacy (COPPA)

DojoNinja is used by martial arts schools that may enroll minors. Student data may include information about children under 13. Schools are responsible for obtaining verifiable parental or guardian consent before entering any minor's data into the system. DojoNinja acts as a service provider and relies on schools to comply with the Children's Online Privacy Protection Act (COPPA).

6. Data Retention

Our data retention policies are as follows:

• Active accounts — data is retained for as long as your account remains active
• Cancelled accounts — data is deleted 90 days after cancellation
• Data export — available upon request at any time before deletion

7. Your Rights

You have the right to access, correct, and delete your personal data at any time. To exercise any of these rights, contact us at hello@dojoninja.io. We will respond to all data requests within 30 days.

8. Cookies

DojoNinja uses session cookies strictly for authentication purposes. We do not use third-party tracking cookies, advertising cookies, or analytics cookies. Your browsing activity is not tracked or shared with any external parties.

9. Changes to Policy

We may update this Privacy Policy from time to time. For any material changes, we will notify you via email at the address associated with your account. Continued use of DojoNinja after changes are posted constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or your data, please contact us:

Email: hello@dojoninja.io
Company: The Claw Empire LLC