This policy explains how Hector Tapiero (“Dojo Manager”, “we”, “us”) handles personal information when you visit our website or use the Dojo Manager application (the “Service”). We are based in the Czech Republic and handle personal information in line with the EU General Data Protection Regulation (GDPR).
Controller: Hector Tapiero, trading as Dojo Manager, IČO 09129103, Prokopova 10, 130 00 Praha 3, Czech Republic. Contact: support@dojomanager.io.
1. Our role
Dojo Manager is used by martial arts schools and gyms (“Dojos”) to manage their members. There are two kinds of personal information:
- Dojo account information, about the owners, admins and staff who use Dojo Managerto run their Dojo. We decide how this is used.
- Member information, which a Dojo enters or its members provide. The Dojo decides what it collects and why, and we process it on the Dojo’s behalf. If you are a member, your Dojo is your first point of contact for questions about your information.
2. What we collect
Information you or your Dojo give us
- Name, email address, phone number and password (stored only in hashed form).
- Profile photo, if one is added.
- For members: date of birth, emergency contact, parent or guardian details for minors, belt rank, membership plan and status.
- Dojo details: name, address, time zone, currency and brand color.
- Messages you send us through the contact form or by email.
Information created when the Service is used
- Attendance and check-in records.
- Payment records: amount, date, method, status and the reference from the payment provider. Card details are entered directly with the payment provider; we never see or store full card numbers.
- Technical information such as IP address, browser type and error logs, used to keep the Service secure and working.
3. How we use it
- To provide the Service: accounts, sign-in, membership plans, payments and check-in.
- To send service emails, such as account verification and password resets.
- To bill Dojos for their subscription and platform fees.
- To keep the Service secure, prevent fraud and fix problems.
- To answer your questions and provide support.
- To meet legal, tax and accounting obligations.
Our legal bases under the GDPR are performing our contract with the Dojo (providing the Service and billing), our legitimate interests (security, fraud prevention and support), and legal obligations (tax and accounting records). We do not sell personal information, and we do not use member information for advertising.
4. Who we share it with
We share personal information only with service providers that help us run the Service, under agreements that limit how they can use it:
- Google Cloud and Firebase: hosting, file storage and backups.
- MongoDB Atlas: database hosting.
- Stripe: billing Dojos for their subscription and platform fees, and processing online member payments for Dojos that accept them.
- Paguelo Facil: processing online member payments for Dojos that use it.
- Resend: sending service emails.
- Sentry: error monitoring.
We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy would continue to apply.
5. Cookies and local storage
The application uses cookies that are needed to keep you signed in. This website stores your light or dark theme choice in your browser. We do not use advertising or tracking cookies.
6. How long we keep it
We keep information for as long as the Dojo’s account is active. When a Dojo cancels, we delete its data within 30 days after the subscription ends, except records we must keep for legal, tax or accounting reasons. Backups are overwritten on a rolling basis and expire shortly after.
7. Security
We protect information with encryption in transit, hashed passwords, access controls by role, and regular backups. No system is perfectly secure, but if a breach affects your information we will tell you and the relevant authorities as the law requires.
8. Children
Dojos may enter information about members who are minors, such as students in kids classes. The Dojo is responsible for getting consent from a parent or guardian. Dojo accounts are only for people who are 18 or older.
9. International transfers
Some of our service providers store or process information outside the European Economic Area, including in the United States. When they do, the transfer is covered by safeguards the GDPR recognizes, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
10. Your rights
Under the GDPR you have the right to access, correct, export or delete your personal information, to restrict or object to how it is used, and to withdraw consent where we rely on it. Dojo users can update most information in the app. Members should contact their Dojo, which can make changes or ask us to help. You can also write to us at support@dojomanager.io, and we will respond within 30 days.
You also have the right to complain to a data protection authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or you can contact the authority where you live.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant, we will email Dojo account owners before it takes effect.
12. Contact
Questions about privacy: support@dojomanager.io.