Privacy Policy

1. Who We Are

This privacy policy applies to the John Wayne Parr Training application ("we," "us," or "our") operated by:

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: First name, last name, email address
• Payment Information: Processed securely by Stripe (we don't store payment details)
• Communications: Messages you send us for support or feedback

2.2 Information Automatically Collected

• Usage Data: Pages visited, time spent, features used, video watch time
• Device Information: IP address, browser type, device type, screen resolution
• Analytics: Google Analytics and Facebook Pixel data (if you consent)
• Performance Data: App performance metrics and error logs

3. How We Use Your Information

• Service Delivery: Provide access to training content and manage your account
• Authentication: Send magic links for secure, password-free login
• Payment Processing: Process subscriptions and handle billing through Stripe
• Communication: Send important updates about your account and service
• Content Enhancement: AI-powered video descriptions and transcriptions (OpenAI)
• Service Improvement: Analyze usage patterns to improve our platform
• Legal Compliance: Comply with legal obligations and tax requirements

4. Information Sharing

We only share your information with trusted service providers:

• Stripe: For secure payment processing (subject to Stripe's privacy policy)
• Supabase: For secure data storage and authentication (AWS infrastructure)
• Resend: For sending authentication and notification emails
• Vimeo: For secure video content delivery and streaming
• OpenAI: For backend content processing only (video transcription analysis)
• Google Analytics & Facebook: For website analytics (only if you consent)

5. Data Storage and Security

• Location: Data stored securely with Supabase on AWS infrastructure in Australia/US
• Encryption: All data encrypted in transit (HTTPS) and at rest (AES-256)
• Access Controls: Strict access controls, multi-factor authentication, and role-based permissions
• Backups: Regular automated backups with encryption
• Monitoring: 24/7 security monitoring and incident response

6. Data Retention

• Active Accounts: Data retained while your account is active
• Cancelled Accounts: Personal data deleted within 30 days of cancellation request
• Payment Records: Retained for 7 years as required by Australian taxation law
• Usage Logs: Retained for 30 days for dispute resolution and support
• Backups: Data in backups may persist for up to 90 days due to technical limitations

7. Your Rights Under Australian Privacy Law

Under the Australian Privacy Principles, you have the right to:

• Access: Request a copy of your personal information we hold
• Correction: Update or correct your information if it's inaccurate
• Deletion: Request deletion of your account and personal data
• Restriction: Request we limit how we use your data
• Portability: Export your data in a standard format (JSON)
• Withdraw Consent: Opt out of analytics tracking and marketing
• Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC)

8. Cookies and Tracking Technologies

We use different types of cookies and tracking technologies:

8.1 Essential Cookies (Always Active)

• Authentication: Keep you logged in securely
• Security: Protect against fraud and abuse
• Functionality: Remember your preferences and settings

8.2 Optional Analytics Cookies

• Google Analytics: Website usage and performance metrics
• Facebook Pixel: Marketing and advertising effectiveness
• Performance Monitoring: App performance and error tracking

You can control cookie settings in your browser or through our cookie preference center.

9. Age Restrictions

Our service is intended for users aged 13 and above. While we don't actively collect age information, we recommend parental supervision for users under 16 due to the nature of martial arts training content.

10. International Data Transfers

Your data may be transferred to and processed in countries other than Australia, including the United States (AWS/Supabase infrastructure). We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions where available
• Certification schemes (Privacy Shield successors)

11. Video Content and Intellectual Property

• Viewing Only: Content is for personal viewing only - no downloading, recording, or redistribution
• Usage Tracking: We monitor video viewing patterns to improve content and prevent unauthorized use
• Content Protection: Videos are delivered through secure streaming with DRM protection
• Screen Recording Detection: We may employ technical measures to detect and prevent unauthorized recording

12. Marketing and Communications

• Account Notifications: Important service updates (cannot opt out)
• Marketing Emails: Promotional content about new features (can opt out)
• Push Notifications: Mobile app notifications (can control in device settings)
• SMS: We do not send SMS messages unless explicitly requested

13. Changes to This Policy

• We may update this privacy policy periodically to reflect changes in our practices or applicable law
• Material changes will be communicated via email at least 30 days before taking effect
• Minor changes will be posted with an updated "Last Updated" date
• Your continued use after changes constitutes acceptance of the updated policy

14. Contact Us and Complaints

14.1 Complaint Resolution

If you're not satisfied with our response to your privacy complaint, you can contact:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

15. Australian Consumer Law

Nothing in this privacy policy limits your rights under Australian Consumer Law or other applicable consumer protection legislation. Our privacy practices are designed to exceed the minimum requirements under Australian privacy legislation.