Plata.

Legal

Privacy Policy

Effective date: October 14, 2026

This privacy policy applies to the Plata app for mobile devices, together with any related services operated by Plata Interactive LLC (collectively, the "Application"). Plata Interactive LLC is hereby referred to as the "Service Provider". If the Service Provider later offers a web version of the Application, this policy will be updated to cover it.

Information Collection and Use

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to: email address, username, display name, avatar, belt rank and stripes, affiliate school, bio text, Instagram handle, training session content, photos posted in sessions, comments and @mentions, training partner tags, and follow relationships. The information the Service Provider requests will be retained and used as described in this privacy policy.

You can create your account with an email address and password, with Sign in with Apple, or with Google Sign-In. If you use Sign in with Apple, the Service Provider receives from Apple a unique identifier for your Apple ID, your email address, and (the first time only) the name you choose to share. If you choose Apple's "Hide My Email" option, the Service Provider receives and identifies your account by an Apple private relay address instead of your real email address. The Service Provider never receives your Apple ID password.

If you use Google Sign-In, the Service Provider receives from Google a unique identifier for your Google Account, your email address, your name, and the web address of your Google profile picture. The identifier and email address identify your account; your name is used only to suggest a display name during onboarding, which you can change; the profile-picture address is not stored or displayed. The Service Provider never receives your Google password.

At sign-up, or when you first sign in with Apple or Google, the Service Provider asks for your date of birth solely to confirm that you meet the minimum age requirement to use the Application (see "Children" below). Your date of birth is used to perform this age check and is not stored; the Service Provider retains only an indicator that you met the minimum age requirement.

The Application also automatically collects limited technical information when you use it:

If you enable push notifications, the Application stores a push notification token for your device so notifications can be delivered. You can disable notifications in your device settings; the token is deleted when you sign out or delete your account.

Location Data

The Application does not collect device location data, GPS coordinates, or precise geographic location. The "affiliate school" you select is user-provided text from a predefined list and does not represent your actual location. Your device's timezone is recorded to display training dates correctly; a timezone identifies a broad region, not your location.

Photos uploaded to sessions and avatars are re-encoded before being stored on our servers, which removes GPS coordinates and other embedded metadata (EXIF data).

Voice Logging and Automated Text Extraction

The Application offers an optional voice logging feature that lets you describe a training session in your own words instead of filling in a form. This feature is entirely optional, and you can always log a session by typing instead.

If you use the in-app recording button, your device's microphone audio is processed by your operating system's speech recognition service — Apple's Speech framework on iOS, or Google's speech recognition service on Android — to convert what you say into text. Depending on your device, operating system version, and language settings, that audio may be transmitted to and processed by Apple or Google on their servers, subject to their own privacy policies. The Service Provider does not record, store, or transmit your audio, and never receives it. The same applies if you dictate using your keyboard's microphone key.

The resulting text remains on your device, in an editable field, until you choose to submit it for extraction. Only when you tap to extract is the text transmitted to the Service Provider's servers and then to Anthropic's API, which analyses it to suggest values for the session form, such as duration, class type, and techniques. Anthropic processes this text to return the extraction and does not use it to train its models.

The Service Provider does not store the text of your voice logs. A usage record is kept for each extraction attempt containing your user identifier, a timestamp, usage metadata such as the character count of the submitted text, and, where an extraction fails, technical diagnostic information about the failure. This record is used solely to enforce a daily usage limit and to operate and troubleshoot the feature. The content of the text you submit is not recorded.

Extracted values are presented to you as a pre-filled form. Nothing is saved to your training log until you review it and choose to save.

The Application requests microphone and speech recognition permission only when you first use the in-app recording button. Declining has no effect on any other feature, and you can continue to log sessions by typing.

User-Generated Content

When you post sessions, comments, or photos, this content is displayed within the Application to other users in accordance with the privacy settings you choose for each session — public, followers-only, or private to you alone. Content you post remains your property; by posting, you grant the Service Provider a non-exclusive, worldwide, royalty-free license to host, store, reproduce, adapt (including generating structured session details from voice transcripts), and display your content as needed to operate and provide the Application. This license does not permit the Service Provider to sell your content or license it to third parties independently of the Application.

When you @mention another user in a comment, that user is notified of the mention. When you tag another user as a training partner on a session, that user is notified of the tag.

The Application screens text you submit — including session content, comments, and profile fields — against a list of prohibited terms before it is saved. Content matching that list is rejected and not stored. You can also report content and block other users from within the Application.

Photos attached to sessions are stored in a manner that allows them to be retrieved by direct link. While a session's privacy setting governs where the session and its photos appear inside the Application, anyone who obtains the direct link to a photo file may be able to view that file outside the Application. You should not post photos you would not be willing to have seen by someone outside your intended audience.

Cookies and Tracking Technologies

The Application does not currently use analytics SDKs, advertising identifiers, or cross-site tracking technologies. The Service Provider does not sell or share personal information for cross-context behavioral advertising. Should this change, this policy will be updated and, where required by applicable law, consent obtained before non-essential tracking technologies are used.

Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at alex@platabjj.com.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell or share personal information. To exercise your CCPA/CPRA rights, contact the Service Provider at alex@platabjj.com.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

Third-Party Service Providers

The Service Provider uses the following third-party services to operate the Application:

Supabase, Anthropic, Sentry, Resend, and Expo process user data on the Service Provider's behalf, do not have independent rights to use your information, and have agreed to confidentiality obligations consistent with this Privacy Policy.

Separately, when you use the voice logging feature, your device's speech recognition is provided by Apple (on iOS) or Google (on Android) as an operating-system service. These services operate under Apple's and Google's own terms and privacy policies and are not processors acting on the Service Provider's behalf.

Likewise, if you choose Sign in with Apple, Apple acts as an identity provider under its own terms and privacy policy, not as a processor acting on the Service Provider's behalf. Apple confirms your identity to the Service Provider and, if you use "Hide My Email", operates the private relay address through which the Service Provider can contact you. Apple's privacy policy: https://www.apple.com/legal/privacy/

In the same way, if you choose Google Sign-In, Google acts as an identity provider under its own terms and privacy policy, not as a processor acting on the Service Provider's behalf. Google confirms your identity to the Service Provider and supplies the email address, name, and profile-picture address described above. You can see and remove Plata's access to your Google Account at any time at https://myaccount.google.com/connections. Google's privacy policy: https://policies.google.com/privacy

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, including:

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Disclosure of Information

The Service Provider may disclose user-provided and automatically collected information:

Opt-Out Rights

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at alex@platabjj.com.

Data Retention

The Service Provider retains personal data as follows:

Data removed from active databases as part of account deletion may persist in routine database backups until those backups are overwritten as part of normal backup rotation.

Account Deletion

You can delete your account at any time from within the Application (Settings → Delete Account). Deletion is permanent and cannot be undone.

When you delete your account:

You may also request deletion by contacting the Service Provider at alex@platabjj.com.

Children

The Application is intended only for people 17 years of age or older. The Service Provider does not knowingly collect personally identifiable information from anyone under 17, and does not market the Application to them. At sign-up, or when you first sign in with Apple or Google, the Service Provider checks date of birth to enforce this minimum age. An account created through Sign in with Apple or Google Sign-In that fails this check is deleted immediately.

If the Service Provider learns that it has collected personal information from someone under 17, it will delete that information and remove the account. If you have reason to believe that someone under 17 has provided personally identifiable information through the Application, please contact the Service Provider at alex@platabjj.com so that necessary action can be taken.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect the information it processes and maintains, including encryption of data in transit, secure authentication mechanisms, and database-level access controls. Data stored with our hosting provider is encrypted at rest in accordance with that provider's practices.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at alex@platabjj.com.

Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at alex@platabjj.com.

See also our Terms and Conditions · Support · Home