Reel Dojo Privacy Policy
Effective date: October 19, 2026. Version 2026-10-19-beta-3.
Who operates Reel Dojo
Momentum Dev LLC operates Reel Dojo and its website at reeldojo.app. Contact [email protected] with privacy, access, correction or deletion requests. This policy covers the invited adult beta and the public information website. The current Play test is restricted to approved testers. Play installation access is separate from app membership and the explicitly approved messaging pilot; installing the app does not grant wider account or chat access.
Account and training data
We process your account email and authentication records, display name, membership access, and the training information you choose to save: video links, recordings, notes, folders, disciplines and progress. Recordings may include the image or voice of other people. Obtain their permission before recording or sharing them.
Terms acceptance records
The app keeps a dated, versioned acceptance record on your device, including your age confirmation, agreement to the terms and acknowledgement of their training-risk and liability provisions. The record is associated with the signed-in account identifier when available; signed-out local use has a separate record. A new account or changed terms can require renewed acceptance. These local records are used to check acceptance and remain until replaced or app storage is cleared; this feature does not create a server-side acceptance log.
Storage and sharing
Your library is stored on your device. When enabled and selected, sync sends account-linked metadata to Supabase and new uploaded recordings to Bunny Stream for processing and private playback. Local thumbnails stay on the device. Existing recordings do not automatically become backed up when you sign in. Keep your originals and do not rely on an incomplete upload as a backup. Private shares, partner links, calendars, gyms, class schedules and announcements disclose selected information to their permitted participants.
Device access and communications
Camera and microphone access are used when you scan or record. Imported media comes from the files you select. Notification permission controls notification display. You can deny or withdraw optional permissions in device settings, although the corresponding feature may then be unavailable. The beta does not import your address book or request device location. Firebase may process installation identifiers, device push tokens, app/device configuration and notification delivery information independently of notification-display permission. Message alerts can include the sender display name and group name, including on the lock screen according to your phone settings. Private message text, attachments, encryption keys and recovery secrets are not included in those alerts. You can silence a chat; coach and gym announcement preferences are separate. Resend processes account emails and Cloudflare routes support emails to our monitored inbox. External communications opened by older builds are governed by the external service policies.
Private messages and metadata
When the private messenger is enabled for your account, message text and attachments are encrypted on participant devices before Supabase stores or relays them. Authorized devices use message keys to read that content; signing in alone does not give an operator the keys to read private chats. This does not encrypt all app data end to end. Supabase also processes account and participant identifiers, display names, group titles, device public keys, encrypted key deliveries, timestamps, sizes, delivery status and access controls to operate messaging. Filtering your linked-partner list, readable message drafts and readable message search indexes stay on your device. No external GIF search service is used in this beta; your keyboard and selected attachment providers have their own practices.
Message reports and recovery
Reporting a private message requires you to preview and explicitly submit selected readable content. Authorized moderators can review that disclosed content, any selected attachment and the identifying context needed to handle the report. A report does not disclose other chat history, room keys or recovery secrets. Optional message recovery uses member-controlled recovery material. Keep that material securely: we cannot recover a forgotten recovery secret or guarantee readable history after a phone change, clearing app data or moving between separately installed test apps. Supabase can retain encrypted recovery packages; you control the material needed to unlock them.
Message retention and deletion
Cloud chat records are retained to provide the conversation, subject to its removal controls, account deletion and necessary moderation and security handling. A configured disappearing-message period stops ordinary access to message content when it expires; encrypted cloud records and attachments may remain until reviewed cleanup and backup retention complete. Your account deletion request includes your messages and related active messaging records; required cleanup is checked before completion is confirmed. Removing access or a cloud copy cannot remotely erase screenshots, exports, offline copies or independent recovery files held by another participant. Report disclosures and necessary protected security or deletion records follow the review and retention limits below. Backups and pending provider or storage cleanup may delay completion; we do not promise instant physical erasure of every copy.
Website and service providers
Cloudflare Pages hosts our information website and sample-content app demonstration. Cloudflare may process website requests, including IP addresses, browser information, request paths and security information, to deliver and protect the site. Following an email link uses your email service. Supabase provides account authentication, database and selected sync/storage services; Bunny Stream processes uploaded videos and private playback; Firebase, Resend and Cloudflare provide the communications described above. Providers may process information in the countries where they operate.
External video services
Opening or embedding YouTube, Instagram, Facebook, TikTok or another saved link connects to that provider, which may receive device and network information under its own policy. Reel Dojo does not control those services or guarantee that every link will play inside the app.
Optional product analytics
Optional product analytics is off in the first internal Play test. Some development builds offer separately consented analytics. If you opt in where that feature is offered, Reel Dojo sends account and installation identifiers, app and device information, version and locale, fixed screen and feature-action categories, operational timing and error categories, your optional self-reported belt and enabled discipline categories to Supabase. Custom discipline names are grouped as Other. Belt rank is independent of the color theme, and enabled categories do not establish that you trained in them. Authorized operators view aggregate reports through a private authenticated dashboard. These event payloads exclude technique names, notes, video links or content, email, display name, IP address and authentication or playback tokens. Provider requests may separately create network logs.
Analytics controls and retention
You can use the app without optional analytics. When analytics is available, you can change your choice in Settings. Raw analytics events are retained for up to 90 days; aggregate daily totals may remain afterward. Withdrawal stops collection on this device, clears its unsent events and requests deletion of account-linked raw analytics. If server cleanup cannot finish while offline, the app displays an error and you can retry online. A choice on one device does not automatically opt in another account or device. New data categories require an updated disclosure and renewed consent.
Diagnostics and service logs
Test replay, Sentry reporting and the optional problem-report feature remain disabled in the proposed regular Android release. Where the Android private crash marker is included, opted-in analytics can report a fixed fatal-Java-crash category on a later launch, without a message, stack, screen recording or private content. This does not measure every crash or operating-system freeze. Providers may independently log IP addresses, timestamps, device information and authentication, delivery, processing or security outcomes. Information you send to support is processed to handle your request. Service logs and support records are distinct from optional product analytics.
Support, moderation and security
Support requests and reports include the information you submit and, where applicable, basic app/device diagnostic context. Authorized operators use them to resolve problems, investigate abuse and secure the service. Do not submit passwords, sign-in codes or unnecessary private media. We use the described service providers to operate the app and may disclose information when required by law or necessary to investigate abuse and protect people or the service. We do not sell beta data or use it for advertising or cross-context advertising.
Retention and deletion
Account and cloud library data are retained to provide the service until you remove them or request account deletion, subject to stated feature limits and necessary legal/security retention. Support and moderation records may be retained while needed to resolve requests or investigate abuse. Deletion requests require identity verification. We explain any data that must be retained and confirm the request status; logging out or uninstalling does not delete cloud data. Before confirming completion, we remove the required account data, revoke shared access, check affected backups, and verify that our video provider accepted deletion or the video was already absent and its API no longer returns it. Unconfirmed cleanup inside the provider remains tracked; API absence does not prove every physical copy was erased. See the account deletion instructions.
Deletion response and recovery copies
Our response targets are to acknowledge deletion requests within 7 days of receipt and complete them within 30 days after identity verification. If necessary cleanup or a legitimate retention obligation delays completion, we explain the reason, the remaining steps and an updated expected date. Supabase Pro retains restricted daily database backups for up to 7 days; they can contain older account data after active data is removed. Additional protected recovery copies we control can remain until affected data is removed or those copies are verified unaffected. A new daily backup does not itself remove older backups. We confirm completion only after affected managed backups are no longer available for restore and affected recovery copies we control are removed or verified unaffected. Replacement copies must exclude the deleted account and its active data. Any restore must stay inaccessible until later deletions and access revocations have been reconciled. We explain necessary retained categories and reasons to the requester.
Deletion requests and completion notices
Request deletion by emailing [email protected]. The monitored inbox is handled by an operator who verifies identity and reviews the required cleanup. Automatic account-deletion recovery, backup checks and completion emails are not active in the first Play test. We provide request status and confirm completion only after the required checks finish; unfinished cleanup is not reported as complete. Minimal protected deletion and upload receipts may remain for security, restore suppression and provider follow-up. They are not publicly accessible.
Deletion records and restore protection
A separate protected Cloudflare deletion record can retain account and request identifiers and timestamps for restore suppression and documented security or provider follow-up. These are account-linked technical records, not anonymous data. The deletion record excludes email addresses, names, training notes, passwords and video content. We explain necessary retained categories and reasons when responding to a request.
Your controls and security
You can choose sync settings, manage sharing, block or report inappropriate messages, silence chats, deny optional permissions and contact us about your data. Private chat content uses the device encryption described above. Library sync, uploaded training videos, account and group metadata, and readable content you explicitly report are not covered by private-chat end-to-end encryption. This beta messaging integration has not received an independent security audit. We also use encrypted connections and account-based access controls. No internet service can guarantee perfect security.
Beta eligibility and updates
The beta is for invited adults aged 18 or older and is not intended for children. Contact [email protected] to request access to or correction of your account information or to ask about retention of a particular category. We verify ownership before releasing account information or making destructive changes. We update this policy when relevant features or data practices change and display the current version in the app and on the website. Materially expanded consent requires a new disclosure and renewed acceptance.
Momentum Dev LLC