Legal
Privacy Policy
This policy explains what Ossmeta collects, how we use it, and the choices you have when you train, record, upload, and share through the app.
Last updated: August 9, 2026
1. Overview
This Privacy Policy explains how Ossmeta collects, uses, shares, and protects information when you use our website, progressive web app, training journal, video tools, AI-assisted features, and related services.
Ossmeta is designed for Brazilian Jiu Jitsu training records, including private notes, audio, videos, shared sessions, profile information, and AI-assisted review workflows.
2. Information we collect
We collect account information such as your name, email address, username, profile details, authentication identifiers, subscription status, and settings.
We collect training content you provide, including session titles, notes, goals, timestamps, audio recordings, transcriptions, uploaded videos, thumbnails, clips, comments, sharing settings, and other content connected to your journal.
We collect technical and usage information such as device and browser details, IP address, app interactions, pages viewed, errors, logs, approximate location inferred from network data, and diagnostic information needed to operate and secure the service.
3. How we use information
We use information to provide Ossmeta, sync your journal, process uploads, stream videos, generate transcripts and summaries, power search and organization, maintain shared links, manage subscriptions, and provide support.
We also use information to protect the service, debug issues, prevent abuse, understand usage, improve features, communicate about the service, and comply with legal obligations.
4. AI, transcription, and media processing
AI-assisted features are optional. Before the mobile app sends personal data to a third-party AI or transcription service, it presents an in-app disclosure naming the recipients and data involved and asks for your permission. If you decline, the rest of your journal, sessions, and video library remain available, but the requested AI feature will not run.
For voice notes, the audio recording is sent to Deepgram for transcription. The resulting transcript may then be sent with the entry type to OpenRouter and the selected model provider to generate a summary, coaching insight, techniques, and tags.
For Coach chat, your message may be sent together with relevant profile details, belt rank, training totals, recent session titles and summaries, strengths, focus areas, and selected session entries. OpenRouter routes that request to the selected model provider, which may include OpenAI, Google, Anthropic, or xAI. If OpenRouter is unavailable, Ossmeta may send the request directly to OpenAI where the feature indicates that fallback.
When you explicitly request AI-assisted video analysis or editing, the selected video or clips, prompts, transcripts, and related metadata may be processed by Durango and its configured AI infrastructure solely to produce the requested result. Merely uploading a video to your library does not itself authorize an AI analysis request.
You can review or revoke AI data-sharing permission in the mobile app under Settings > AI data sharing. Revocation blocks future transmissions from the mobile app; it does not undo processing already completed. You may delete your account in the app or contact support to request deletion, subject to the retention obligations described below.
AI-generated output can be inaccurate, and you should review it before sharing or relying on it. We do not use AI outputs as a substitute for professional medical, legal, or coaching advice.
5. Sharing and visibility
Your private journal content is not public by default. You control sharing through product features such as profiles, shared sessions, shared videos, public links, and settings.
If you share content, people with access to the relevant link or surface may view the information you made available. You are responsible for making sure you have permission to share footage or notes that include other people.
6. Service providers
We use Clerk for authentication; Convex for application data; Cloudflare R2 and Stream for media storage, delivery, and playback; Deepgram for voice transcription; OpenRouter for AI model routing; OpenAI, Google, Anthropic, and xAI as possible model providers; Durango for requested video-processing workflows; Stripe for web billing; Apple and RevenueCat for App Store purchases and entitlement verification; and Vercel for hosting and delivery.
Each provider receives only the information reasonably needed for its role. For example, authentication details go to Clerk, selected recordings go to Deepgram, AI inputs described above go to the selected AI chain, selected media goes to storage or video-processing providers, and purchase identifiers and subscription state go to Apple, Stripe, or RevenueCat. Full payment card details are not stored directly by Ossmeta.
We require service providers that receive personal data from Ossmeta to protect it to the same or an equivalent standard as this policy and applicable law, and to process it only for the contracted service, security, legal compliance, or another purpose you separately authorize.
7. Cookies and similar technologies
We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, maintain security, improve performance, and understand service usage.
Your browser may allow you to limit cookies or clear local storage, but some parts of Ossmeta may not work correctly without them.
8. Data retention
We keep account and journal information while your account is active and for only as long afterward as needed to complete deletion, maintain security, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and rotate backups. Operational logs and backups are retained on limited schedules appropriate to their purpose.
You may delete individual content where the product provides that control, and you may permanently delete your Ossmeta account in mobile Settings. Account deletion removes your application data and requests deletion from connected account and purchase-profile providers. Apple controls App Store subscription billing, so deleting an Ossmeta account does not cancel an Apple subscription; use Apple's subscription management first if you want renewal to stop.
Deletion may not immediately remove data from short-lived backups, security logs, legally required billing records, provider systems awaiting deletion, or copies already accessed by someone through a share you created. We retain those copies only for the applicable backup, security, legal, or contractual period.
9. Security
We use reasonable technical and organizational measures designed to protect information. No online service can guarantee absolute security, and you are responsible for keeping your account credentials and devices secure.
If you believe your account or content has been accessed without permission, contact us through the support or contact channels we make available.
10. Your choices
You can update account details, manage sharing and privacy settings, choose what content to upload, grant or revoke mobile AI data-sharing permission, delete individual content where available, and stop using Ossmeta at any time.
Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain personal information. We will respond to valid requests as required by applicable law.
11. Children
Ossmeta is not intended for children under 13. If you believe a child has provided personal information without appropriate consent, contact us so we can review and take appropriate action.
12. Changes and contact
We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users through the service or another appropriate channel.
Questions about this policy can be sent through the support or contact channels we make available in the app or on ossmeta.com.