Privacy Policy

Effective date: 24 June 2026

1. Introduction

This Privacy Policy describes how personal information is collected, used, and shared when you use the student mobile application and instructor web portal provided for your martial arts school (the Services).

The Services are operated by Kekoa.app on behalf of KEKOA.APP (“Kekoa.app,” “we,” “us,” or “our”). Your martial arts school (“School”) uses Kekoa.app to manage curriculum, student records, and training content. Depending on your relationship with us:

For privacy questions about your training relationship, contact your School first. For platform or technical privacy questions, contact us at info@kekoa.app.

2. Information we collect

2.1 Information you or your School provide

CategoryExamplesSource
Account credentialsEmail address, password (stored hashed)You or School staff
ProfileName, belt rank, promotion history, junior/adult program flagSchool roster or self-signup
PreferencesSaved techniques, playlists, notes, confidence ratingsYour use of the app
CommunicationsSupport requests, password-reset emailsYou

2.2 Information collected automatically

CategoryExamplesPurpose
ActivityVideo plays and completions, downloads, logins, favoritesProgress tracking and School reporting
Device / platformiOS or Android, app versionSupport, security, compatibility
Technical logsAPI requests, error reportsSecurity and reliability

2.3 Locally stored on your device

The student mobile application may store authentication tokens, cached curriculum videos, and offline preferences on your device using secure storage. This data remains on your device until you sign out, delete your app account, uninstall the app, or delete downloaded content.

2.4 Information we do not collect

We do not knowingly collect payment card numbers through the student mobile application. We do not sell your personal information. We do not use the Services for third-party advertising.

3. How we use information

We use personal information to:

4. Legal bases (EEA / UK users)

Where applicable, we process personal information based on contract (to provide the Services), legitimate interests (security and improvement), consent where required, and legal obligation. Your School may have additional legal bases for processing enrollment data.

5. How information is shared

We share information only as needed to operate the Services:

We do not sell or rent personal information.

6. Service providers (subprocessors)

We use trusted third-party providers to run the platform, including MongoDB Atlas (database), Vercel (hosting), Cloudflare R2 (video storage), Expo/EAS (mobile updates), and an email delivery provider. These providers process data on our instructions and under contractual safeguards.

7. Data retention

We retain personal information while your account is active and as needed to provide the Services.

Student app account deletion: You can delete your student app account in the app (Profile → Delete Account). That immediately removes your app login and app-generated data, including watch history, confidence ratings, notes, playlists, and locally cached videos on that device. If you have a paid app subscription, it is canceled. School enrollment records (roster identity, rank, attendance, and similar School-managed data) remain with your School because they are used for in-person training, not only the app. Payment-processor invoices and other records may be retained as required for accounting, tax, or legal purposes.

When your School deactivates your account, we delete or anonymize personal data within a reasonable period, except where retention is required for legal, security, or backup purposes. Locally cached videos on your device are also removed when you delete downloads or uninstall the app.

8. Children’s privacy

The Services are intended for martial arts students enrolled through a School. Some students may be minors. Schools are responsible for obtaining any parental or guardian consent required for enrollment and app access. We do not knowingly collect personal information directly from children under 13 without appropriate School authorization. If you believe we have collected information from a child under 13 in error, contact info@kekoa.app.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to withdraw consent where processing is consent-based.

Students: You can delete your student app account from the Profile tab in the app (see Section 7). Contact your School to update roster information. Contact info@kekoa.app for platform-level requests.

School staff: Contact your School administrator or info@kekoa.app.

10. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted connections (HTTPS), hashed passwords, tenant isolation between schools, and access controls for staff accounts. No method of transmission or storage is 100% secure.

11. International transfers

If you access the Services from outside the country where our servers are located, your information may be transferred to and processed in the United States or other countries where our service providers operate.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy at this URL and update the effective date. Continued use of the Services after changes constitutes acceptance of the updated policy where permitted by law.

13. Contact us

Kekoa.app / KEKOA.APP
Privacy: info@kekoa.app
Support: support@kekoa.app