Privacy Policy

1. Who controls your information

Shijak is used in two ways:

• Through an organization. When a dojang, school, or club uses Shijak, its coaches and administrators decide who joins, what is recorded about athletes (for example evaluations, rosters, and tournament selections), and who on the team can see it. We process that information on the organization's behalf and according to its settings. Questions about what your organization records should go to that organization first; we will help where we can.
• On your own. Solo Competitor accounts and family profiles you create yourself are controlled by you.

2. Information we collect

Information you or your organization provide

• Account information: name, email address, password (stored only as a one-way hash), role (for example coach, parent, or athlete), the organizations you belong to, and the date you accepted our Terms.
• Age and competition information: date of birth or competition age bracket, belt rank, competition division, and gender group, used to confirm eligibility and place competitors in the correct divisions.
• Family profiles: names and competition details of children or other family members you add and manage, the parents or guardians linked to each athlete, and an optional profile PIN (stored only as a hash).
• Athlete roster information (entered by you or your organization): first and last name, belt rank, date of birth, gender, team or age division, weight class and weight (for organizations whose style uses weight classes), ATA membership number (for ATA organizations), and an optional profile photo.
• Training and competition records: tryout evaluations, scores, coach comments, report cards, attendance and check-ins, tournament entries, scores, placements, sparring results, team selections, homework completion, and rankings.
• Messages and content: chat messages, photos you send in chat, reactions, @mentions, announcements, homework assignments, and notes on videos.
• Video links: links to videos hosted on services such as YouTube, Google Drive, or Vimeo, plus titles and notes. Shijak stores the link, not the video file.
• Support requests: anything you send us when you contact us.

Information collected automatically

• Notification tokens: if you turn on notifications, a push token or browser push subscription for your device, and the device name and platform.
• Sign-in sessions: a session cookie on the web, or secure sign-in tokens stored on your device in the app, and a record of the devices you are signed in on.
• Usage needed to run features: for example when you last read each chat conversation (used for unread counts and "seen by"), and which notifications you have read.
• Server logs: like most websites, our servers record technical information about requests, such as IP address, browser or device type, the page or endpoint requested, and the time. We use these for security and troubleshooting.

We do not use advertising, third-party analytics, or tracking tools, and we do not collect precise location, contacts, or other information from your device beyond what is listed here. The app asks for access to your photo library or camera only when you choose to attach a photo.

3. How we use information

We use information to:

• provide the Service: rosters, evaluations, scoring, rankings, schedules, chat, notifications, and family profiles;
• place competitors in the correct age, rank, and gender divisions and calculate tournament points;
• send notifications you have enabled and account emails such as password resets;
• keep the Service secure, prevent abuse, enforce our Terms, and fix problems;
• comply with law.

We do not sell personal information, share it for targeted advertising, or use it to build advertising profiles.

4. Who can see your information

• Within your organization. Coaches, evaluators, and administrators of an organization can see that organization's roster, evaluations, and related records. Chat messages are visible to the members of that conversation. Parents and guardians can read (but not post in) the chats their linked child belongs to. Team and individual tournament videos added to an event are visible to members of that organization. Parents and athletes see coaches as "Coach [last name]."
• Across organizations at shared tournaments. When organizations or Solo Competitors score the same real-world tournament together, competitor names, divisions, scores, and placements entered for that tournament are visible to the other participants in it. Basic tournament details (name, dates, state, venue) may come from public tournament listings.
• Your family. Parents and other managers of a family profile can view and act for that profile.
• Service providers who help us run Shijak, only as needed to provide their service to us: DigitalOcean (hosting and database, United States), Cloudflare (encrypted offsite backup storage), Resend (sending account emails), Expo, Apple, and Google (delivering mobile push notifications), and your browser's push service (delivering web notifications).
• Video hosts. When you watch a video link inside Shijak, the video is loaded from the service that hosts it (for example YouTube, Google Drive, or Vimeo), and that service's privacy policy applies.
• Legal and safety reasons. We may disclose information if required by law, or if we believe in good faith it is needed to protect the safety of any person, especially a child, to investigate abuse, or to protect the rights and security of Shijak and its users.
• Business transfers. If Shijak is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

5. Children's privacy

Shijak is designed to be set up and managed by adults: parents and guardians, and the coaches and staff of taekwondo organizations.

• Team accounts require users to be 18 or older. Athletes under 18 on a team are added as profiles managed by a parent or guardian, or entered onto a roster by their organization. These profiles cannot sign in on their own; they are reached only from a parent's or guardian's own account.
• Children under 13 may not create their own account. A parent or guardian must create and manage a profile for a child under 13.
• Information organizations enter about minors. When a coach adds an athlete to a roster, the organization is responsible for having the consent of that athlete's parent or guardian.
• Photos of minors (profile photos and chat photos) are never publicly accessible. They can be viewed only by signed-in users who are connected to that athlete or conversation.
• Parents' rights. A parent or guardian can review the information we hold about their child, ask us to correct or delete it, and refuse further collection, by using the family settings in the app, by asking the child's organization, or by contacting us at support@shijak.app. We will verify that the request comes from the child's parent or guardian before acting on it.

If you believe a child under 13 has given us personal information without a parent's consent, contact us at support@shijak.app and we will delete it.

6. Cookies and similar technologies

The website uses only the cookies needed to keep you signed in and protect against forged requests. The app stores your sign-in tokens in your device's secure storage (Keychain on iOS, Keystore on Android). We do not use advertising or analytics cookies.

7. Data retention

We keep information for as long as your account is active, or as long as your organization keeps you on its roster, and as needed to provide the Service. In particular:

• Competition and team records (evaluations, scores, results, rosters) belong to the organization that created them and are kept as part of its records until the organization removes them or asks us to.
• Chat messages stay in the conversation until the sender unsends them. An unsent message is replaced by "This message was unsent."
• Backups are kept for about four weeks and then overwritten, so deleted information may remain in backups for up to that long.
• Server logs are kept for a limited period for security and troubleshooting.

8. Deleting your account

You can delete your account at any time:

• In the app or on the website: Settings → Delete my account.
• By email: send a request from your account's email address to support@shijak.app.

When you delete your account, we:

• permanently disable sign-in, remove your email address and password, and sign you out on every device;
• remove your notification tokens, push subscriptions, and notification history, so you stop receiving notifications;
• replace your name with "Deleted user" wherever it appears to others, including on messages you sent.

Some information is kept after deletion: messages you sent stay in their conversations (shown as from "Deleted user") so others' conversations remain intact; competition and roster records stay with the organization that created them; and copies remain in backups until they are overwritten (about four weeks). To ask that an organization's records about you or your child also be removed, contact the organization or support@shijak.app.

A parent or guardian can delete a family profile they manage from the family settings in the app.

9. Your rights and choices

• Access and correction: you can view and edit your name and profile in Settings, and ask your organization or us to correct other records.
• Deletion: see "Deleting your account."
• Notifications: you can turn notifications off in the app's settings or your device's settings.
• Additional rights: depending on where you live, you may have further rights, such as to obtain a copy of your information or to object to certain processing. Contact us at support@shijak.app to make a request. We will not treat you differently for exercising your rights.

10. Security

We protect information with encryption in transit (HTTPS), one-way hashing of passwords, PINs, and reset links, access controls that keep each organization's information separate, sign-in requirements for photos of athletes and chat images, and encrypted offsite backups. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you as required by law.

11. Where information is stored

Shijak is operated from and stores information in the United States. If you use Shijak from outside the United States, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. We will change the effective date above, and if the changes are significant we will notify you in the app or by email before they take effect.

13. Contact us

Brand Recognition, LLC
6200 Bury Drive, Eden Prairie, MN 55346
support@shijak.app

You can also reach out to the organization that operates your Shijak team.