Privacy Policy

1. What we collect

OPNMAT (the “Service”) is operated by OPNMAT LLC (“we”, “us”, “our”).

We collect the following information when you use the Service:

• Account data — email address and password (hashed, never stored in plain text)
• Profile data — username, belt level, optional avatar image, and optional academy affiliation
• Video content — clips you upload for analysis
• Analysis data — the context and questions you provide, plus the AI-generated coaching responses and annotated frames
• Community data — comments you post on public analyses, open mat confirmations, your public profile visibility setting, follow relationships (who you follow and who follows you), bookmarks (analyses you save for later), pinned analysis selection, and notifications generated for you
• Feedback — any feedback you submit through in-app feedback forms
• Billing data — subscription tier and payment status (payment card details are held by Stripe, not us)
• Usage data — number of analyses used per month

2. How we use your data

We use your data only to provide and improve the service:

• To authenticate you and manage your account
• To process your videos and generate AI coaching feedback
• To display your public profile and shared analyses to other users when you opt in
• To show comments on public analyses and open mat times in the community finder
• To manage your subscription and billing
• To enforce usage limits and prevent abuse
• To send transactional emails (e.g. email confirmation, password reset)

We do not sell your data. We do not use your videos or analyses to train AI models.

3. Third-party services

We use the following third parties to operate the service:

• Supabase — database, authentication, and file storage. Your videos and account data are stored on Supabase-managed infrastructure.
• Anthropic — AI analysis. Video frames are sent to Anthropic's API to generate coaching feedback. Anthropic's data use policy applies to this processing.
• Stripe — payment processing. Stripe handles all card data under PCI-DSS compliance. We store only your Stripe customer ID.
• Vercel — hosting and deployment.

4. Video and frame storage

Videos you upload are stored in private, access-controlled storage. Extracted frames used for AI analysis are also stored privately. Access to these files requires a short-lived signed URL generated by our servers.

When you share an analysis publicly, the video and annotated frames remain in private storage — signed URLs are generated on demand each time a visitor views the public analysis page. Revoking public access (toggling back to private) immediately prevents new signed URLs from being generated for that analysis.

Raw video files are automatically deleted 60 days after upload to save storage. The AI coaching feedback, annotated frames, and analysis text are preserved indefinitely so you can still review the breakdown. Videos attached to a publicly-shared analysis are exempt from this auto-deletion for as long as the analysis remains public — toggling the analysis back to private makes the video eligible for deletion on the next cycle.

You can delete any analysis and its associated frames at any time from within the app. Deleting your account permanently removes all videos, frames, and analyses.

5. Public content

If you enable a public profile or share an analysis, the following information becomes visible to anyone — including unauthenticated visitors and search engine crawlers:

• Your username, belt level, and avatar (public profile)
• Your academy affiliation (if set and profile is public)
• Your follow relationships (who you follow and who follows you) when your profile is public
• The title, format, and your coaching question for any analysis you share
• AI coaching feedback, annotated frames, and follow-up questions for shared analyses
• Comments you post on public analyses
• Your pinned analysis, if set, displayed at the top of your public profile

You can make your profile or an analysis private again at any time. However, content that was previously public may have been indexed by search engines or cached by third parties and cannot be immediately removed from those sources.

Academy open mat times and confirmation counts are always public (they are community-contributed information).

6. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data, videos, analyses, and frames are permanently deleted within 24 hours.

7. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data via your profile settings
• Delete your account and all associated data at any time
• Export your data — contact us at support@opnmat.com to request a copy

8. Cookies and tracking

We use cookies only for authentication (session tokens managed by Supabase). We do not use advertising cookies or third-party tracking.

9. Security

Passwords are hashed and never stored in plain text. All data is transmitted over HTTPS. Storage buckets are private and require signed URLs for access. We follow industry-standard practices to protect your data.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The date at the top of this page reflects the most recent update.

11. Contact

Questions or requests? Email us at support@opnmat.com.