sOSSiety
EnglishPortuguês

sOSSiety — Privacy Policy (Global)

Effective Date: September 19, 2025.

This Privacy Policy (“Policy”) explains how Sossiety LLC (“sOSSiety,” “we,” “our,” or “us”) collects, uses, shares, and protects information in connection with our website, mobile app, and services (the “Service”). Capitalized terms not defined here have the meanings set out in the Terms of Service.

Snapshot (non‑contractual): We require a display name and, if applicable, your gym at sign‑up, and your city and gym are public. You control other optional fields. We use data to run the Service, keep it safe, and improve features. We may show ads/affiliate content and use aggregated, de‑identified data for analytics and product improvement. The Planner is not medical and we are not HIPAA‑regulated.

Data Minimization. We collect only the information needed to operate and improve the Service. If we seek to collect additional information, we will do so only with your explicit consent or as required by law.

1) Who We Are and Scope

Controller: sOSSiety, a Delaware corporation. Contact: admin@sossiety.com.

This Policy applies to anyone who accesses or uses the Service worldwide, including the EU/UK/EEA, subject to the region‑specific rights in Section 12.

2) Information We May Collect

We collect information directly from you, automatically, and from third parties (e.g., sign‑in providers, ad/analytics partners). Examples include:

A. Account & Profile

  • Account identifiers: display name, email, phone (if provided), password hash, gym (if applicable), city (public), country, belt rank, instructor status (including community validations), profession, interests, photos/avatar.

B. Sensitive (Special Category) Information

You may choose to share sensitive information (e.g., health information, racial or ethnic origin, religious or philosophical beliefs, political opinions). We do not require such information. Where applicable law requires, we process such information only with your explicit consent or another lawful basis, and we apply additional safeguards.

C. Content & Social Graph

  • User Content: posts, comments, reactions, messages, class notes, Planner entries, feedback/praise about training partners, uploaded media, links.
  • Connections & interactions: who you follow/connect with, who follows you, who you mention or tag, event/class RSVPs, calendar shares.

D. Device/Usage & Location

  • Device and network: IP address, device IDs, OS/app version, language, time zone, crash logs, diagnostics.
  • Usage data: pages/screens viewed, features used, clicks, session duration, referral/UTM, approximate location (derived from IP or device settings if you allow).
  • Precise location: only if you grant permission via device/OS settings. We do not require precise GPS to use the Service.

E. Payments & Commercial

For any paid features, we (or our processors) may collect billing name, address, payment method, and transaction history. Payment data may be handled by third‑party processors per their privacy terms.

F. Inferences & Insights

We may generate inferences (e.g., likely interests, skill engagement) from other data to personalize features, feeds, and safety systems.

3) Sources of Information

  • You (account setup, profile, posts, messages, Planner, feedback, settings, surveys, support).
  • System (cookies/SDKs, logs, usage/event data).
  • Other users (tags, mentions, peer validations, feedback/praise).
  • Service providers & partners (analytics, ad networks, login/recovery providers).
  • Gyms/academies or event organizers when you register, link accounts, or participate in classes or events via the Service.
  • Public sources to help verify achievements or populate profiles—subject to your settings (e.g., tournament registrations/results, social media, etc.).

4) How We Use Information (Purposes & Legal Bases)

We use information to:

  1. Provide the Service (create/maintain accounts, Profiles, Search, Feed, Planner, Calendars).
    • Legal bases: Contract performance; Legitimate interests (operate an online BJJ community).
  1. Personalize & improve (recommend connections, content ranking, discovery; product analytics; research).
    • Legal bases: Legitimate interests; Consent where required (e.g., cookies/ads).
  1. Safety, integrity, and moderation (detect/prevent abuse, spam, IP infringement; enforce Terms; age gates; investigate reports).
    • Legal bases: Legitimate interests; Legal obligations.
  1. Enable social and collaboration features with training partners and instructors, including tagging/mentions, feedback or praise you choose to give, class RSVPs/attendance visibility, and calendar sharing you enable.
    • Legal bases: Contract; Legitimate interests; Consent where required.
  1. Communicate with you (service messages, changes to Terms/Policy, security alerts; optional marketing per your preferences).
    • Legal bases: Contract; Legitimate interests; Consent for marketing where required.
  1. Advertising and affiliates (show ads/affiliate content, measure ad performance, prevent ad fraud).
    • Legal bases: Consent where required; Legitimate interests.
  1. Payments & commercial features (future) (process transactions, prevent fraud, provide receipts).
    • Legal bases: Contract; Legal obligations; Legitimate interests.
  1. Legal compliance (tax, accounting, regulatory requests, lawful disclosures).
    • Legal bases: Legal obligations; Legitimate interests.
  1. De‑identified/aggregated analytics (build features, safety models, reliability).
    • Legal bases: Legitimate interests.

Where we rely on consent, you can withdraw it at any time via settings or contacting admin@sossiety.com.

5) How Your Information Is Shared

We may share information with:

  • Other users & the public: Your city and gym, display name, avatar, and public posts are visible to others. Information you share or actions you take in social features may be visible to other users such as training partners, class attendees, or instructors (e.g., tags/mentions, feedback or praise you choose to post, class RSVPs/attendance, or calendars you share). Private Planner entries and health‑related notes are not shared with other users unless you choose to share them or a feature clearly indicates visibility.
  • Service providers/processors (hosting, storage/CDN, analytics, security, customer support, communications, payment processors, anti‑spam/abuse tools).
  • Advertising/measurement partners (ads, affiliate links, conversion measurement, fraud prevention). We do not permit partners to use data for their own independent purposes without your consent where required.
  • Gyms/academies, event organizers, and content providers (when you register for classes/events or purchase training content through the Service, we share the necessary information to fulfill your request).
  • Single sign‑on / account recovery (if implemented).
  • Legal, safety, and rights (to comply with law, enforce Terms, respond to lawful requests, protect users or our rights).
  • Business transfers (merger, acquisition, financing, or sale of assets; we will continue to protect information per this Policy).

We do not sell your personal information for money. We may “share” personal information for cross‑context behavioral advertising (as defined under certain U.S. state laws). See Section 11 for opt‑out.

6) Public Profiles, Search, and Social Features

  • Public by design: City and gym are public so others can discover training partners. Consider what you share in posts, comments, and Planner entries.
  • Community validation: Belt/instructor validations are user‑driven and may be inaccurate. Do not rely solely on validations.
  • Direct messages & notes: Messages and Planner entries are not public unless you choose to share them; however, recipients can copy or re‑share content.

7) Cookies, SDKs, and Similar Technologies

We use cookies/SDKs for functionality, analytics, and (where enabled) advertising. You can manage preferences via Cookie Settings https://sossiety.com/cookie-settings and your device settings. Some features may not function without certain cookies/SDKs.

  • Do Not Track & GPC: We currently respond to Global Privacy Control (GPC) signals for relevant U.S. state law opt‑outs of “sale”/“sharing” where technically feasible.

8) Planner, Health‑Related Notes & HIPAA

  • The Planner is a wellness/training tool, not a medical service or device.
  • We are not a HIPAA covered entity or business associate. Do not upload protected health information you expect us to treat under HIPAA.
  • If you choose to log injuries/health‑related notes, you consent to our processing of that information to operate the Planner and provide features you request.

9) Data Retention

We retain information for as long as necessary to provide the Service, comply with law, resolve disputes, and enforce Terms. Criteria include: account status, feature usage, legal holds, and system backups. Typical examples:

CategoryTypical Retention
Account identifiersFor life of account + short grace/back‑up period
Public posts & commentsUntil you delete them or your account; may persist in backups for a limited time
Planner entriesUntil you delete them or your account
Logs & analytics12–24 months (aggregated/archived thereafter)
Legal/compliance recordsAs required by law

You may request deletion (see Section 12). Content already shared publicly or with others may remain accessible if copied or re‑shared by others.

10) Security

We use administrative, technical, and physical safeguards designed to protect information (e.g., encryption in transit, access controls, monitoring). No online service can be 100% secure. You are responsible for maintaining the confidentiality of your credentials.

11) Your Choices

  • Profile & visibility: You can edit optional fields and post visibility where settings are available. City and gym are public by default.
  • Marketing emails: Unsubscribe via the email footer or settings.
  • Cookies/SDKs: Use Cookie Settings https://sossiety.com/cookie-settings and device OS tools.
  • Targeted ads (U.S. states): Opt out of “sale”/”sharing” for cross‑context behavioral advertising via Do Not Sell or Share My Personal Information https://sossiety.com/do-not-sell or through supported GPC signals.
  • Location: You can enable or disable precise location in your device/OS settings.
  • Contacts & Calendar: You can disconnect contacts imports and calendar connections at any time in settings.

12) Your Rights by Region

EU/UK/EEA (GDPR)

If you are in the EU/UK/EEA, you have the right to request access, rectification, erasure, restriction, portability, and to object to certain processing (including profiling based on legitimate interests). Where processing is based on consent, you may withdraw consent at any time.

  • How to exercise: Email admin@sossiety.com. We may request proof of identity. You may also lodge a complaint with your local data protection authority.
  • Legal bases: See Section 4.
  • International transfers: See Section 13.

California & Certain U.S. States

Depending on your state, you may have rights to access, correct, delete, opt out of sale/share/targeted advertising, and limit use of sensitive personal information. We do not use or disclose sensitive personal information for purposes requiring a Limit Use link, beyond what is necessary to provide the Service. We do not sell personal information for money. To exercise rights, use Do Not Sell or Share https://sossiety.com/do-not-sell or email admin@sossiety.com. We will not discriminate against you for exercising rights.

Brazil (LGPD)

Brazilian users may have rights to confirm processing, access, correct, anonymize, block, delete, data portability, information on sharing, and to revoke consent. Contact admin@sossiety.com to exercise rights or raise questions for the DPA.

13) International Data Transfers

We operate globally and may transfer information to the United States and other countries with different data protection laws.

  • We use Standard Contractual Clauses (SCCs) and other safeguards for transfers from the EU/UK/EEA as required by law.
  • Where applicable, we may rely on adequacy decisions or participation in a recognized data‑transfer framework. If we certify to the EU‑U.S. Data Privacy Framework (and UK/Swiss extensions), the details will be posted here. (Placeholder.)

14) Automated Decision‑Making & Profiling

We may use limited profiling (e.g., ranking content, recommending connections) to personalize your experience and to protect against spam/abuse. You can object to certain profiling where GDPR applies (see Section 12).

15) Children’s Privacy

The Service is not for children under 13. We do not knowingly collect personal information from children under 13. In jurisdictions where the minimum digital consent age is higher (e.g., 16 in parts of the EU), we do not knowingly process personal data of users under the applicable age without verifiable parental consent. If you believe a child has provided personal information, contact admin@sossiety.com.

Organization‑Managed Child Accounts (inactive). Certain organizations (e.g., academies) may create and manage child accounts. Those organizations represent and warrant that they have obtained verifiable parental consent and will provide required notices. Parents/guardians may exercise rights through the organization and/or sOSSiety. This section is inactive unless we explicitly enable organization features.

16) Third‑Party Sites and Services

We are not responsible for the privacy practices of third‑party websites, apps, or services linked to or integrated with the Service. Review their privacy policies.

17) How to Exercise Your Rights

Email admin@sossiety.com with your request. Tell us which right you wish to exercise and provide sufficient information for identity verification. Authorized agents may act on your behalf where permitted by law, subject to verification.

18) Changes to This Policy

We may update this Policy to reflect changes in our practices, technologies, or laws. If changes are material, we will provide notice (e.g., in‑app, email, or by posting). Your continued use of the Service after the effective date means you accept the updated Policy.

19) Contact Us

  • Email: admin@sossiety.com

Appendix A — California Notice at Collection

We collect the following categories of personal information (PI) for the purposes described in Sections 2–5: Identifiers; Customer Records (contact/payment info when applicable); Protected classification data (you may disclose, e.g., gender); Commercial information (future transactions); Internet/Network activity (usage/analytics); Geolocation (approximate; precise only if enabled); Audio/visual (if you upload); Inferences; and Sensitive PI (e.g., health‑related notes you optionally log; account credentials). We do not collect precise geolocation by default. We may share PI for cross‑context behavioral advertising but do not sell PI for money. Retention periods appear in Section 9. To learn more or exercise rights, see Section 12 and the Do Not Sell or Share link https://sossiety.com/do-not-sell.

If anything here conflicts with the Terms of Service, the Terms control as to contractual obligations; otherwise this Policy governs privacy practices.

Privacy Terms Contact Back to sossiety.com
© 2026 Sossiety LLC. All rights reserved.