Privacy policy

Introduction

Budofy is created and operated by Spicyfy Ventures LLC ("Budofy," "we," "our," or "us"). We provide an all-in-one software platform for martial arts schools and fitness academies. This Privacy Policy describes how we collect, use, store, and share your personal information when you visit our website at budofy.com, access our web platform, or use our mobile applications.

By creating an academy account, logging into the platform, or using our services, you agree to the collection and use of information in accordance with this policy.

Information we collect

We collect information to deliver effective academy management tools and support your school operations:

• Account and profile details: Name, business name, email address, phone number, physical address, and login credentials when an academy owner, instructor, or student registers.
• Student and guardian data: Student names, birth dates, attendance records, emergency contacts, parent or guardian contact information, and rank progression histories entered by academy administrators.
• Curriculum and progression tracking: Belt ranks, video access history, grading outcomes, and skill milestone evaluations.
• Billing and payment information: Payment transaction metadata, subscription tiers, invoice records, and billing contact details. Credit card numbers and bank details are processed directly by our payment processor (Stripe) and are never stored on our application servers.
• Usage and technical logs: IP addresses, browser types, device identifiers, operating system versions, and page interaction timestamps.

How we use your information

We use collected information for clear operational purposes:

• To provide and maintain your academy account and multi-program setup.
• To enforce belt-rank access controls so students only view curriculum assigned to their rank level.
• To process subscription billing, merchandise purchases, and event tickets.
• To send operational notifications, billing receipts, security alerts, and customer support responses.
• To monitor platform stability, prevent fraud, and maintain security across accounts.

How we share your data

We do not sell, rent, or trade your personal data. We only share information with trusted third parties under strict confidentiality and security commitments:

• Payment processors: Stripe processes tuition, subscriptions, and marketplace purchases.
• Cloud infrastructure providers: Google Cloud Platform and Firebase host our secure database, authentication, and file storage systems.
• Communications services: Email and SMS delivery services used exclusively to send transactional messages and support updates.
• Legal compliance: If required by law, court order, or governmental authority to protect the rights, property, or safety of users.

Student data and minor protection

Martial arts academies frequently enroll minor students. Academy owners and instructors act as data controllers for student records in their respective schools. We act as a data processor. We maintain administrative and technical safeguards to keep minor student information safe and confidential. Parents or legal guardians may contact their academy or email our support team to inspect, correct, or request deletion of their child's records.

Data security and retention

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, loss, or alteration. All data transmissions are encrypted using HTTPS/TLS. We retain your personal data only as long as necessary to fulfill the operational purposes described in this policy or to comply with legal obligations.

Your privacy rights

Depending on your jurisdiction (such as California or the European Union), you may have specific privacy rights, including:

• The right to access and receive a copy of your personal data.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of your personal records.
• The right to export your academy data in a standard digital format.
• The right to withdraw consent for optional marketing communications at any time.

To exercise any of these rights, contact us at privacy@budofy.com.

Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our platform or legal requirements. We will post updated versions on this page with a revised "Last updated" date. Continued use of Budofy following any update indicates your acceptance of the revised policy.