Privacy Policy

Effective: July 7, 2026 Governing law: Province of Alberta, Canada

This Privacy Policy describes how Grapplr ("we", "us", "our") collects, uses, discloses, and protects personal information about users of the Grapplr platform (the "Platform"). We are committed to handling personal information in accordance with the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA") and the Alberta Personal Information Protection Act ("PIPA Alberta").

1. What We Collect

Account and profile information: display name, email address, belt rank, stripes, weight, gender, bio, gym/academy name, languages, profile photo, and the location you provide (city, region, country, approximate or exact).

Identity verification information: to support verified profiles, we may collect and process information submitted to a third-party identity-verification provider. We do not store images of government-issued IDs on our servers; the verification provider returns only a pass/fail status.

Activity and communication content: training requests, messages between users, testimonials you write or receive, notifications, and presence (online status), subject to your privacy settings.

Technical data: IP address, browser type and version, device identifiers, approximate location derived from IP, usage logs, and cookies/local storage (including the theme preference cookie).

Payment information: when you subscribe, payment is processed by Stripe. We do not store your full card number; Stripe returns a token we use to manage your subscription.

2. How We Use Information

To operate, maintain, and improve the Platform;
To match you with compatible training partners and show your profile to other users;
To verify identities and promote safety;
To send service notifications (training requests, messages, testimonials);
To detect, prevent, and respond to fraud, abuse, and safety incidents;
To comply with legal obligations;
With your consent, for any other purpose we disclose at the time of collection.

We do not sell your personal information to third parties.

3. Legal Basis and Consent

Under PIPEDA and PIPA Alberta we collect, use, and disclose personal information with your consent. By creating an account and using the Platform you consent to the practices described in this Privacy Policy. You may withdraw consent for non-essential uses by adjusting your privacy settings or by contacting us; withdrawal may limit Platform features.

4. Disclosure

We share personal information only:

With other users, to the extent you choose to display it on your profile or exchange it in chat;
With service providers who process data on our behalf (Supabase, Stripe, Mapbox, email/SMS providers, analytics) under contracts that require confidentiality and lawful handling;
To comply with legal process or obligations, or to protect the rights, property, or safety of Grapplr, our users, or others;
In connection with a sale, merger, or transfer of all or part of our business, subject to continued compliance with this Policy.

5. Retention

We retain personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Profile photos and messages are retained until you delete them or your account. We will securely delete or anonymize personal information that is no longer needed.

6. Your Rights

You have the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Request deletion of your account and associated personal information, subject to legal retention obligations;
Withdraw consent for non-essential processing;
Lodge a complaint with the Office of the Privacy Commissioner of Canada or the Alberta Information and Privacy Commissioner.

To exercise any right, contact contact@capyco.ca.

7. Security

We use reasonable administrative, technical, and physical safeguards (encrypted storage, row-level security at the database, secure cookies, server-side validation) to protect personal information. No system is perfectly secure; we will notify affected users and the relevant privacy commissioner of a breach as required by law.

8. Children

The Platform is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have done so, contact us and we will delete it.

9. Cookies and Local Storage

We use cookies and local storage for authentication, locale preference, theme preference, and basic analytics. You can control cookies through your browser settings; some features may not work without them.

10. Third-Party Links and Services

The Platform links to and integrates with third-party services (Stripe, Mapbox, Supabase, identity-verification providers, app stores). This Policy does not cover third-party practices; review their privacy policies.

11. International Transfers

Your information may be processed on servers located in Canada, the United States, or other countries where our service providers operate. By using the Platform you consent to these transfers, which we undertake with safeguards consistent with PIPEDA.

12. Changes to This Policy

We may update this Privacy Policy. When we do, we will update the version and effective date. Material changes will require you to re-accept at your next login.

13. Contact

Questions or requests: contact@capyco.ca.

— End of Privacy Policy —