Privacy Policy

What we collect

Account information

To create an account you give us an email address and password, or sign in with Google. Your password is never stored or seen in plain text — our auth provider, Supabase, stores only a salted hash. If you use Google to sign in, Google shares your email address and basic profile (name, avatar) with us; we don't see your Google password.

Your training data

Everything you log inside the app — positions, techniques, confidence levels, notes, reactions — is stored against your account in our database and protected by row-level security, meaning only your own account can ever read or write it. We don't view, analyze, or share the content of what you log.

Messages you send us

If you use the contact form or the in-app "Send Feedback" option, we receive your email address and whatever you wrote, delivered to us via Resend, our email provider.

Usage analytics

We use Vercel Analytics to see aggregate traffic (like page views) and a small set of product events — account created, signed in, technique logged, feedback sent, and similar. These events are not tied to your name or email and aren't used to build a profile of you; they exist so we know whether the app is actually being used.

Cookies & local storage

We use one essential cookie, set by Supabase, to keep you signed in — it's required for the app to function and isn't used for tracking or advertising. Your light/dark theme preference is saved in your browser's local storage and never leaves your device. Vercel Analytics is cookieless. We don't use advertising cookies or cross-site trackers of any kind.

Third parties we rely on

We don't sell or rent your data to anyone. We do use a small number of infrastructure providers to run the app, each only for the specific job below:

• Supabase — hosts our database and handles authentication.
• Resend — delivers transactional email (confirmation, password reset) and messages sent via our contact/feedback forms.
• Vercel — hosts the app and provides the analytics described above.
• YouTube (Google) — if you search for technique clips, your search terms are sent to YouTube's API to find matching videos; playing a clip loads a YouTube video player, which is then subject to Google's own privacy policy.

How long we keep it

We keep your account and training data for as long as your account exists. If you'd like your account and everything in it deleted, contact us (see below) and we'll remove it — we don't currently have a fully self-serve delete button in the app, but we will action a deletion request promptly.

Children

My Open Mat isn't directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions, or want your data deleted? Reach us through the contact form, or via Send Feedback inside the app.