Privacy Policy
Last updated September 29, 2026
Information We Collect
We collect information you provide directly, including your name, email address, gym details, and payment information when you create an account. We also automatically collect usage data, device information, and cookies when you interact with our platform.
When enabled, Vercel Web Analytics on public discovery pages helps us understand which pages people visit and how they find OpenMat. We remove search parameters and fragments from measured page URLs; feedback content, email addresses, and search coordinates are not included in these page URLs. Public feedback is saved for our team to review through our support system. An optional email lets us reply about your report.
For gyms running our PIN check-in kiosk, we collect attendance records keyed to the PIN-issued member ID. For the photo feed, we collect class photos uploaded by coaches and the auto-tagging metadata associated with them.
In the OpenMat iPhone app, optional anonymous product analytics count a limited set of journey steps, such as opening search results or saving a waiver receipt. These events use an app-generated random identifier and do not contain your name, email, account ID, search or location text, waiver answers or signature, feedback text, gym names, or viewed listing identifiers. You can turn product analytics off in Data & analytics; doing so removes the identifier from that iPhone.
To create or sign in to an account in the OpenMat iPhone app, you give your mobile number and we text a one-time sign-in code to it through our SMS provider. We use the number to sign you in and protect your account. It is not used for marketing, is not added to any gym's text-message program, and does not by itself show that you own or manage a gym. The email address you add is kept as an unverified contact address unless you verify it for web sign-in.
When you use address suggestions while completing a waiver, the street text you enter is sent to Google Maps to find matching addresses. You can enter your address manually instead. We save the address you choose or enter with your signed document; we do not use address suggestions for advertising or request your device location for them. Google's Privacy Policy and Maps terms apply to its service.
If you claim a gym listing, we keep the details you submit, such as your name, role, contact email, phone number, and message, and use them to confirm your authority through the gym's independently listed public contact information.
If the iPhone app cannot continue, it may send a one-way technical fingerprint with the app and operating-system versions. It does not send the error message, screen contents, or a persistent identifier when product analytics is off.
On public gym listings, we count daily unique profile views and visitor-paperwork starts so a gym can see the referrals OpenMat generated. We create a one-way keyed fingerprint from the network address and browser user agent, then discard those raw values. Gym staff see aggregate counts, and we do not use these events for advertising or tracking across other websites.
How We Use Your Information
Your information is used to provide and improve our services, process transactions, and communicate with you about your account. We may also use aggregated, anonymized data to analyze trends and enhance the overall platform experience.
Native product analytics and crash diagnostics are retained for no more than 90 days and are not used for advertising or tracking you across other companies' apps or websites.
We send transactional email and SMS (signup confirmations, password resets, billing receipts, class reminders) but never market third parties to your members on your behalf.
SMS / Text Messaging
OpenMat uses your mobile number to deliver authentication codes you request for account creation, sign-in, or identity confirmation. One code is sent per request; message frequency varies with your requests. Message and data rates may apply. Reply STOP to opt out or HELP for help. Authentication requests do not enroll you in gym or promotional messages. We share mobile information with delivery providers only as needed to operate the messaging service, never for their promotional or marketing purposes. Contact support@openmat.dev for authentication assistance.
Separately, OpenMat operates an SMS messaging program on behalf of gyms that use the platform. If you provide your mobile number to a gym — in person on their intake or waiver form, or by checking the SMS consent box during signup — you consent to receive SMS messages from that gym, delivered through the OpenMat platform (operated by NightShift AI). Each message identifies the sending gym in the message body.
Types of messages you may receive:
- Class reminders (e.g., “Iron Guard BJJ: Your no-gi class starts at 7pm”)
- Schedule changes and cancellations
- Account confirmations — welcome message, kiosk check-in PIN, event registration confirmation
- Event reminders for tournaments, seminars, and open mats you registered for
- Broadcasts from your gym’s staff (gym closures, community announcements)
Message frequency: Typically 1–5 messages per week per gym, depending on your training cadence and the gym’s broadcast activity. Message and data rates may apply.
Opt-out: Reply STOP to any message to unsubscribe from that specific gym’s messages. Opting out of one gym does not affect messages from other gyms you belong to (per-gym opt-out). Reply HELP for help.
Opt-in language: The disclosure presented to you at gym sign-up reads: “By providing your phone number, you consent to receive SMS messages from [Gym Name] sent via the OpenMat platform, including class reminders, schedule changes, account confirmations, event reminders, and broadcasts. Message frequency varies (typically 1–5 per week). Message and data rates may apply. Reply HELP for help. Reply STOP to opt out. See the OpenMat Privacy Policy at openmat.dev/privacy. Consent is not a condition of any purchase.”
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing that campaign. We may share your mobile number and SMS consent status with service providers, phone companies, and vendors that help us deliver text messages. Your mobile information will not be sold or shared with third parties or affiliates for their own promotional or marketing purposes. Carriers are not liable for delayed or undelivered messages.
Questions about the SMS program? Email kevin@openmat.dev.
Data Sharing
We do not sell your personal information to third parties. We may share data with trusted service providers who assist in operating our platform, subject to strict confidentiality agreements:
- Stripe — payment processing
- Supabase — database, auth, and file storage
- Telnyx — SMS delivery
- Resend — transactional email delivery
We may also disclose information when required by law or to protect the rights, safety, or property of OpenMat, our users, or others.
Your Rights
You have the right to access and correct your personal data in your account settings. Athlete accounts can be permanently deleted inside the OpenMat iPhone app. A gym may still be legally required to retain a signed waiver or other record; deleting an OpenMat account removes the account link but does not erase a gym's required legal record. Gym-managed member records can be corrected or deleted by contacting the gym that controls them. You may also opt out of marketing communications and request a copy of data we hold about you.
Gym owners can export member rosters, billing history, and attendance data as CSV from the dashboard. Members can request a full account export by contacting support.
Contact
Questions about this policy or how we handle your data? Reach us at privacy@openmat.dev.