Privacy Policy

Last updated: November 13, 2026

Roll for Rating ("the app", "we", "us") is a Brazilian Jiu-Jitsu matching and rating app. It is operated by John Keil, 10630 Maltese Point #130, Peyton, CO 80831, United States, who is responsible for the personal information described here. This policy explains what we collect, who can see it, who we share it with, how long we keep it, and your choices. Questions: hello@rollforrating.com.

Information we collect

When you create an account and use the app, we collect:

Account info: email address, password (stored by our authentication provider in hashed form), username, display name, and belt rank. You sign in with email and password only. You must be 18 or older to create an account.
Date of birth: required at sign-up. We use it to confirm that you are 18 or older, to set the age tier (adult, 13 to 17, or 12 and under) of a junior a parent adds, and to apply the protections described below. The app shows your age in years on your profile.
Profile details you choose to add: a profile photo (adults only) or a drawn "warrior" avatar, city, state or province and country (we work out the continent from these), your gym, body weight, gender (male or female, used for divisions), links to your Instagram, TikTok, YouTube and Facebook accounts, and whether you are open for a challenge.
Matches and activity: challenges you send or receive, opponents, referee, result, finishing method or submission, the result each player reports for a match without a referee, rating changes, rating points put on a match, any meeting time and place typed into a challenge, your gyms, leagues and tournaments (including divisions and teams), quests, streaks, achievements, friends, reactions, and which matches you have viewed.
Messages: chat messages in a match (seen by the people in that match and their parents or guardians, under the rules for users under 18 below) and announcements a league organizer posts (seen by that league's members).
Photos and videos: your profile photo, and match videos that a competitor or the referee records in the app or picks from their phone. Videos include sound and show everyone on camera, which can include users under 18. We access your camera, microphone or photo library only when you choose to take or attach a photo or video. We add a picture or video to your photos only when you tap Save, and we never read your photos to do it.
Information you give us about other people: a parent or guardian enters a junior's first name, date of birth, belt, gym and, optionally, weight and gender. The parent or guardian also chooses whether the junior is visible and which adults may message the junior. A tournament host can enter a guest competitor who has no account (name, belt, weight and gender). A gym that applies for a gym account gives the gym's name, address, website link and owner's name.
Purchases: your plan, whether your subscription is active, which store it came from (Apple or Google), transaction identifiers, purchase and expiry dates, the end of your account's free period, and any complimentary access we gave your account. Apple or Google takes the payment, and we never see or store your card or payment details.
Referral and invite codes: the referral or invite code you signed up with. For founding members in our affiliate program we also keep monthly statements of the subscribers who joined with their code and paid that month, and records of the payments we made to them. We pay founding members 50% of net revenue. Net revenue is subscription revenue minus a flat 30% store and platform fee.
Notifications: your device's push notification token and platform, the notifications we show you in the app, and your notification settings.
Usage data: events the app itself records (for example, that you opened the subscription screen or sent a support request), stored with your user ID, platform, app version, and an ID for that app launch. We use it only to improve the app.
Diagnostics: crash reports and performance data. We set them up not to include your name or email, but they can include the screens you visited, and screen addresses can contain user IDs.
Support requests, reports and blocks: the messages you send us from Help & Support with your account email, the reports you file about other users or content (with a copy of the reported content as it was at that moment), and the users you block.

We do not collect GPS or precise location, your contacts, or advertising identifiers, and we do not use third-party advertising or tracking.

How we use it

To run the app: matching, ratings, leaderboards, leagues, tournaments, gyms, messaging, match videos, and notifications.
To apply the protections for users under 18 (see below).
To check subscriptions and free access, prevent abuse, and keep the service secure.
To review reports and disputed results. Our admins see the reported content, and for a disputed match the two players' reports and the match video. Reported content is not hidden automatically; an admin decides.
To mask strong slurs and profanity in text other users can see (English, Spanish, Portuguese and French).
To screen new profile photos for nudity and gore before other users can see them. A photo is shown to others only after it passes; anything flagged stays hidden and an admin reviews it. If a check cannot run, the photo stays hidden until the check runs. Match videos are not screened before they appear; anyone can report a video, and an admin reviews the report.
To answer support requests and to improve the app.

We do not sell your personal information, and we do not share it for advertising.

What other users can see

Adults are visible to every signed-in user. Users can see your display name, username, belt, rating, record, age, weight and weight class, city, gym, photo or avatar, and your social media links. Adults who compete appear on leaderboards and in user lists. Today, anyone who can see your profile can also read the rest of your profile record through the app's data interface, not only what the app shows on screen. That includes your full date of birth, gender, state and country.
Users under 18 are hidden unless their parent or guardian turns on visibility (see below).
New profile photos are shown to others only after they pass screening (see How we use it). Until then only the uploader and our admins can see them. Match videos can be seen as soon as they are uploaded.
Your matches. When every competitor in a match is visible, any signed-in user can read the match record: who took part, the referee, the result and rating changes. A meeting time and place typed for a match can be read only by its two competitors, its referee, the parent or guardian of a competitor under 18 and our admins. Other matches can be seen only by the competitors, the referee and the competitors' parents or guardians. Matches marked public, and their videos, appear in the Watch feed. A match with a child 12 or under or with a guest competitor is never public.
Share links on our website. A match you publish publicly can be opened by anyone who has its link, on our website, with no account. The page shows both players' names, usernames, belts and gyms, the result, the rating change, the date, and the newest match video while it is kept. A match with a user under 18, a guest competitor or a banned user has no page. A link to the profile of an adult who competes shows their name, username, belt, rating, record, gym and drawn avatar, never a photo. Kids and teens never have a public page. An open tournament or league shows its name, place, dates, format and number of entrants, never a person or its join code. These pages ask search engines not to list them. When you tap Share, the picture or video goes only where you send it. We never post for you.
Leagues, tournaments and gyms. Your display name is shown in the entrant lists, standings and brackets of the leagues and tournaments you join and to the members of your gym.
Referral codes. If you sign up with a founding member's referral code, that founding member can see that you joined with it, your name (when your profile is visible to them), and whether you currently have a paid subscription.
Guest competitors a tournament host enters are shown to everyone else by first name and last initial (for example, "Ana S."). Only the host sees the full name.

Service providers

We share data only with companies that run parts of the app for us:

Supabase: our database, sign-in (including account emails such as password reset codes), file storage for profile photos (and for videos uploaded from a web browser), and server functions. It holds all the information listed above.
Apple and Google: take subscription payments through the App Store and Google Play. Our server checks each purchase with them and receives their notices about renewals, cancellations and refunds; we receive your subscription status and transaction identifiers, never your payment details. They also deliver push notifications to your phone.
Expo: our push notification service. It receives your device's push token and the text of each notification, such as a user's name and the first 60 characters of a chat message sent to you.
Cloudflare: stores match videos (Cloudflare R2) in private storage. The app, and a match page on our website, play or upload a video through a signed link that stops working within one hour.
Anthropic: we send profile photos to Anthropic's AI service (Claude) for two checks. Before an adult's photo is uploaded, the service checks that it shows one real human face. After any new profile photo is uploaded, the service checks it for nudity and gore. The checks answer only whether the photo is acceptable and why; they are not used to identify anyone, and we do not create or keep a face template. Each account can run up to 10 face checks a day, and we keep only that day's count.
Sentry: crash and performance monitoring (see Diagnostics above).
Resend: delivers the emails we send, such as account and password reset emails. It receives your email address and the content of the email.
Render: hosts this website, which has no forms or trackers.

These providers may store and process data in the United States and other countries.

Users under 18

Parents add them. Users under 18 cannot create their own account. A parent or guardian with an adult account adds a child or teen as a managed junior and operates the junior's profile; the junior has no login of their own. The junior's display name is cut to a first name.
Hidden unless a parent opts them in. A junior's profile is hidden from other users until the parent or guardian turns on visibility. Turning it on records the parent's consent; turning it off hides the junior again. While hidden, the junior is seen only by their parent or guardian and by the people the junior takes part with: the other competitor and the referee of a match the junior's side started or accepted, and that competitor's parent; the host and mat referees of a tournament the junior entered; the organizers of a league the junior belongs to; and others in the same division. Elsewhere a hidden junior is left out of lists or shown as "Hidden junior". The app does not show social media links for juniors.
Juniors do not message. Users under 18 do not send or receive messages. In a match with a junior outside tournaments and leagues, the junior's parent or guardian, the other side (or that junior's parent) and the referee write to each other in the match chat, with no separate approval. A tournament or league match with a junior has no chat. A parent or guardian can read every chat of a match their junior is in.
Match rules. Users under 18 cannot put rating points on a match. A match with a user under 18 must have a referee. The referee's profile must show blue belt or higher, and the referee cannot be the junior's own parent or guardian. Children 12 and under can only be matched with other users under 18, and their matches are never public. A parent can challenge another junior for their own junior; the other junior's parent accepts or declines.
Photos and videos. The app does not let users under 18 use a profile photo; they choose a drawn avatar. Match videos, however, can show users under 18, and are deleted 14 days after upload. Only a junior's parent or guardian can share or save a video of the junior's match outside the app.
Kids' leaderboard. A child 12 or under with at least one match appears on the kids' leaderboard by first name and rating. Only users under 18 and parents or guardians can open that leaderboard. The child is listed only when the child is visible or the viewer may see them.

For parents and guardians

What we collect about your child: the information you enter (first name, date of birth, belt, gym, and optionally weight and gender), your visibility and message approval choices, the child's matches, ratings and activity, messages in their match chats, and match videos in which the child appears.
Your choices: in the app you can review and change your child's profile, turn visibility on or off, write in your child's match chats yourself (your child does not send or receive messages), take back a message approval you gave before, and remove your child's profile (this deletes it the same way as an account deletion: your child's settled matches stay for the other players, shown as "Removed user").
Your requests: you can ask us to review or delete your child's information, including match videos, or to stop collecting it, at hello@rollforrating.com or by mail to the address below.

How long we keep it

We keep your information while your account is active.
In-app notifications are deleted after 30 days.
Match videos are deleted automatically 14 days after they are uploaded.
Usage events are deleted after 400 days.
Profile photo checks: we keep only the current day's count.
A guest competitor stays with the tournament record. The host can remove a guest who has no recorded bouts; to remove any other guest, email us.
When you delete your account, see below for what is removed and what is kept.
Database backups kept by our hosting provider are replaced on a rolling basis.

Deleting your account

You can delete your account at any time from Profile → Delete account. The same happens to the profile of each junior you manage.
What is removed: your account and profile (name, username, photo, date of birth, social links, gym and location), your photos, every video on your matches (whoever uploaded it) and every video you uploaded, every message you wrote in match chats and league announcements, your reactions and views, the notifications to you and about your matches, your push tokens, your subscription record and any complimentary access we gave your account, your referral and invite codes (users you gave elite access keep it for 30 days, then it ends unless they subscribe), your friends and blocks, your league and tournament entries, your season scores and wager totals, your message approvals, your usage data and support requests, and the leagues, tournaments and gyms you created (for everyone in them; their matches stay). You disappear from every leaderboard. Matches that were still open are cancelled, with no rating change.
What is kept: your settled matches stay in the other players' history, with your side shown as "Removed user" and no link to you: the date, result, method, both players' ratings before and after, any rating points put on the match, the referee, and the notes and meeting plan. Cancelled and declined challenges with you stay the same way, as cancelled. Tournament bouts you fought stay in their brackets the same way. The other players' own messages in those match chats stay. Matches you refereed keep your display name as referee. Reports you filed and reports other users filed about you stay, without a link to your account, so a case can still be reviewed. If a stored file cannot be deleted at that moment, we keep its storage location and retry every hour until it is gone.
Deleting your account does not cancel your subscription. Cancel it in your App Store or Google Play account settings. Apple and Google keep their own purchase records.
You may also email hello@rollforrating.com to request access to or deletion of your data.

Changes

We may update this policy. We will change the date above and, for material changes, tell you in the app.

Contact

John Keil (Roll for Rating)
10630 Maltese Point #130
Peyton, CO 80831
United States
hello@rollforrating.com