Privacy Policy

Do It Right Productions (“we”, “us”, “our”) builds and operates the Do It Right Productions mobile and web application (the “App”), a training, grading and tournament-management platform for ITF Taekwon-Do practitioners, instructors, umpires and event organisers.

This Privacy Policy explains what personal information the App collects, why we collect it, how we use and protect it, and the choices and rights you have. It applies to every version of the App — iOS, Android and web.

If you have any question about this policy or want to exercise any of your rights, contact us at george@doitright.productions.

We only collect information that the App genuinely needs in order to work. We never sell your personal information, and we do not run third-party advertising networks inside the App.

Account information: your name, email address and password (stored only as a salted hash by our authentication provider). Optionally, a profile photo, your belt rank, country, date of birth and the dojang you train at.

Training records: pattern progress, mastery percentages, curriculum checklists, class attendance, XP and achievement badges.

Attendance location: when — and only when — you tap the class check-in button, we read your device’s GPS position once to confirm you are within range of your dojang. We store the coordinates, the accuracy radius reported by your device and the calculated distance from the dojang. We never access your location in the background.

Tournament and grading data: competitor entries, division, age, weight, signed digital indemnity confirmations, match scores, warnings, results, grading scores, examiner verdicts and umpire exam results.

Media you upload: profile photos, album images and videos, event posters, rules documents and dojang verification evidence.

Messages: direct messages, group messages and dojang announcements you send or receive in the App, including any image or file you attach, and any abuse report you file about a message. Messages are stored so they can be delivered and so moderators can act on a report.

Communications and reports: issue reports you submit (including any screenshot you attach), and the browser/user-agent string and screen size captured with that report so we can reproduce the problem.

Technical and diagnostic data: basic usage events, device type and error information used to keep the App stable.

To create, secure and operate your account and keep you signed in.

To show your training progress, grading syllabus, patterns and achievements.

To verify class attendance and give instructors an accurate register for their dojang.

To process tournament entries, generate brackets, run live ring timing, record scores and publish official results.

To issue umpire certification and to build the world grading ranking for students and examiners.

To notify you about things you asked for — your upcoming match, your ring assignment, grading reminders and registration approvals.

To diagnose faults, prevent abuse and improve the App.

We do not use your data for automated decision-making that has a legal effect on you, and we do not build advertising profiles.

Where data-protection law (including the POPI Act in South Africa, the GDPR in the EU/UK and comparable laws elsewhere) requires a legal basis, we rely on: performance of a contract (operating the account and event services you asked for); your consent (location check-ins, optional profile details and media uploads); our legitimate interests (security, fault diagnosis, preventing abuse); and compliance with legal obligations.

Where we rely on consent, you may withdraw it at any time — see “Your rights and choices” below.

Other app users: your name, belt rank, dojang and any album content you publish may be visible to other users. Competitor names appear in published tournament brackets and results, as is standard practice for martial-arts competition.

Your instructors and dojang: instructors of a dojang you join can see your attendance records, check-ins and grading progress for that dojang.

Event organisers and officials: for events you enter, organisers and appointed officials can see your entry details, division, signed waiver confirmation and scores.

People you message: anyone in a conversation you join can read the messages and attachments you send there. If a message is reported, it is shown to a moderator so the report can be assessed, and abusive accounts can be blocked or banned from messaging.

Service providers: we use a cloud hosting provider (application hosting, database and authentication) and Supabase (media storage) to run the App. They process data strictly on our instructions under their own security obligations.

Legal: we may disclose information where we are legally required to do so, or to protect the rights, safety and property of our users or ourselves.

We do not sell, rent or trade your personal information to anyone, ever.

The App is designed for a martial-arts audience of all ages, which includes young children. A child should only use the App with the involvement of a parent, guardian or instructor, and a parent or guardian must set up and supervise the account of a child under 13.

Messaging is optional. We recommend that a parent or guardian supervises a child’s use of messaging; every message can be reported, every account can be blocked, and we ban accounts that abuse it.

Where a competitor is under 18, the tournament indemnity/waiver must be completed and digitally signed by a parent or guardian — the App enforces this in the entry flow.

We do not knowingly collect more information from a child than is needed to train and compete. A parent or guardian may contact us at any time to review, correct or delete a minor’s information.

We keep your account information for as long as your account is active. If you ask us to delete your account, we remove your personal profile data, media and attendance records.

Competition and grading results may be retained in anonymised or name-only historical form where they form part of an official event record or ranking, as is normal for sporting results.

Diagnostic and issue-report data is kept only as long as needed to resolve the issue.

All traffic between your device and our servers is encrypted in transit using HTTPS/TLS. Passwords are never stored in plain text. Access to records is enforced at the database level by row-level security rules, so users can only read and write the records they are entitled to.

No system is perfectly secure. If we ever become aware of a breach affecting your personal information, we will notify you and the relevant regulator as required by law.

Our hosting and storage providers may process data on servers outside your country. Where data leaves your jurisdiction, we rely on our providers’ contractual safeguards to ensure a comparable level of protection.

You can access and correct most of your information directly in the App on your Profile screen.

You may request a copy of your data, correction of inaccurate data, deletion of your account and data, restriction of processing, or withdrawal of consent (for example, for location check-ins).

To make any of these requests, email george@doitright.productions from the address on your account. We respond within 30 days.

You may also disable location and camera permissions for the App at any time in your device settings — the rest of the App continues to work.

If you believe we have not handled your information properly you may lodge a complaint with your local data-protection authority (in South Africa, the Information Regulator).

You can delete your account yourself, inside the App: open your Profile screen, scroll to the bottom and tap “Delete Account”. You confirm your own email address and type DELETE, and the account is erased immediately — nothing is queued and no email to us is needed.

You can also request deletion by emailing george@doitright.productions with the subject line “Delete my account”, from the email address registered on your account, if you can no longer sign in.

Deletion permanently removes your profile, photos, album media, attendance records, check-in locations, messages, issue reports and umpire exam records. This cannot be undone.

Where an event result is part of an official public competition record, the result may remain with your name attached as a historical sporting record; everything else is removed.

The App stores a small amount of data on your device — an authentication token to keep you signed in, and cached preferences such as your chosen grading-syllabus country and recently viewed patterns. These are functional, not advertising, and clearing your browser storage removes them.

We may update this policy as the App evolves. The effective date at the top of this page always reflects the current version, and material changes will be announced in the App.

Do It Right Productions — George Cry

Email: george@doitright.productions

We aim to answer every privacy request within 30 days.