Privacy Policy

Overview

What This App Does

Sanbo is a dojo management app built for students, instructors (Sensie/Sempai), and administrators of Sanbo Ken Kai Goju Ryu Karate Do in India. It handles attendance, grading events, curriculum progress, and dojo communication.

Data

Data We Collect

We only collect what's needed to run the dojo. We never sell or share your data.

Category	Fields	Why
Account	Name, email, profile photo	Google Sign-In & profile setup
Dojo Profile	Full name, contact, age, DOB, dojo	Roster & cohort management
Medical	Blood group, allergies, medications	Student safety during training
Emergency	Contact name & phone	Emergencies & injuries
Training	Attendance, grades, curriculum, leave	Progress tracking & grading
App Logs	Crash logs, performance metrics	Bug fixes & stability

We do not access your location, SMS, call logs, microphone, or camera (except photo library for profile pictures). No payment data is ever collected.

Children

Children's Privacy

Many of our students are minors. Their profiles are created only under guardian supervision. Student data is accessible solely to their dojo admin and instructor — no marketing or tracking applies to children.

If you believe a minor's data was collected without proper consent, contact us immediately for removal.

Infrastructure

How Data is Stored & Shared

All data is stored securely on Google Cloud / Firebase:

Firebase Auth — handles Google Sign-In. We never see your password.
Cloud Firestore — student records with role-based access rules.
Firebase Storage — profile photos only (safe formats, max 5 MB).
Analytics & Crashlytics — anonymous crash & usage data only.

We do not share data with advertisers or third parties. See Google's Privacy Policy for infrastructure details.

Retention

Data Retention & Deletion

Data is kept while you are active in the dojo. To delete your data:

Students or guardians can request deletion by contacting their Dojo Sensie via any medium, or by following our Data Deletion Request Guide.
Admins can permanently remove records from the system.
All data is erased within 30 days of a deletion request.

Security

All communication is encrypted via HTTPS/TLS. Firebase Security Rules ensure students can only access their own data, and instructors only see students from their dojo.

Compliance

DPDP Act Compliance (India)

We comply with the Digital Personal Data Protection Act, 2023. Data is processed only for dojo administration, with your consent. You may access, correct, or withdraw consent at any time.