Capybara mascotCapybara mascotRulla
Beta ProgramAboutFeaturesPricingContact
Sign inJoin Beta

Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your personal information.

Last updated: December 24, 2025

Table of Contents

Who is ResponsibleInformation We CollectLegal Basis for ProcessingHow We Use InformationInformation SharingInternational Data TransfersData SecurityData RetentionYour RightsChildren's PrivacyMobile App PrivacyCookies & TrackingThird-Party ServicesPolicy UpdatesContact Information
Table of Contents
Jump to any section of our privacy policy

Introduction

RULLA ("we," "our," or "us") is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BJJ academy management platform and related services.

By using RULLA, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

Who is Responsible for Your Data

Rulla Pty Ltd is the data controller for all information collected through our platform. We determine what data is collected, how it's stored, and how it's protected.

What RULLA is Responsible For

  • Designing the platform and data fields
  • Secure storage and protection of all data
  • Compliance with privacy laws
  • Responding to data access and deletion requests

Your Academy's Role

  • Entering and managing student information
  • Deciding which optional fields to use
  • Managing who has access within their academy
  • First point of contact for their students

Data Requests

For data access, correction, or deletion requests, you can contact us directly at privacy@rullabjj.com. You may also contact your academy, who can assist with requests related to your account.

Information We Collect

Personal Information

We collect personal information that you provide directly to us, including:

  • Account information (name, email address, phone number)
  • Student and family member information
  • Payment and billing information
  • Academy information and preferences
  • Communications with our support team

Health Information

We collect limited health information necessary for student safety:

  • Injuries: Current or past injuries that may affect training participation
  • Medical conditions: Allergies and conditions instructors should be aware of
  • Emergency contacts: Contact information for medical emergencies

This information is only accessible to your academy's authorized staff and is used solely for safety and emergency response.

Automatic Information

We automatically collect certain information when you use our platform:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Performance and error logs
Legal Basis for Processing

We process your personal information based on the following legal grounds under applicable privacy laws:

Contract Performance

Processing necessary to provide our academy management services, including student enrollment, class scheduling, progress tracking, and membership management.

Consent

We obtain explicit consent for marketing communications, optional data collection, health information, and processing data about children under 13.

Legitimate Interest

Processing for platform security, fraud prevention, service improvement, and customer support where it does not override your fundamental rights.

Legal Obligation

Processing required to comply with tax laws, financial regulations, court orders, and other legal requirements in Australia and applicable jurisdictions.

How We Use Information

We use the information we collect for the following purposes:

Providing and maintaining our services
Processing payments and managing subscriptions
Communicating with you about your account
Providing customer support
Improving our platform and services
Detecting and preventing fraud
Complying with legal obligations
Sending marketing communications (with consent)
Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, such as payment processors and cloud hosting services.

Legal Requirements

We may disclose information when required by law, regulation, legal process, or government request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

International Data Transfers

RULLA operates globally and may transfer your personal information to countries outside your country of residence. Here's how we handle international transfers:

Data Storage Regions

Australia (Primary)
United States
European Union

Transfer Safeguards

Standard Contractual Clauses (SCCs): We use EU-approved SCCs for transfers from the EU/EEA to countries without an adequacy decision.
Data Processing Agreements: All third-party processors have signed agreements ensuring data protection standards.
Encryption: Data is encrypted in transit and at rest across all regions.

For Australian Users: In accordance with the Privacy Act 1988, we take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

SSL/TLS encryption
Secure data centers
Access controls
Regular security audits
Data backup and recovery
Employee training
Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

Account data: Retained while your account is active and for 3 years after closure
Financial records: Retained for 7 years as required by law
Support communications: Retained for 2 years
Your Rights

Your privacy rights depend on your location. We respect and support rights under all applicable privacy laws.

GDPR Rights (EU/EEA)

Right to access your data
Right to rectification
Right to erasure ("right to be forgotten")
Right to data portability
Right to object to processing
Right to withdraw consent

You may lodge a complaint with your local data protection authority.

πŸ‡¦πŸ‡Ί Australian Privacy Principles

Access to personal information
Correction of personal information
Right to anonymity where practicable
Opt-out of direct marketing

You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

πŸ‡ΊπŸ‡Έ CCPA Rights (California)

Right to know what information is collected
Right to delete personal information
Right to opt-out of sale of data
Right to non-discrimination

Note: We do not sell personal information. California residents may exercise rights via the contact details below.

How to Exercise Your Rights

For academy members: Contact your academy first, as they are the data controller for your information.

For direct inquiries to RULLA, contact us at privacy@rullabjj.com. We respond to requests within 30 days.

Mobile App Privacy

Our mobile apps (iOS and Android) have specific privacy considerations:

Push Notifications

We request permission to send push notifications for class reminders, attendance alerts, and important updates. You can disable notifications at any time in your device settings.

Location Services

Location access is only requested for class check-in verification. We do not track your location in the background. You can deny location access and use manual check-in instead.

Biometric Authentication

Face ID and Touch ID data is processed entirely on your device using Apple/Google's secure enclave. We never receive, store, or transmit your biometric data. Only a success/failure result is used for authentication.

Device Permissions

  • Camera: Profile photos, document scanning
  • Photo Library: Uploading images
  • Calendar: Class schedule sync (optional)

All permissions are optional and requested only when needed. You can manage permissions in your device's Settings app.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

Essential Cookies

Required for the platform to function properly, including authentication and security features.

Analytics Cookies

Help us understand how users interact with our platform to improve performance and user experience.

Preference Cookies

Remember your settings and preferences for a more personalized experience.

You can control cookie preferences through your browser settings, though this may affect platform functionality.

Children's Privacy

Important: Our platform is designed for BJJ academies and may include information about minor students.

We take special care when handling information about children under 13 years of age:

  • We require verifiable parental consent before collecting information from children under 13
  • Parents can review, request deletion of, or refuse further collection of their child's information
  • We limit collection to information necessary for academy management purposes
Third-Party Services

Our platform integrates with trusted third-party services to provide functionality:

Stripe

Payment processing and subscription management. View their privacy policy

Supabase

Database and authentication services. View their privacy policy

Vercel

Platform hosting and performance monitoring. View their privacy policy

PostHog

Analytics and user experience insights. View their privacy policy

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we do:

We will post the updated policy on this page
We will update the "Last updated" date at the top of the policy
For significant changes, we will notify you via email or platform notification
Your continued use of the platform constitutes acceptance of the updated policy
Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email

privacy@rullabjj.com

General Support

support@rullabjj.com

Mailing Address

RULLA PTY LTD

Melbourne, VIC

Australia

Response Time

We aim to respond to privacy inquiries within 30 days.

Questions About Privacy?

We're here to help. Contact our team for any privacy-related inquiries.

Contact UsView Terms of Service

Β© 2026 RULLA. All rights reserved.

The Ultimate BJJ Academy Management Platform

Privacy Policyβ€’Terms of Service