PoodyPi

Privacy policy

Last updated September 25, 2026. What PoodyPi collects, who sees it, and what you can do about it. PoodyPi is run by Phuthy Nop. Questions, or anything below you want done: supportkao@gmail.com.

What we collect

• Your account: email, password (stored scrambled, never readable), name, date of birth, and — if you add them — a photo, when you started training, and your accent color.
• Your gyms: which gyms you're in, your role, and any note you send asking to join.
• Your week: the sessions you said you're in for, and the ones you said you were at.
• What you post: posts, replies, photos, clips, captions and sparring asks.
• Messages: what you send, photos in them, reactions, group names, and when you last read a chat.
• People: your connections, who you've blocked and who you've reported.
• Your phone: a push notification token, and which notifications and privacy switches you've set.

That's it. No location, no contacts, no advertising ID, and no analytics or ad trackers in the app. The camera and microphone are used only while you're taking a photo or recording a clip.

Your date of birth

Never shown to anyone, not even your gym. PoodyPi uses it to work out what the app lets you do, fresh every time rather than once. Under 18, you can't start a gym, connect with people outside your gyms, or make a clip public. With no date of birth set, PoodyPi treats you as under 18.

Who sees what

• People in your gym: your name, photo and role, your posts and replies, the sessions you're in for, your streak (unless you switch it off) and your session count (only if you switch it on).
• Your gym's owner and coaches: all of that, plus which sessions you said you were at, your streak and session count whatever your switches say, sparring asks at their gym, and your note if you asked to join.
• Connections, people who've asked to connect with you, and people you share a chat with: your name, photo and profile.
• Other adults on PoodyPi: your name and photo, if they search for your name on their Connections page. Nothing else until you connect. Under 18, you never show up in search.
• Other gyms: nothing, except clips made public (below). One gym never sees another's members, schedule or posts.
• Anyone: your profile photo is stored at a web address that isn't locked, so anyone who has the link can open it. A clip you make public can be seen by anyone on PoodyPi, with your name and your gym's. You can only make a clip public if you're 18 or over, your gym allows public clips, and "Clips stay in the gym" is off in Privacy. Making it private again takes it back.
• Us: we can see what's stored, and look at it only to run PoodyPi, deal with a report, or when the law requires.

How we use it

To run PoodyPi: show your gym its week, deliver your posts and messages, count your sessions, send the notifications you've switched on, keep people safe, act on reports, and enforce the Terms. We don't sell your data, we don't show ads, and we don't use it to profile you.

Who else handles it

Only the services PoodyPi runs on, and only to do their part:

• Supabase: our database, file storage and sign-in.
• Resend: the sign-in and password emails.
• Google (Firebase Cloud Messaging) and Apple (Push Notification service): notifications. A message notification carries the sender's name and the start of the message.
• Your phone's built-in address search, when a gym owner looks up the gym's address.
• When a message has a link in it, our server fetches that page to show a preview. The site sees our server, not you.

Beyond that, we share data only when the law requires it, or to protect someone's safety or rights.

Keeping and deleting

• Delete your account in Settings and your profile, photo, date of birth, gyms, sessions, posts and replies, connections, blocks, clips, sparring asks, and the messages and photos you sent — from everyone's chats — go with it. If you own a gym with other people in it, hand it on first. A gym with nobody else in it is deleted with you.
• Unsend takes a message out of the chat for everyone. We keep the original until the sender's account is deleted, so we can act if it's reported.
• If an owner deletes a gym, its schedule, posts, clips and everyone's sessions there go with it.
• Leaving a gym deletes nothing. Your posts stay, and its owner and coaches can still see the sessions you went to while you were in it.
• Otherwise we keep your data while your account exists. Copies can last a short while longer in backups.

Security

Everything travels encrypted, and each gym's data can be read only by that gym's members. No system is perfectly secure, so we can't promise nothing will ever go wrong — if something does that affects you, we'll tell you.

Children

Gyms train children, and PoodyPi doesn't set a minimum age. A child under 13 should only have an account set up by, or with the permission of, a parent or guardian. Children's data is used only to run PoodyPi for their gym, never for advertising. A parent or guardian can ask to see, correct or delete their child's data at supportkao@gmail.com.

Your rights

Much of it you can do in the app: change your details, switch your streak and session count off, block, leave, or delete your account. For anything else — a copy of your data, a correction, a deletion — email supportkao@gmail.com. Depending on where you live you may have further rights, such as to object to or limit how your data is used, or to complain to a regulator.

Where it's stored

Your data may be stored and processed outside your country, where the data-protection law can be different.

Changes

When this policy changes we'll update the date above, and say so in the app when the change matters.