Privacy Policy
Last updated: 23 July 2026
1. Who we are and what this covers
TKNQ ("TKNQ", "we", "us") builds software for Brazilian Jiu-Jitsu and martial-arts gyms: MyGym, a web platform gym owners and coaches use to run billing, attendance, and member retention; and MyCoach, a mobile app members use for AI-assisted video analysis, attendance, and training tools. This policy covers both products, the tknq.io website, and our waitlist.
We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Two roles: your gym's data vs. your TKNQ account
Who is responsible for your information depends on how it reaches us:
- Information your gym enters about you (your member record, contact details, attendance, membership and payment status, belt rank): your gym collects this and decides how it is used. TKNQ stores and processes it on the gym's behalf, under the gym's instructions. For questions or corrections about this information, your gym is the first point of contact — we support them in fulfilling your request.
- Information you give TKNQ directly (your account, profile, uploaded videos, training journal, app activity, waitlist signup): TKNQ is responsible for this information, and this policy applies to it directly.
3. What we collect
Information you provide
- Account identity — name and email address, via Google Sign-In or email/password (authentication is handled by Google Firebase; we never see or store your password).
- Training profile — belt level, experience, age, weight, height, and training goals you choose to enter.
- Videos — sparring or competition footage you upload for analysis (see section 4).
- Training journal — private daily notes. Journal entries are visible only to you; they are not shared with your gym or coaches.
- Waitlist — the email address you submit on tknq.io.
Information your gym provides
- Member records — name, contact details (email, phone), membership tier, waiver acknowledgement, belt rank, and related notes entered by gym staff.
- Attendance — class check-ins recorded via the front-desk kiosk, QR code, or staff entry.
Collected automatically
- Device push token — so the app can deliver notifications you have enabled; removed when you sign out.
- Service logs — standard technical logs (timestamps, request metadata) used for security and reliability. We do not run third-party advertising trackers.
4. Video uploads and AI analysis
MyCoach's core feature is AI-generated coaching feedback on footage you upload. Here is exactly what happens to a video:
- Footage is stored privately in Google Cloud Storage. Access is via short-lived signed links tied to your account — there are no public URLs.
- The video is processed by an AI vision model (Google Vertex AI) to detect techniques and generate your coaching report. AI processing happens within our cloud environment; your footage is not used to train third-party AI models.
- We do not create or store facial-recognition templates or biometric identifiers. The analysis describes technique and movement, not identity.
- AI output is coaching feedback for your own training. It is informational only and is never used to make decisions with legal or similar effect about you.
- You can delete an analysis (and its video) from the app at any time.
Training partners appear in your footage. By uploading, you confirm the people visible in the video are aware of and okay with it being uploaded for your private analysis. Videos are visible only to the uploader — they are not shared with the gym, other members, or publicly.
5. Children and minors
Gyms run kids' programs, so gym staff may enter records for members under 18 (name, guardian contact, attendance). That information is collected by the gym with guardian consent, and TKNQ processes it only on the gym's behalf. Guardians can access, correct, or remove a child's record through their gym.
A MyCoach account requires you to be at least 16, or have the consent and supervision of a parent or guardian.
6. How we use information
- Provide the products: run your gym's operations (MyGym) and your training tools (MyCoach).
- Generate your AI coaching reports from footage you submit.
- Process membership payments and recover failed payments (via Stripe — see section 7).
- Send service notifications you'd expect — payment receipts and reminders, class and membership updates — by email, push, or SMS.
- Keep the services secure, debug faults, and improve reliability.
We do not sell personal information, and we do not use it for third-party advertising.
7. Service providers and overseas storage
We use a small set of infrastructure providers to run TKNQ:
| Provider | What for | What they handle |
|---|---|---|
| Google Cloud (incl. Firebase) | Hosting, sign-in, video storage, AI analysis, push notifications | Account identity, videos, app data, push tokens |
| Supabase | Database hosting | Application records (profiles, memberships, attendance) |
| Stripe | Payments | Payment details — card numbers go directly to Stripe; TKNQ never stores card numbers |
| Resend | Transactional email | Email address, message content |
| Twilio | SMS notifications | Mobile number, message content |
| Cloudflare / Hostinger | Website delivery | Standard web traffic data for tknq.io |
These providers store data in secure data centres that may be located outside Australia (including the United States). We rely on providers that maintain recognised security certifications and contractual data-protection commitments (APP 8 — cross-border disclosure).
8. Security
Data is encrypted in transit (TLS) and at rest. Video storage is private-by-default with short-lived signed access links. Production credentials are held in a managed secret store, access is role-scoped, and gym data is isolated per gym. No internet service can promise perfect security, but we design for least access and defence in depth.
9. Retention and deletion
- Your account — you can request deletion of your MyCoach account and its data (profile, videos, analyses, journal) in the app or by emailing [email protected]. We action verified requests within 30 days, except records we must keep by law (e.g. payment records).
- Individual videos/analyses — deletable in-app at any time.
- Gym member records — retained per your gym's instructions; ask your gym to remove your record.
- Waitlist — kept until launch invitations complete or you ask to be removed.
10. Your rights
You can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it — email [email protected] and we will respond within 30 days. If your request concerns a record your gym owns (section 2), we will coordinate with your gym.
If you believe we have mishandled your information, contact us first so we can put it right. You may also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
11. Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.
12. Changes to this policy
We update this policy as the products evolve — the "Last updated" date at the top always reflects the current version. Material changes will be announced in-product or by email.
See also our Terms of Service.