Privacy policy

Last updated November 7, 2026

Dojo is run by Rec-Safe (RECSAFE), a Washington corporation ("we" and "us"). This policy says what Dojo keeps about you, why, who else sees it, and what you can do about it. It covers Dojo only; our other sites and apps have their own.

What we keep

When you use Dojo, we keep:

• your email address, your name, and your time zone, and whether you run a school, teach at one, or follow a student at one
• for a school: its name, style, about, address, phone, email, website, logo, time zone, and currency, and its programs, belts, and their requirements
• for each student, what their school enters: their name, date of birth, email, phone, a parent's or guardian's name, email, and phone, an emergency contact and medical notes (both encrypted), their program, belt, and promotions, their status and start date, their membership plan, fee, and payments, notes, and a photo
• attendance (who came to which class, on which day) and bookings
• the school's timetable, and its videos, photos, and links to videos elsewhere
• requests to try a class from a school's public page: the name, email, phone, who it's for, the class, and the message the person sends
• a sign-in log (the time, IP address, and browser), to keep accounts safe

You sign in with a one-time link emailed to you, or a passkey.

Videos and photos a school uploads are kept as they are, in a private folder for the school, and only sent to the people allowed to see each one: the school's staff and students, or anyone, for what the school makes public. Photos are re-saved first, which removes the location and other camera details saved in them.

Like any website, our servers also keep a short log of the pages asked for (with the IP address, the browser, and the time), to keep the site running and safe. We don't use analytics, advertising, or tracking services.

Why we keep it

Only to run Dojo for you: to run each school's records and members' area, to show its public page, to pass on requests to try a class, to send sign-in links and invitations, and to keep Dojo working and secure. We don't sell or rent your information, we don't show ads, and we don't use it for anything else.

Who else sees it

A school's public page shows only what the school puts on it: its name, details, programs, public classes, and the videos and photos it makes public. Nothing about any student is ever on it. Everything else needs signing in: a school's staff see its records; a student or parent sees only their own (or their children's). Students' emergency contacts and medical notes are encrypted where they're stored, with a key for each school. The people who run Dojo don't look at schools' records. A school shouldn't make public a video or photo of anyone who hasn't agreed (for a child, their parent). A video linked from YouTube or Vimeo plays from that service, and the library shows YouTube's picture for it. Everything is stored on servers in the United States.

We use these services to run Dojo, and each sees only what it needs:

• Amazon Web Services, which hosts our servers in the United States, where everything the app keeps is stored
• Postmark, which sends our emails, so it handles your email address and the message
• YouTube, which plays embedded videos, so Google sees your IP address and may set its own cookies when you play one
• Vimeo, which plays embedded videos, so Vimeo sees your IP address and may set its own cookies when you play one

We'd share information if the law makes us (a court order, for example), or to protect someone's safety. If Rec-Safe ever handed Dojo to someone else, this policy would go with it.

Cookies

Dojo uses cookies to keep you signed in (for up to 60 days). They aren't used for advertising or tracking.

How long we keep it, and deleting it

We keep your information while you use Dojo. A school's owner can delete students, records, videos, and photos, download its records, and delete the school with everything in it. Anyone can delete their own account; a school keeps its own records of its students, and a student or parent can ask their school to remove theirs and we'll do it, apart from anything the law makes us keep (such as payment records). Server logs are kept only as long as they're needed to run and protect the site, and backups are overwritten in time.

Keeping it safe

Every page uses an encrypted connection (HTTPS). Sign-in links work once and expire, passkeys can't be guessed or phished, and students' emergency contacts and medical notes are encrypted at rest with a key for each school. No website is perfectly secure, but if something ever goes wrong in a way that puts your information at real risk, we'll tell you, and the authorities when the law requires it.

Children

Dojo isn't meant for children under 13, and we don't knowingly keep a child's information. If you think a child has given us theirs, email us and we'll delete it.

Your choices and rights

You can ask us what we keep about you, ask us to correct it, or ask us to delete it, by emailing info@rec-safe.com. We'll answer within 30 days. Depending on where you live (for example in Canada, a US state such as Washington or California, the UK, or the EU), the law may give you more rights, and we honour them for everyone.

Our servers are in the United States, so if you're elsewhere, your information is stored and handled there, under US law. In Canada, if you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Changes and questions

If we change this policy, we'll change the date at the top, and if a change is big, we'll say so on Dojo first. Questions? Email info@rec-safe.com.