Privacy Policy

The portal may collect account details, contact information, student profiles, parent/guardian connections, attendance, belt progress, Sensei feedback, membership status, payment references, messages, transcripts, and media consent records.

Payment card data should be handled by Stripe or another payment processor. Worthy Ryu should not store raw card numbers in this app.

Child student records are designed for parent/guardian visibility and school oversight. Child accounts should not have unrestricted private messaging or private AI chat.

Parents/guardians should be able to review connected child progress, shared feedback, assigned practice, payments, announcements, and media consent status.

Public images involving minors require consent review and safe captions. Unknown or restricted media should remain private or members-only.

AI assistant prompts and responses may be retained for safety, quality, admin review, and transcript/audit purposes.

Before full launch, Worthy Ryu should verify Supabase RLS, authentication, payment processor settings, retention periods, data export/deletion workflows, and legal/privacy language with qualified counsel.