1. Who We Are

Mat Plus Pty Ltd (ABN 84 697 878 890) operates the Mat+ platform ("we", "us", "our"). Mat+ is a software platform used by Brazilian Jiu-Jitsu academies ("Academies") to manage their members, attendance, curriculum, and billing.

This policy applies to two groups:

Academy Operators — the business owners and coaches who use Mat+ to run their academy.
Academy Members — students and guardians whose data is entered into Mat+ by or on behalf of an Academy.

2. How the Responsibility Is Split

Mat+ is a data processor on behalf of each Academy (the data controller). This means:

The Academy is responsible for obtaining lawful consent from its members to collect and store their personal information in Mat+, and for answering member enquiries about that data.
Mat Plus Pty Ltd is responsible for the security and operation of the platform itself.

If you are an Academy Member and have questions about your data, please contact your Academy first. If you cannot resolve the matter with the Academy, you may contact us at privacy@matplus.app.

3. What We Collect

3.1 Academy Operator Data

When an Academy signs up, we collect the name, email address, business name, ABN/ACN (where provided), billing details, and any configuration data entered into the platform.

3.2 Academy Member Data (entered by the Academy)

Full name, date of birth, contact details (phone, email), and address.
Emergency contact name and phone number.
Belt rank, stripe count, and attendance history.
Membership plan and payment status (not card numbers — see Section 6).
Guardian information for members under 18.
Optional: injury notes, competition records, and coach notes.

3.3 Health Information

Injury notes and any health-related information entered into Mat+ are sensitive information under the Privacy Act 1988 (Cth). Academies must obtain specific consent from members before recording this information. Mat+ provides a consent mechanism for this purpose.

3.4 Automatically Collected Data

We collect server logs (IP addresses, browser type, pages visited) for security and performance monitoring. We use session cookies to keep you logged in; no third-party advertising cookies are used.

3.5 First-Party Website Analytics

Mat+ runs its own first-party, cookieless analytics on our public pages (such as the home page, pricing, blog and comparison pages). We record the page visited, the referring website, campaign parameters in the link you followed, your device type, and your approximate country. We do not store your IP address, do not set analytics cookies, do not use any third-party analytics or advertising trackers, and cannot identify you personally from this data. A random, short-lived key in your browser tab is used only to avoid counting the same visit twice.

4. How We Use Your Information

To provide, operate, and improve the Mat+ platform.
To process Academy subscription payments and issue invoices.
To send transactional emails (e.g., password resets, billing receipts).
To support Academy Operators when they contact us for help.
To monitor platform security and investigate misuse.

We do not sell personal information. We do not use Academy Member data for our own marketing.

5. Disclosure of Information

We may disclose personal information to:

Sub-processors — cloud infrastructure (Replit, Google Cloud), email delivery (Resend), error monitoring (Sentry), and AI support services (OpenAI) — each bound by data processing agreements.
Payment processors — Stripe and Ezidebit process payments on behalf of Academies; we share only the data required to process a transaction.
Law enforcement or regulators — when required by law or to protect the safety of users.

Some sub-processors are located outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure it receives equivalent protection.

6. Payment Security

Mat+ does not store credit card numbers or bank account numbers. Payment card transactions are handled directly by Stripe using its PCI-DSS-compliant infrastructure. Direct debit details for Ezidebit are handled by Ezidebit under their own compliance obligations. Mat+ stores only a tokenised reference to the payment method.

7. Data Security

We implement industry-standard technical and organisational measures including encrypted connections (TLS), access controls, session management, and regular security reviews. Despite these measures, no system is completely secure and we cannot guarantee absolute security.

8. Data Retention

We retain Academy Operator data for the duration of the subscription and for a reasonable period afterwards for legal and billing purposes. Academy Member data is retained as long as the Academy's account is active. Upon account termination, we provide a data export on request and delete or anonymise remaining data within 90 days.

You can request deletion of your own account and personal data at any time from matplus.app/delete-account, or instantly from Settings → Delete my account when logged in. For legal and accounting obligations we retain a minimal record of past payments and any signed waivers or consents; these no longer contain your contact details.

9. Your Rights (Australian Privacy Act)

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate information.
Make a complaint about how we have handled your information.

Academy Members should direct these requests to their Academy in the first instance. Academy Operators may contact us at privacy@matplus.app. We will respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

10. Children's Privacy

Mat+ may store data about members under 18 years of age on behalf of Academies. It is the Academy's responsibility to obtain appropriate parental or guardian consent before entering a child's data into the platform. Mat Plus Pty Ltd does not knowingly collect data about children directly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to Academy Operators by email or in-platform notification at least 14 days before they take effect. The date at the top of this page will always reflect the most recent version.

12. Contact Us

Privacy enquiries: privacy@matplus.app

Mat Plus Pty Ltd, ABN 84 697 878 890

Privacy Policy