Privacy
Nothing of yours ever reaches us
Randori is a jiu-jitsu training log for iPhone and Apple Watch, made by Way of Yawara. The policy fits in one sentence: nothing of yours ever reaches us. We run no servers, hold no accounts, and cannot read your data. Here is the complete picture.
What Randori stores, and where
Workouts and calories. When you log a session, Randori writes a Martial Arts workout and its estimated active energy to Apple Health, on your device. It reads back your own logged workouts, today's active energy, and your most recent body weight to keep your record and the estimate honest. If you use a Bluetooth heart-rate strap or the Watch app, your heart-rate samples go to Apple Health the same way. Health samples never leave your device.
Your rank, profile, and posts. Your belt history, profile card, and the session posts you compose sync through your own iCloud, Apple's CloudKit, under your Apple Account's encryption. We have no access to any of it.
Sharing with training partners. Connections form only when two people trade profile cards by invitation and both accept. From then on, your card and the posts you publish travel user-to-user through iCloud to exactly the partners you invited: read-only, revocable by you, never public, never through a server of ours. A post carries only what you composed onto it: your words, and anything you chose to include, like a photo, a venue name, or heart-rate figures you added deliberately.
Check-ins. If you check in at your gym, Randori takes a single location fix, matches it to the venue on your device, and immediately discards your exact position. If no venue matches, only a coarse neighborhood-level anchor is kept on the device for up to seven days to finish the match, stored under iOS's strongest file protection. Location is never transmitted anywhere.
Learn. Technique pages play film through YouTube's official embedded player and load video thumbnails from YouTube's servers. Those requests go to Google and are governed by Google's privacy policy; Randori uses YouTube's privacy-enhanced mode and sends nothing about you with them beyond what any video load entails. A few lessons link out to a publisher's own site; tapping one is an ordinary web link. The feature that suggests a lesson from your session notes runs entirely on your iPhone using Apple's on-device intelligence. Your notes never leave the device.
App preferences and caches. Session defaults, your partners' cards, and received posts are cached locally so the app works offline.
That is the complete list.
What Randori does not do
No servers of ours. Randori has no backend, so there is nowhere to send your data and nothing of yours for us to lose. No accounts, so there is nothing to sign up for and nothing to breach. No analytics, no advertising, and no tracking of any kind. No public feed: only people you exchanged cards with ever see a post. No sale or sharing of data with anyone, because Randori never has it.
Health data is governed by Apple's HealthKit rules: it stays in the Health store on your device, protected by your passcode and Apple's encryption, under your control in the Health app.
Reporting, blocking, and deleting
Delete any session inside Randori or in the Health app; its calories go with it. Delete a post and it disappears for everyone who received it as their devices sync. Remove a connection and their card leaves your phone; block a connection and their posts leave too, and future invitations from them are refused until you unblock them. Report any received post and it is hidden on your device while an email report opens, addressed to us.
Deleting the Randori app does not delete your workouts; they are yours, in Apple Health, where they belong. Your iCloud data remains in your iCloud, removable in Settings → iCloud → Manage Storage.
Contact
Questions or reports: hello@wayofyawara.com
This policy is effective as of July 25, 2026 and covers Randori 1.0 and later. If a future version ever changes what is stored or where it goes, this page will say so before the update ships.