Privacy

Nothing of yours reaches us unless you send it

Randori is a training log for iPhone for jiu jitsu, judo, wrestling, MMA and sambo, made by 941 Apps, LLC (dba Randori). The policy fits in one sentence: nothing of yours reaches us unless you switch it on. We hold no accounts and cannot read your training. The one exception is the academy link, which you join by choice, and it holds only what you chose to share, for as long as you leave it on. Here is the complete picture.

What Randori stores, and where

Workouts and calories. When you log a session, Randori writes a Martial Arts workout and its estimated active energy to Apple Health, on your device. It reads back your own logged workouts, today's active energy, and your most recent body weight to keep your record and the estimate honest; with your permission it also reads your date of birth and biological sex, which the calorie formula needs, and it saves your body weight to Apple Health when you change it in Randori. If you use a Bluetooth heart-rate sensor, your heart-rate samples go to Apple Health the same way. Health samples never leave your device.

Your rank, profile, and posts. Your belt history, profile card, and the session posts you compose sync through your own iCloud, Apple's CloudKit, under your Apple Account's encryption. We have no access to any of it.

Sharing with training partners. Connections form only when two people trade profile cards by invitation and both accept. From then on, your card and the posts you publish travel user-to-user through iCloud to exactly the partners you invited: read-only, revocable by you, never public, never through a server of ours. A post carries only what you composed onto it: your words, and anything you chose to include, like a photo, a venue name, or heart-rate figures you added deliberately.

Check-ins. If you check in at your gym, Randori takes a single location fix, matches it to the venue on your device, and immediately discards your exact position. If no venue matches, only a coarse neighborhood-level anchor is kept on the device for up to seven days to finish the match, stored under iOS's strongest file protection. Location is never transmitted anywhere.

Learn. Technique pages play film through YouTube's official embedded player and load video thumbnails from YouTube's servers. Those requests go to Google and are governed by Google's privacy policy; Randori uses YouTube's privacy-enhanced mode and sends nothing about you with them beyond what any video load entails. A few lessons link out to a publisher's own site; tapping one is an ordinary web link. The feature that suggests a lesson from your session notes runs entirely on your iPhone using Apple's on-device intelligence. Your notes never leave the device.

App preferences and caches. Session defaults, your partners' cards, and received posts are cached locally so the app works offline. Randori also keeps a local pulse record — the minute-by-minute heart-rate measurements it took during your own sessions — so your effort charts draw instantly. It is rebuilt from Apple Health, purged when you delete a session, excluded from device backups, and never leaves the device.

That is the complete list.

What Randori does not do

No server holding your training unless you joined an academy, and then only what you switched on (below). No accounts, so there is nothing to sign up for and nothing to breach. No advertising inside the app, and no tracking across other companies' apps or websites. No public feed: only people you exchanged cards with ever see a post. No sale or sharing of data with anyone.

Your academy, if you join one

Since Randori 2.0.2 you can link the app to your own academy by typing a code your professor gives you. Nothing is sent until you do. The academy's side is a web app we run, Randori Coach, at coach.randoriapp.com. What it can receive is decided by four switches on the Academy screen, each described in plain words, each off until you turn it on:

• Your training days. The days you trained at that academy, the class type, the start and end time, and your belt and stripes as your own ledger records them, together with the name and photo on your card so your professor knows whose record it is. Never your notes, never other gyms, never heart rate without the next switch.
• Effort. How hard each session was, as a level, not a number.
• Heart rate. Minutes trained, average and peak, minutes per zone, and, if you choose, the minute-by-minute trace of the session.
• Training elsewhere. That you trained away from the academy, with or without the other gym's name.

Turning a switch off deletes that data from the academy's view immediately; the server answers with what it destroyed. Leaving the academy seals your whole record there for thirty days, so a mistaken tap can be undone, and then deletes it. Your professor sees days, class types and rank, never a judgement about you, and the academy is told nothing about anyone who has not joined.

Messages from your academy are a separate switch, also off by default. With it on, your academy can post short notices; the app keeps a push token for your phone so a notice can knock, and the push itself says only that a message arrived. You can read what was sent, turn it off any time, and report any message to us; the academy is never told who has messages on or who reported.

Randori Coach stores this on our own infrastructure, in the United States, for the academy that you joined and nobody else. It is never sold, never shared beyond that academy, and never used to advertise to you. An academy that abuses the messages can be suspended by us.

Anonymous app diagnostics

To keep Randori reliable, the app sends us a small amount of anonymous diagnostic and usage data: crash and hang reports from Apple's MetricKit, and counts of feature use (for example, "a session was logged"). These contain none of your training — no names, no venues, no partners, no session details, no health data — and no identifier of you: they are grouped under a random installation id that names the install, not the person, and we do not try to link it to anyone. Reports carry only coarse facts: app version, OS version, device family, and country. If you installed Randori by tapping one of our Apple Search Ads, the reports also carry the campaign, ad group and keyword numbers Apple gives that ad, from Apple's on-device attribution (no advertising identifier and no tracking prompt), and they note when a subscription is bought, so we can count, in aggregate, which ads lead to subscribers. They are processed on our own infrastructure (Cloudflare), used to fix crashes, improve the app and judge our own ads, and are never shared or sold. You can turn this off any time in Settings → Privacy → Share anonymous diagnostics; the switch takes effect immediately.

This website

randoriapp.com counts page views through our own analytics endpoint so we can see which pages are read. It sets no cookies and keeps no identifiers; there is no advertising tracker on the site. The technique pages play video through YouTube's own player in privacy-enhanced mode; the player loads from YouTube's servers when it appears on the page, and YouTube's terms govern it from then on.

Health data is governed by Apple's HealthKit rules: it stays in the Health store on your device, protected by your passcode and Apple's encryption, under your control in the Health app.

Reporting, blocking, and deleting

Delete any session inside Randori or in the Health app; its calories go with it. Delete a post and it disappears for everyone who received it as their devices sync. Remove a connection and their card leaves your phone; block a connection and their posts leave too, and future invitations from them are refused until you unblock them. Report any received post and it is hidden on your device, and a report reaches us automatically, even with diagnostics off: the post's identifier, its caption, and its author's iCloud identifier, so we can review it within 24 hours. An email draft addressed to us also opens, for anything you want to add; sending it is up to you.

Deleting the Randori app does not delete your workouts; they are yours, in Apple Health, where they belong. Your iCloud data remains in your iCloud, removable in Settings → iCloud → Manage Storage.

Contact

Questions or reports: hello@wayofyawara.com

This policy is effective as of July 25, 2026 and covers Randori 1.0 and later; the academy section was added September 17, 2026 for Randori 2.0.2, and the health, advertising-measurement and reporting details were made explicit on September 23, 2026. If a future version ever changes what is stored or where it goes, this page will say so before the update ships.