Terms of Service

Roles

• You (dojo owner) are the data controller of your members' personal data.
• We (BudoFlow) are the data processor, providing software to help you manage your dojo.

Your Responsibilities

• You must ensure you have a lawful basis (consent, contract, legitimate interest) before entering your members' data into BudoFlow.
• You are responsible for complying with all applicable laws regarding your members' data.

Our Responsibilities

• We process personal data only on your instructions.
• We maintain appropriate technical and organizational measures for data protection.
• We do not use your data for purposes other than providing the service.

Subprocessors

We may use third-party services for hosting, email, or analytics. We remain fully responsible for their compliance.

The BudoFlow Mobile App

Members of a dojo may use the BudoFlow mobile app. For app users, the following applies:

• You can link your BudoFlow account to your member record only through an invitation issued by your dojo. Your dojo remains the data controller of its member records.
• Records maintained by your dojo — such as attendance, payments, belt progression and your registered name — are your dojo's records. The app displays them, but corrections must be requested from your dojo.
• Your in-app profile (display name, profile photo, language and appearance settings) belongs to your account and never modifies your dojo's records.
• You must use the in-app messaging features lawfully and respectfully. Dojo staff may moderate conversations connected to their dojo, including removing messages.
• Your dojo may unlink your account from its member record at any time. Unlinking removes your access to that dojo's data in the app but does not delete your BudoFlow account.
• The app is provided "as is"; features may change and temporary unavailability may occur.

Termination

Upon account termination, all dojo data will be permanently deleted within 90 days.

Liability

We provide BudoFlow "as is." To the maximum extent permitted by law, we are not liable for indirect damages or data loss, except where caused by our gross negligence.

Governing Law

These Terms are governed by the laws of Greece and EU GDPR.