Privacy Policy

Data Access

When you sign in with Google, we receive only the following raw Google user data from the Google account you choose:

• Your name
• Your email address
• Your Google profile image (photo URL)

We do not access any other Google account content (Gmail, Drive, Contacts, Photos, or a visitor’s personal calendar). We do not create, store, or use aggregated or anonymized Google user data.

Separately, the website uses the Google Calendar API with the dojo’s own Gmail account (not with visitor Google accounts) so we can create visit-appointment events. That access is limited to creating calendar events on the dojo’s Dojo Visits calendar. Site visitors never grant Calendar permission.

Data Use

We use your Google name, email, and profile image only to operate user-facing features of this website:

• Create and identify your member profile after Google Sign-In
• Show your name and photo in the signed-in account menu
• Let instructors and administrators recognize members in the dojo roster

Calendar API access is used only to place a visit appointment on the dojo calendar and, when possible, email you a calendar invite for the time you requested on the contact form.

We do not use Google user data for advertising, analytics profiling, credit or lending decisions, or any purpose other than providing and improving these features.

Data Transfer

We do not sell Google user data. We do not share name, email, or profile image with advertisers, data brokers, or other unrelated third parties.

Google user data is stored in Google Firebase (Authentication and Firestore), which hosts this site’s accounts. Visit appointments created through the Calendar API live on the dojo’s Google Calendar. Contact-form messages (name, email, phone, and optional note you type) are emailed to the dojo through our email provider so staff can reply.

Data Protection

The site is served over HTTPS. Account data is stored in Firebase with access controlled by Firestore security rules: a signed-in user can read and update their own profile; only authorized instructors and administrators can view member records. Calendar credentials (OAuth client secret and refresh token) are stored as production secrets on the server and are never exposed in the browser.

Data Retention & Deletion

Your Google name, email, and profile image remain in your member profile for as long as the account exists. Visit events remain on the dojo calendar until staff delete them.

To request deletion of your profile or related records, email grandrapidsdojo@gmail.com or use our contact form. We will delete the stored profile data we hold and confirm when that is done. Deleting your Google account on Google’s side does not automatically remove a copy already saved in our member records; please contact us so we can erase it.

Limited Use of Google User Data

Raw and aggregated or anonymized Google user data is not used for any purpose other than providing or improving user-facing features of this website. It is not used for targeted advertising or lending.

Raw and aggregated or anonymized Google user data is not transferred or sold to third parties except as needed to provide those features (Firebase and Google Calendar, as described above). It is not sold or transferred to data brokers or advertisers.

We do not use Workspace or Photos API user data to develop, improve, or train AI or machine-learning models. We do not transfer that data to third-party AI services that would use it to train their models.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Contact

Original Okinawan Karate, Grand Rapids Dojo
5260 Division Ave SE, Kentwood, MI 49508
grandrapidsdojo@gmail.com