My Training Atlas — Privacy Policy

1. Who We Are

My Training Atlas is operated by Koru Consulting Pty Ltd, a company registered in Western Australia, Australia (ACN 616 945 996). Operating address: Dianella, Perth, Western Australia 6059, Australia. Koru Consulting Pty Ltd is the data controller for personal information collected through the platform.

Contact for privacy enquiries: privacy@mytrainingatlas.com

General contact: hello@mytrainingatlas.com

Postal correspondence: available on request via privacy@mytrainingatlas.com

2. Data Processors

MTA uses the following third-party services to operate the platform. Each processor handles personal information only as necessary to provide its specific function and is bound by its own privacy obligations.

Base44 — Full platform infrastructure. Provides the application's database, authentication, hosting, and application logic. All user accounts, school listings, introduction records, conduct records, traveller identities, and platform data are stored in Base44's data entities. Base44's privacy and security practices apply to this data.

Stripe — Payment processing for traveller introduction credits and subscriptions. Card details are entered directly into Stripe's secure payment system and are not stored by MTA. Stripe processes payment data under its own privacy policy: stripe.com/privacy.

SendMails.io — Transactional and recruitment email delivery. Processes email addresses for the purpose of sending platform notifications, introduction-related emails, and school recruitment communications.

Google — Geocoding and map services for the directory. Processes school location data to display schools on the map and in geographic search results. Google's privacy policy applies to this processing: policies.google.com/privacy.

Hosting infrastructure — The platform's underlying servers are operated by Base44's infrastructure providers, located in regions specified by the platform's hosting configuration.

MTA does not sell personal information to any third party.

3. Cross-Border Data Transfers

MTA operates internationally. Travellers and schools using the platform may be located in different countries. By the nature of the introduction service, personal information may be transferred across borders in the following ways.

Traveller-to-school transfers. When a traveller submits an introduction request, the traveller's profile information is shared with the school they have selected — including when the traveller and school are in different countries. This is the core function of the introduction service and is the basis on which the traveller submits the request.

Processor locations. MTA's data processors operate from various international locations. Stripe processes payments through systems located in multiple jurisdictions including the United States and Europe. Base44, and SendMails.io operate similarly across regions. Google's geocoding services are operated globally.

Legal basis for transfers. Cross-border transfers are made on the legal basis of legitimate interest in providing the service the user has requested, and where applicable, on the basis of explicit consent given when submitting an introduction request. Where data is transferred to jurisdictions without an adequacy decision under GDPR or equivalent frameworks, standard contractual clauses or equivalent legal mechanisms apply through MTA's processors.

If you have questions about how your data is transferred internationally, contact privacy@mytrainingatlas.com.

4. Cookies and Tracking

MTA uses cookies and similar technologies for the following purposes:

Strictly necessary cookies. Required for the platform to function — session management, authentication, and security.

Analytics cookies. Used to understand how visitors interact with the platform so MTA can improve the service.

MTA does not sell cookie data.

If you are visiting from a jurisdiction with cookie consent requirements, you can manage cookie preferences through your browser settings.

5. Your Rights

Your data rights depend on the jurisdiction in which you are located.

All users — basic rights. You have the right to access the personal information MTA holds about you, request correction of inaccurate information, and request deletion of your account. These rights are exercised through the contact email below and are subject to the data retention requirements described in the relevant terms document.

Australian users. Under the Australian Privacy Principles, you have the right to make a complaint about MTA's handling of your personal information. Complaints can be raised first with privacy@mytrainingatlas.com. If unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

EU and UK users — GDPR rights. If you are located in the EU or UK, the General Data Protection Regulation gives you additional rights:

• Right of access — to receive a copy of the personal information MTA holds about you
• Right of rectification — to correct inaccurate or incomplete information
• Right of erasure — to request deletion of your data, subject to legal retention requirements
• Right of portability — to receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interest
• Right to restrict processing — in specific circumstances
• Right to withdraw consent — where processing is based on consent
• Right to lodge a complaint with a supervisory authority in your country (ico.org.uk for UK users; the relevant national data protection authority for EU users)

California users. If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information is collected, the right to request deletion, the right to opt out of the sale of personal information (MTA does not sell personal information), and the right to non-discrimination for exercising these rights.

Exercising your rights. Contact privacy@mytrainingatlas.com with your request. MTA will respond within 30 days. We may need to verify your identity before processing your request.

6. Children's Data

MTA is intended for adult martial arts practitioners. The Traveller Terms require all account holders to be 18 years of age or older. MTA does not knowingly collect personal information from children under 18. If you believe a child has submitted personal information to MTA, contact privacy@mytrainingatlas.com and the information will be deleted.

7. Security

MTA takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These measures include:

• Encryption of data in transit between users and the platform
• Encryption of data at rest in MTA's database systems
• Access controls limiting personal information to authorised personnel only
• Use of established third-party processors (Stripe, SendMails.io, Google) that operate their own industry-standard security practices
• Regular review of access permissions and security configurations

No system is completely secure, and MTA cannot guarantee absolute security of personal information. In the event of a data breach affecting personal information, MTA will notify affected users and relevant supervisory authorities in accordance with applicable law.

8. The Introduction Sharing Model

The core function of MTA involves the deliberate sharing of personal information between travellers and schools. This is treated as a distinct processing purpose under this policy.

When a traveller submits an introduction request:

• The traveller's name, home city, art, lineage, rank, home school, travel dates, and personal note are sent to the school
• The school's contact email is not shared with the traveller
• Communication between the traveller and the school takes place through the platform until the school chooses to share contact details
• The school sees this information for the purpose of deciding whether to approve the introduction

This sharing is the basis on which the platform operates. Submitting an introduction request constitutes explicit consent to this specific data sharing for the specific school selected. No data is shared with any other school as part of an introduction request.

If a traveller cancels an introduction request before the school has reviewed it, the request is withdrawn and the school is not notified. If the traveller cancels after the school has reviewed the request, the school is notified that the request has been cancelled.

9. Data Retention

MTA retains personal information for as long as necessary to provide the service and as required by law.

Traveller data. Account records, introduction history, and conduct records are retained after account closure to maintain the integrity of the introduction system and to prevent re-creation of accounts that have been suspended for conduct reasons. Retained records are not publicly visible.

School data. Listing records, instructor information, and introduction history are retained after a listing is removed to maintain the integrity of the directory and to prevent duplicate listings of the same school. Retained records are not publicly visible.

Payment records. Stripe retains payment records as required by financial regulations. MTA's records of which credits have been purchased and consumed are retained alongside account records.

Email records. Email addresses used for transactional or recruitment email are retained for as long as the relevant relationship continues. Recruitment email recipients can request removal at any time by replying to any recruitment email or by contacting privacy@mytrainingatlas.com.

10. Updates to This Policy

MTA may update this privacy policy at any time to reflect changes in platform operation, regulatory requirements, or service providers. When this policy is updated, the effective date at the top of this page will change.

For material changes — particularly changes to data processors, processing purposes, or user rights — MTA will notify registered users by email.

Your continued use of the platform after notification of an updated policy constitutes acceptance of the updated policy. If you do not accept the updated policy, you may stop using the platform and request account closure through the relevant terms contact email.

11. Contact

Privacy enquiries: privacy@mytrainingatlas.com

General enquiries: hello@mytrainingatlas.com

Terms enquiries: terms@mytrainingatlas.com

Platform: mytrainingatlas.com