This Privacy Policy explains how Martial Man PTE. LTD. (“we”, “us”, “our”) collects, uses, and shares information when you use The Martial Man – Online Community, our websites, online courses, and related services (collectively, the “Service”).
By using the Service, you agree to this Privacy Policy and our Terms of Service.
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
Martial Man PTE. LTD.
60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
UEN: 202630046C
If you have questions about this Privacy Policy or would like to exercise your privacy rights, please see the Contact Us section below.
2. Information We Collect
a) Information You Provide to Us
Account & Profile Information
When you create an account, we may collect:
- Name
- Display name
- Email address
- Password (stored in hashed form)
- Optional profile photo/avatar
- Any profile fields you voluntarily complete (such as bio or location)
Community & Learning Activity
When using the Service we may collect:
- Posts, comments, and messages
- Uploaded media
- Quiz results
- Course progress and learning activity
Orders & Support
If you purchase a course or contact support we may collect:
- Billing details
- Purchase history
- Tax information required by law
- Communications with our support team
b) Information from Social Login
If you choose to sign in using a social account (such as Google), we may receive:
- Your name
- Email address
- Profile photo
This information is used to create your account and pre-fill your profile.
We do not post to your social accounts.
Information imported during registration will not automatically update if you later change details with the provider. You can disconnect social login and update your profile at any time.
Google User Data — Calendar & Meet Integration (Circle Hosts)
If you host a Circle, you can optionally connect your Google account so the Service can schedule your Live Sessions with Google Meet.
What we access. With your consent via Google’s OAuth flow, we access your Google Calendar events (the calendar.events.owned scope) and the email address of the connected Google account.
How we use it. We use this access solely to create a calendar event with a Google Meet link for each Live Session you schedule, and to remove that event if you delete the session. We display the connected account’s email address so you can see which account is linked. We do not read, analyse, or store your other calendar events, and we do not use Google user data for advertising.
How it is stored. The connection’s sign-in tokens are stored encrypted at rest. We also store the identifiers and Meet joining links of the calendar events created through the Service, and the connected account’s email address.
Sharing. We do not sell Google user data or use or share it for advertising, data brokerage, or unrelated purposes. When you schedule a Live Session, the Google Meet joining link created for that session is shared with eligible members of your Circle so they can attend the session.
Deletion and revocation. You can disconnect Google at any time in your Circle’s Live Session settings. Disconnecting permanently deletes the stored sign-in tokens, the connection record, and the connected account’s email address. Live Sessions already created through the connection keep their session records — including the calendar event identifier and Meet joining link — until those sessions are deleted. You can also revoke the Service’s access at any time from your Google Account permissions page (myaccount.google.com/permissions).
Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
c) Information Collected Automatically
When you use the Service we may automatically collect certain information, including:
Usage & Device Data
- IP address
- Browser type
- Device type
- Pages visited
- Timestamps
- Diagnostic or log data
Cookies & Similar Technologies
See the Cookies and Similar Technologies section below.
d) Information from Service Providers
We work with carefully selected service providers to operate the Service, including providers for:
- hosting and infrastructure
- security
- content delivery
- learning and community features
- payments and commerce
- communications
- analytics
- advertising (where permitted)
These providers process personal data only as necessary to provide their services and in accordance with applicable data protection laws.
3. How We Use Information
We use the information we collect to:
- Provide, operate, and secure the Service
- Manage accounts and course access
- Track learning progress and quizzes
- Process purchases, payments, refunds, and invoices
- Communicate with you regarding your account, purchases, or support requests
- Send newsletters or promotional emails if you opt in
- Improve the Service, content, and user experience
- Monitor performance and troubleshoot technical issues
- Prevent fraud, abuse, or unauthorized access
- Conduct analytics and, where permitted, remarketing activities
Legal Bases (EEA / UK Users)
If you are located in the European Economic Area or the United Kingdom, we process personal data based on:
- Contract performance (providing purchased services)
- Legitimate interests (security, service improvement, marketing to existing customers)
- Consent (for certain cookies and marketing communications)
- Legal obligations (tax, accounting, compliance)
4. Sharing Your Information
We may share information with third parties that help us operate and improve the Service.
These third parties act as service providers or processors and may process information only according to our instructions.
Categories of Recipients
- Hosting, infrastructure, and security providers
- Content delivery networks (CDN)
- Learning platform and community tools
- Providers that process the text you enter in Course Guide features (Anthropic and OpenAI — see section 13)
- Payment processors and commerce platforms
- Email communication providers
- Analytics providers
- Advertising or marketing partners (where permitted by law)
- Professional advisors (lawyers, auditors)
- Government or regulatory authorities when required by law
We do not sell your personal information.
In some jurisdictions, certain advertising cookies may be considered “sharing” for cross-context behavioral advertising. You can opt out through our cookie settings or supported browser signals such as Global Privacy Control (GPC).
Public Areas
Content you post in public forums or groups may be visible to other users.
Private messages are visible only to participants, but administrators may access them if necessary for:
- abuse prevention
- safety monitoring
- legal compliance
5. International Data Transfers
We and our service providers may process your data in countries other than your own.
Where required, we rely on appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- equivalent international transfer mechanisms
We take reasonable steps to ensure data processing remains consistent with this Privacy Policy.
6. Cookies and Similar Technologies
We use several types of cookies:
Strictly Necessary Cookies
Required for login sessions, security, and essential platform functionality.
Functional Cookies
Used to remember preferences, playback states, and user settings.
Analytics Cookies
Used to understand how visitors interact with the Service and improve performance.
Advertising / Remarketing Cookies
Used to deliver relevant promotions or advertisements where permitted by law and user preferences.
You can manage cookies through:
- your browser settings
- our on-site cookie consent tools (where available)
Blocking certain cookies may limit Service functionality.
Referral / Affiliate Cookies
If you access the Website via a referral or affiliate link (for example parameters such as aff or ref), a cookie may be stored to track referral attribution.
These cookies typically last up to 90 days.
7. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy.
Typical retention periods include:
Account Information
While your account remains active. If you request deletion, your account enters a short grace period (currently 14 days) during which you can cancel by signing back in; after that, your account and personal data are permanently deleted and cannot be restored. Order and invoice records are retained as described below.
Orders and Invoices
Up to 7 years for tax and accounting compliance.
Course Progress
While the account remains active.
Support Logs and Security Logs
Up to 24 months, or longer if required for investigations or legal obligations.
Moderation Reports
When content or a member is reported, we keep the report, the reported content as it was when reported, and the outcome. An unresolved report is kept until it is resolved. A resolved report and its related records are kept for 12 months after resolution and then deleted automatically, unless a longer period is genuinely required for an active safety or abuse investigation, a dispute, or a legal obligation. These records are kept even if the reported content, or the Circle it was posted in, is later removed or deleted, and are visible only to Martial Man platform administrators.
Aggregated or anonymized data may be retained for analytics purposes.
8. Security
We implement appropriate technical and organizational safeguards to protect personal data, including:
- encrypted data transmission (HTTPS)
- access controls
- secure infrastructure
- principle of least privilege
No internet service can guarantee complete security. You are responsible for maintaining a strong password and protecting your account credentials.
9. Your Privacy Rights
Depending on your location (for example GDPR, CPRA, PDPA, or similar laws), you may have rights including:
- Access your personal data
- Correct inaccurate information
- Request deletion of personal data
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent where applicable
You may also update certain information directly within your account profile.
We may need to verify your identity before processing requests.
California (CPRA)
We do not sell personal information.
Certain advertising cookies may constitute “sharing” under California law. You may opt out via our cookie settings and supported browser signals such as Global Privacy Control.
10. Children
The Service is not intended for individuals under 18 years old.
We do not knowingly collect personal data from children.
If you believe a child has provided personal data through the Service, please contact us and we will remove the information.
11. Payments
Payments for courses or other services are processed by third-party payment processors.
Payment details are sent directly to the processor and handled under their privacy policies and PCI-DSS security standards.
We store only the information necessary to confirm payment and deliver your purchase (such as transaction identifiers).
12. “Do Not Track” Signals
Some browsers offer a Do Not Track (DNT) setting.
Because there is no consistent industry standard for DNT signals, the Service does not currently respond to them.
Where required by law, we honor cookie consent choices and supported browser signals such as Global Privacy Control (GPC).
13. Course Guide, Bookmarks & the Mobile App
This section explains how we handle information in connection with our Course Guide, your bookmarks, and The Martial Man mobile app.
Question processing. Course Guide features (including the Lesson Assistant, My Learning and Teaching Moments) are provided by our servers; your device communicates only with Martial Man. To provide them, we send the minimum needed to two service providers, server to server:
- Anthropic generates Course Guide and Lesson Assistant answers. It receives your question, relevant lesson or course content, recent messages from the same conversation, in My Learning the titles of the courses in your library and, only when your question is about your own learning, a summary of your course progress (for example lessons completed and approximate recency).
- OpenAI helps us find the most relevant lessons. It receives the text of your question or search, which it converts into a search representation; it receives no other information.
We do not send your name, email address, account identifier, profile details, payment information, device identifiers or Circle information to these providers. Under their terms for our use, neither provider uses this data to train its models; Anthropic deletes it within 30 days and OpenAI keeps it for no more than 30 days for abuse monitoring, in each case unless required by law or to address misuse. This processing is necessary to provide the feature. Please don’t include sensitive personal information in your questions.
Storage of your conversations. So that you can continue a conversation across your devices and our website, we store your Course Guide conversations on our servers, linked to your account. These conversations are encrypted at rest. We retain only the most recent messages for each lesson or course (approximately the last 50 messages per topic).
Bookmarks and notes. Bookmarks you create, including any notes you add to them, are stored on our servers and linked to your account so they are available across your devices.
Mobile app data. The mobile app stores certain information on your device (such as your login session, app preferences, and cached content) and synchronizes account data — including course progress, bookmarks, and Course Guide conversations — with our servers.
Your choices and control. You can start a new conversation or clear a conversation at any time within the app, delete individual bookmarks, and delete your account from within the app. Deleting your account removes your stored Course Guide conversations and bookmarks. To request a copy of the personal data we hold about you, please contact us using the details in the “Contact Us” section below.
Please avoid sharing sensitive information (for example, detailed health information) in Course Guide conversations, as they are stored as described above.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
If we make significant changes, we will update the “Last Updated” date and may notify users through the Website or email.
Continued use of the Service after updates indicates acceptance of the revised Policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: [email protected]