MAS9 USA Corporation d/b/a NextKick ("NextKick", "we", "us", or "our") operates the https://nextkick.ai website and the NextKick mobile application (collectively, the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our User Agreement (Master Terms and Conditions).
1. Definitions
- Service
- means the https://nextkick.ai website and the NextKick mobile application operated by NextKick.
- Personal Data
- means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
- Usage Data
- is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Cookies
- are small pieces of data stored on your device (computer or mobile device).
- School
- means a martial arts school, studio, or similar organization that has subscribed to the Service to manage its business and its students.
- Student Data
- means Personal Data about a School's students (including, where applicable, students who are minors) and their parents or guardians that a School or its staff enters into or collects through the Service.
- Data Controller
- means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information is, or is to be, processed.
- Data Processor (or Service Provider)
- means any natural or legal person who processes data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
- Data Subject (or User)
- is any living individual who is using our Service and is the subject of Personal Data.
2. Our Role: Controller and Processor
Our role under data protection laws depends on the type of data involved:
NextKick as Controller.
For Personal Data relating to visitors to our website, prospective customers, and the account holders and staff of Schools (such as school owners, masters, and instructors), NextKick determines the purposes and means of processing and acts as the Data Controller.
NextKick as Processor.
For Student Data, the School is the Data Controller and NextKick acts as a Data Processor (or "service provider") on the School's behalf. Schools decide what Student Data to collect and how it is used within the Service. We process Student Data solely to provide the Service to the School in accordance with our agreement with the School, and not for our own independent purposes. If you are a student, parent, or guardian and have questions about how your information is handled, please contact your School directly; we will support Schools in responding to such requests.
3. Information Collection and Use
We collect several different types of information for various purposes to provide and improve our Service to you.
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Date of birth
- Cookies and Usage Data
Payment card and bank account details are collected and processed directly by our third-party payment processors and are not stored by NextKick. See Section 8 (Payments) below.
We may use the Personal Data of School owners and staff to contact them with newsletters, marketing or promotional materials, and other information that may be of interest. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send. We do not use Student Data for marketing.
Student Data
Schools use the Service to manage their operations, which may involve entering Student Data such as student names, dates of birth, contact information, parent or guardian information, enrollment and membership details, attendance and check-in records (including location-based check-ins where a School enables that feature), belt rank and program progression, photos, and payment status. We process Student Data only on behalf of and at the direction of the School, as described in Section 2 and Section 11 (Children's Privacy).
Usage Data
We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. When you access the Service by or through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers, and other diagnostic data.
Location Data
We may use and store information about your location if you give us permission to do so ("Location Data"). We use this data to provide features of our Service (such as location-based class check-in, where enabled by a School) and to improve and customize our Service. You can enable or disable location services when you use our Service at any time through your device settings.
4. Use of Data
NextKick uses the collected data for the following purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent, and address technical issues
- To provide School owners and staff with news, special offers, and general information about other goods, services, and events which we offer that are similar to those already purchased or enquired about, unless they have opted not to receive such information
Use of Student Data is limited to providing the Service on behalf of the School, as described in Sections 2 and 11.
5. Artificial Intelligence Features
Certain features of the Service may be powered by artificial intelligence or machine learning technologies ("AI Features"). When a School uses AI Features, we process the relevant data as necessary to generate the requested outputs. We do not use your Personal Data or a School's data to train, fine-tune, or otherwise improve AI or machine learning models except in de-identified, anonymized, or aggregated form that does not identify you, a School, or any individual, or with prior express consent. We do not use Personal Data of minors to train, fine-tune, or improve AI or machine learning models under any circumstances. Where AI Features are delivered through third-party AI service providers, those providers are contractually prohibited from using your data to train their own models except as described above. Outputs of AI Features are generated by automated systems and may contain errors; they should be reviewed before being relied upon.
6. Legal Basis for Processing Personal Data Under the General Data Protection Regulation (GDPR)
If you are from the European Economic Area (EEA), NextKick's legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it. NextKick may process your Personal Data because:
- We need to perform a contract with you
- You have given us permission to do so
- The processing is in our legitimate interests and is not overridden by your rights
- For payment processing purposes
- To comply with the law
7. Retention, Transfer, and Disclosure of Data
Retention of Data
NextKick will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. NextKick will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or when we are legally obligated to retain this data for longer time periods. Student Data is retained in accordance with our agreement with the applicable School and applicable law, and is deleted or de-identified upon verified request as described in Section 11.
Transfer of Data
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. NextKick will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.
Business Transaction
If NextKick is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Disclosure for Law Enforcement and Legal Requirements
Under certain circumstances, NextKick may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). NextKick may also disclose your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of NextKick; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users of the Service or the public; or protect against legal liability.
Service Providers
We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
8. Payments
We provide paid products and services within the Service and use third-party payment processors to process payments. We do not store or collect payment card numbers, CVV codes, or bank account credentials on our systems. When payment information is entered, our payment processors create a secure token that is used for future charges; NextKick cannot export or access the underlying card or account numbers. Payment information is provided directly to our third-party payment processors, whose use of your personal information is governed by their respective privacy policies. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of brands like Visa, Mastercard, American Express, and Discover. The payment processors we work with are:
- eBluu (credit and debit card processing). Privacy information is available at https://www.ebluu.com/
- Paya (ACH and bank transfer processing). Privacy information is available at https://paya.com/privacy-policy/
- Stripe (credit and debit card processing, available to Schools as an alternative processor). Privacy information is available at https://stripe.com/privacy
The processors available to a particular School may vary. Schools select their payment processor within the Service.
9. Analytics, Advertising, and Cookies
Analytics
We may use third-party Service Providers to monitor and analyze the use of our Service. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. For more information on the privacy practices of Google, please visit https://policies.google.com/privacy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
Behavioral Remarketing
NextKick may use remarketing services to advertise the Service on third-party websites after you have visited our website. We and our third-party vendors use cookies to inform, optimize, and serve ads based on your past visits to our website. Remarketing applies only to our public marketing website and to School owners and staff; we do not use Student Data for remarketing or advertising. The remarketing providers we use are:
- Google Ads. You can opt out of Google Ads personalization by visiting the Google Ads Settings page at https://www.google.com/settings/ads. For more information on the privacy practices of Google, please visit https://policies.google.com/privacy.
- Meta (Facebook and Instagram). You can learn about interest-based advertising from Meta and manage your preferences at https://www.facebook.com/help/568137493302217. You can also opt out through the Digital Advertising Alliance at https://www.aboutads.info/choices/. For more information, please visit Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. The types of cookies we use are:
- Necessary Cookies: Essential for the functioning of our website and app, such as providing secure log-in or remembering how far you are through an order.
- Performance Cookies: Used to analyze how users interact with our site, such as which pages visitors go to most often and whether they receive error messages, which helps us improve the user experience.
- Functional Cookies: Allow our website to remember choices you make (such as your language or region) and provide enhanced, more personal features.
- Targeting/Advertising Cookies: Used to deliver advertisements that are more relevant to you and your interests. They remember that you have visited a website, and this information may be shared with other organizations such as advertisers.
When you first visit our website, you will see a banner providing you with information about the use of cookies and giving you the option to consent to the use of different types of cookies. You can also manage your cookie preferences or disable cookies entirely through your browser settings, but this may affect the functionality of our site. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you do not accept cookies, you may not be able to use some portions of our Service. For more detailed information about cookies and how to manage them, please visit Your Online Choices, All About Cookies, or consult your browser's help pages.
"Do Not Track" Signals
We do not currently respond to Do Not Track ("DNT") browser signals. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
10. SMS Privacy & Messaging Policy
NextKick may use your provided phone number to send SMS (text) messages related to your account, technical support, system notifications, and customer service.
Use of Messaging
- Messages may include billing alerts, onboarding instructions, class schedule updates, and other service-related notices.
- If you opt in, you may also receive promotional or marketing messages. You can opt out at any time by replying "STOP".
- For help, reply "HELP" or contact us at [email protected].
Disclosure of SMS Data
- Third Parties That Help Provide the Messaging Service: We do not share your opt-in to an SMS campaign with any third party for purposes unrelated to supporting that campaign. However, we may share your Personal Data with trusted service providers — such as messaging platforms, telecom providers, and technical vendors — solely to enable the delivery of SMS messages.
- Affiliates and Subsidiaries: We may disclose your Personal Data to our affiliates or subsidiaries. If we do so, their use and disclosure of your data will remain subject to this Privacy Policy.
Important: Text messaging originator opt-in data and consent will not be shared with any third parties, including affiliates, for marketing or unrelated purposes. Message frequency may vary. Standard message and data rates may apply based on your mobile plan.
11. Children's Privacy
The Service is designed for use by martial arts schools and their staff. Schools may use the Service to manage information about their students, including students under the age of thirteen (13). NextKick processes such Student Data solely as a service provider on behalf of and at the direction of the School, in order to provide the Service.
- Parental Consent. Where the Children's Online Privacy Protection Act ("COPPA") or similar laws require verifiable parental consent for the collection of personal information from children under 13, Schools are responsible for obtaining such consent from parents or legal guardians before entering a child's information into the Service. Under COPPA, schools and similar organizations may consent to the collection of children's personal information on behalf of parents where the information is used solely for the benefit of the organization's program and for no other commercial purpose. NextKick relies on the School's representation that all required consents have been obtained.
- Limits on Use. We use children's personal information solely to provide the Service to the School. We do not use children's personal information for marketing, advertising, or profiling, we do not sell children's personal information, and we do not use children's personal information to train artificial intelligence or machine learning models.
- Direct Collection. Our public website and marketing communications are not directed to children, and we do not knowingly collect personal information directly from children under 13 outside of the School-managed Service described above. If we become aware that we have collected personal information directly from a child under 13 without required parental consent, we will take steps to delete that information from our servers.
- Review and Deletion. Parents and legal guardians have the right to review their child's information, direct that it be deleted, and refuse to permit further collection or use. Because the School controls Student Data, parents and guardians should direct such requests to their School in the first instance; upon a verified request communicated by a School (or where required by law, directly by a parent or guardian), we will delete or de-identify the child's personal information within thirty (30) days, except where retention is required by law.
12. Your Privacy Rights
Rights Under the GDPR (European Economic Area Residents)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. NextKick aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. In certain circumstances, you have the following data protection rights:
- The right to access, update, or delete the information we have on you. Whenever made possible, you can access, update, or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
- The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
- The right to object. You have the right to object to our processing of your Personal Data.
- The right of restriction. You have the right to request that we restrict the processing of your personal information.
- The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format.
- The right to withdraw consent. You have the right to withdraw your consent at any time where NextKick relied on your consent to process your personal information.
Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EEA.
Rights Under U.S. State Privacy Laws
Depending on your state of residence, you may have rights under applicable U.S. state privacy laws, including the New Jersey Data Privacy Act, the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar laws in other states. Where these laws apply to you, your rights may include:
- The right to know and access the categories and specific pieces of Personal Data we have collected about you
- The right to correct inaccurate Personal Data
- The right to delete Personal Data we have collected from you, subject to certain exceptions
- The right to obtain a copy of your Personal Data in a portable format
- The right to opt out of the sale of Personal Data, the sharing of Personal Data for cross-context behavioral advertising, and certain profiling. NextKick does not sell Personal Data for monetary consideration. Our use of targeting/advertising cookies on our public marketing website may constitute "sharing" or "targeted advertising" under some state laws; you may opt out via our cookie banner or the mechanisms described in Section 9.
- The right not to receive discriminatory treatment for exercising your privacy rights
To exercise any of these rights, contact us using the information in Section 14. We will verify your request and respond within the time required by applicable law. You may also designate an authorized agent to make a request on your behalf. If we decline to take action on your request, you may have the right to appeal our decision by replying to our response with the word "Appeal". Note that if your Personal Data was entered into the Service by a School as part of Student Data, we may refer your request to that School, which controls that data.
13. Security of Data and Links to Other Sites
The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
14. Changes to This Privacy Policy and Contact Us
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service prior to the change becoming effective and update the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, or wish to exercise any of your privacy rights, please contact us:
By email: [email protected]
By mail: MAS9 USA Corporation d/b/a NextKick, Attn: Privacy, 1 Penn Plaza, Suite 1423, New York, NY 10119
By visiting our website: https://nextkick.ai
