The app is developed and published by Faulty Compass Studio (“we”, “us”). Because the app has no server component and no account system, we never receive, hold, or process your in-app data. The only personal information we ever handle directly is what you choose to send us yourself, for example if you email us a question.

Contact: luke@faultycompassstudio.com

This policy covers the app “Goalkeeper Performance Tracker” on Android, as distributed through Google Play, and on iPhone, as distributed through the App Store. It does not cover Google Play or the App Store themselves, your device’s operating system, or any third-party apps you might use to share an export. Each of those is governed by its own privacy policy.

The app is built for grassroots goalkeepers and the people who film and review their matches: typically the player themselves, a parent, or a coach. One installation holds one player’s profile.

Depending on how you use the app, you may enter:

• Profile details: a player name (required), and optionally a club name, a player photo, and a club logo chosen from your device.
• Match details: opponent, date, competition, scoreline, home or away, and the size of the game.
• Team details: the sides you play for, their badges, and the opponents each of them faces.
• Tagging data: event types, outcomes, notes, timestamps, and optional pitch or goal-mouth positions you place, along with the statistics the app calculates from them.

All of this is written directly to a database inside the app’s private storage on your phone. None of it is transmitted to us or to anyone else.

When you import a video, the app copies it into its own private storage folder so it keeps working even if you later move or delete the original file. The footage never leaves that folder unless you export or share it yourself using other apps.

The app does not record video itself in this version; footage is imported from files already on your device.

• No analytics or crash-reporting service of ours is built into the app. We receive no reports about you, your matches, or how you use it.
• No advertising, and no advertising SDKs.
• No tracking identifiers, device fingerprinting, or cookies.
• No account system, login, or cloud sync operated by us.
• No access to your location, contacts, camera, or microphone.
• No server operated by us, anywhere. There is nowhere for your data to be sent, which is the strongest guarantee on this page.

The one thing the app connects to is the store you installed it from, and only for subscriptions. On Android that is why the app carries the internet permission: Google Play’s billing system needs it to tell the app whether your subscription is active, and the billing library Google supplies reports its own diagnostics back to Google. On iPhone the App Store does the same job through Apple’s own system. That traffic goes to Google or Apple and nowhere else.

Nothing about you travels with it. Not your name, not your club, not a single statistic, and not one frame of footage. Those never leave your phone at all.

On Android, the app asks you to approve exactly one permission: notifications. It is never requested at launch, only when you have asked for something that needs it, and there are two such things.

The first is the match day reminder, if you switch it on: a nudge on the mornings you have told the app you play, to film the match. The second is the free trial reminder, if you start one: a single message five days before that trial ends, so the promise the paywall makes can be kept.

Decline the permission and everything else works; you simply will not get those reminders. Both are scheduled and shown entirely on your device. Nothing is sent anywhere, and no reminder ever mentions your matches.

Four more are granted automatically when you install the app on Android:

• Internet: used only as described above.
• Keep awake: so the screen does not sleep while you are watching footage back.
• Network state: lets the video player check whether you are online. It cannot open a connection by itself.
• Run at startup: re-schedules those reminders after your phone reboots. It does not start the app.

On iPhone there is no install-time list. The app asks for three things, each only when you do something that needs it.

Notifications, for the same two reminders.

Permission to read your photo library, the first time you choose a match to import. The app reads the video where it already sits in your library rather than copying it first, because a full match can run to tens of gigabytes and copying it would need twice that free on your phone. Nothing is read from your library except the videos you pick, and nothing from it is ever sent anywhere. This is the one permission the app cannot do its job without: decline it and there are no imports and no exports.

Permission to add to your photo library, when you save a reel, a clip, or a picture to Photos. The check that stops the app saving the same file twice looks inside the app’s own album, which the read permission above already covers.

Choosing a photo, for your profile picture or a club badge, uses the system’s own picker on both platforms, which hands the app only the one file you select. Importing a video works the same way on Android, through the document picker. On iPhone it reads the video from your library directly, which is why the read permission above exists.

The app offers an optional Premium subscription, billed monthly or yearly, with a free trial for new subscribers. Everything about paying for it is handled by the store you installed the app from: Google Play on Android, the App Store on iPhone.

• Payment goes to Google or Apple, not to us. The purchase happens in the store’s own payment sheet. We never see or store your card details, billing address, or the name on your account.
• Your subscription is tied to your Google account, under the Google Privacy Policy, or to your Apple Account, under the Apple Privacy Policy. Not to any account with us, because none exists. Reinstall the app, or move to a new phone on the same platform, and it is restored from the store automatically. A subscription bought on one platform does not carry to the other: Google and Apple do not share them, and we have no account system of our own to bridge them.
• Free trial eligibility is decided by Google or Apple, based on whether your account with them has had one before. They know whether you have used a trial; we do not.
• What the app stores is two small values on your device: whether your subscription is active, and when that was last checked. They exist so Premium keeps working when you have no signal, and they live in the same private storage as everything else.
• Cancel or manage the subscription in the Google Play app, under Payments & subscriptions, or on iPhone in Settings, under Subscriptions. Uninstalling this app does not cancel a subscription on either platform, and that is worth knowing. Refunds are handled through Google Play or Apple.

All profile details, imported video, tagged events, calculated statistics, and the subscription record described above are held in a local database and file storage sandboxed to this app by Android or iOS, the same isolation every app on your phone gets for its own files. Other apps cannot read this data on a standard device.

Because your data is never transmitted, the usual risks of interception or server breaches do not apply. In practice, your data is as secure as your phone: we recommend using a screen lock and keeping your device’s software up to date.

Like most apps, the app’s data may be included in device-level backups or device-to-device transfers, if you have those features switched on: Google’s backup service on Android, iCloud Backup or a backup to a computer on iPhone. These backups are created and managed by Google, Apple, or your device manufacturer under their own terms, are tied to your own account with them, and are never accessible to us. You can exclude the app’s data from backups in your device’s settings.

On Android, video files typically exceed the backup size limits and are unlikely to be included. On iPhone, the app marks imported match video so that iCloud Backup skips it. The original is still in your photo library, and a single 90 minute match would fill a free iCloud allowance on its own and start failing the backup of everything else on your phone. Everything the app cannot re-create, your matches, tagged moments, settings, photos and reels, is small and is included if you have iCloud Backup switched on; that copy is held by Apple under your Apple Account.

The app can save a backup file, a .zip containing your profile details, match details, tagged events, settings, photos and badges, and any highlight reels you have already compiled. Full match videos are not included. A file is only created when you tap Save backup file, and it only goes where you choose to put it. If you choose a cloud location, such as Google Drive or iCloud Drive, the file is held there under that service’s terms.

The file is not password protected: anyone who has it can read your name, club, and stats. Treat it like the data it contains and keep it somewhere you would keep a photo album. Restoring a backup on another device adds its contents to that device’s local storage.

If you install the app through Google Play, Google may provide us with aggregated, anonymised statistics about the app: install counts, crash reports, and similar diagnostics. If you install it through the App Store, Apple may do the same, and shares crash reports with developers only if you have opted in to that in your iPhone’s settings. This is standard for every app on either store, is collected by Google under the Google Privacy Policy and by Apple under the Apple Privacy Policy, and never includes anything from inside the app: not your footage, your profile, or your match data.

If you subscribe, Google or Apple also reports the sale to us in its developer console: an order record with a country, a currency, and an amount, but never your name, your card, or your address.

We do not sell, share, rent, or transmit your personal data to any third party. We are not able to: we never receive it in the first place.

Match footage will usually show other people, often including children. You are responsible for making sure you have any permission needed to film. Clubs and leagues commonly have their own photography and filming policies, and local laws may apply to recording in some situations. The app keeps your footage private on your device, but what you choose to record, and anything you choose to share outside the app, is under your control and your responsibility.

The app is intended to be operated by an adult, a parent or coach, or by a player with their parent’s or guardian’s knowledge. We do not knowingly collect personal information from anyone, including children; the app’s design makes such collection impossible, because all data remains on the device and is never sent to us.

Subscriptions are purchased through Google Play or the App Store, both of which support purchase approval for supervised or family accounts. The app never handles payment itself.

A parent or guardian can review or delete everything the app holds at any time using the app’s own screens, or remove it all at once by uninstalling the app.

Privacy laws such as the UK and EU GDPR give people rights over personal data held by others, including access, correction, deletion, and portability. Because we hold none of your data, you exercise every one of these rights directly, on your own device:

• Access: everything the app holds is visible in the app.
• Correction: edit your profile, matches, and tagged moments in-app at any time.
• Portability: save a backup file to take your data with you.
• Erasure: delete individual items in-app, or uninstall the app to erase everything, including the database, imported videos, and photos.

Payment records are different: they are held by Google or Apple, not by us, so requests about them are made to them under their own policies.

If you email us, we will hold your email address and message only for as long as needed to reply, and you can ask us to delete that correspondence at any time.

Your data stays on your device until you delete it or uninstall the app. We retain nothing, because we receive nothing. There is no account to close and no server-side copy to request. Google or Apple retains payment records for subscriptions under its own terms; we receive none of them.

If this policy changes, we will update the effective date above and describe the change here before it takes effect. A change of that kind is also clearly flagged in the app itself, and any new data handling is opt-in.

This version records one change to what the app does: on iPhone it now marks imported match video so iCloud Backup skips it, because that footage is a copy of a file already in your photo library and backing it up would swallow your iCloud storage. Nothing else about the handling of your data has changed. The version before this one brought the policy across to cover the iPhone app: where it named Google Play it now names the App Store as well, it describes the two photo library permissions the iPhone app asks for and why, and it notes that a subscription bought on one platform does not carry to the other.

Questions about this policy, or about privacy in the app generally, can be sent to luke@faultycompassstudio.com.