The app is developed and published by Faulty Compass Studio (“we”, “us”). Because the app has no server component and no account system, we never receive, hold, or process your in-app data. The only personal information we ever handle directly is what you choose to send us yourself — for example, if you email us a question.

Contact: luke@faultycompassstudio.com

This policy covers the Android app “Goalkeeper Performance Tracker” as distributed through Google Play. It does not cover Google Play itself, your device’s operating system, or any third-party apps you might use to share an export — each of those is governed by its own privacy policy.

The app is built for grassroots goalkeepers and the people who film and review their matches — typically the player themselves, a parent, or a coach. One installation holds one player’s profile.

Depending on how you use the app, you may enter:

• Profile details — a player name (required), and optionally a club name, a player photo, and a club logo chosen from your device.
• Match details — opponent, date, competition, scoreline, home or away, and the size of the game.
• Team details — the sides you play for, their badges, and the opponents each of them faces.
• Tagging data — event types, outcomes, notes, timestamps, and optional pitch or goal-mouth positions you place, along with the statistics the app calculates from them.

All of this is written directly to a database inside the app’s private storage on your phone. None of it is transmitted to us or to anyone else.

When you import a video, the app copies it into its own private storage folder so it keeps working even if you later move or delete the original file. The footage never leaves that folder unless you export or share it yourself using other apps.

The app does not record video itself in this version; footage is imported from files already on your device.

• No analytics or crash-reporting service of ours is built into the app. We receive no reports about you, your matches, or how you use it.
• No advertising, and no advertising SDKs.
• No tracking identifiers, device fingerprinting, or cookies.
• No account system, login, or cloud sync operated by us.
• No access to your location, contacts, camera, or microphone.
• No server operated by us, anywhere. There is nowhere for your data to be sent, which is the strongest guarantee on this page.

The app requests the internet permission for one reason: subscriptions. Google Play’s billing system needs it to tell the app whether your subscription is active, and the billing library Google supplies reports its own diagnostics back to Google. That traffic goes to Google and nowhere else.

Nothing about you travels with it. Not your name, not your club, not a single statistic, and not one frame of footage. Those never leave your phone at all.

The app never asks you to approve a permission, because it needs none of the ones Android puts behind a prompt. Three are granted automatically when you install it:

• Internet — used only as described above.
• Keep awake — so the screen does not sleep while you are watching footage back.
• Network state — lets the video player check whether you are online. It cannot open a connection by itself.

Importing a video or choosing a photo uses Android’s built-in system file picker, which grants the app access only to the specific file you select — not to your camera roll or storage in general.

The app offers an optional Premium subscription, billed monthly or yearly, with a free trial for new subscribers. Everything about paying for it is handled by Google Play.

• Payment goes to Google, not to us. The purchase happens in Google Play’s own payment sheet. We never see or store your card details, billing address, or the name on your account.
• Your subscription is tied to your Google account, under the Google Privacy Policy — not to any account with us, because none exists. Reinstall the app or move to a new Android phone and it is restored from Google Play automatically.
• Free trial eligibility is decided by Google, based on whether your Google account has had one before. Google knows whether you have used a trial; we do not.
• What the app stores is two small values on your device: whether your subscription is active, and when that was last checked. They exist so Premium keeps working when you have no signal, and they live in the same private storage as everything else.
• Cancel or manage the subscription in the Google Play app, under Payments & subscriptions. Note that uninstalling this app does not cancel a subscription — that is true of every Android app, and worth knowing. Refunds are also handled through Google Play.

All profile details, imported video, tagged events, calculated statistics, and the subscription record described above are held in a local database and file storage sandboxed to this app by Android — the same isolation every app on your phone gets for its own files. Other apps cannot read this data on a standard device.

Because your data is never transmitted, the usual risks of interception or server breaches do not apply. In practice, your data is as secure as your phone: we recommend using a screen lock and keeping your device’s software up to date.

Like most Android apps, the app’s data may be included in device-level backups (such as Google’s backup service) or device-to-device transfers, if you have those features enabled in your device settings. These backups are created and managed by Google or your device manufacturer under their own terms, are tied to your own account, and are never accessible to us. You can exclude app data from backups in your device’s settings.

Video files typically exceed Android’s backup size limits and are unlikely to be included in such backups.

The app can save a backup file — a .zip containing your profile details, match details, tagged events, settings, photos and badges, and any highlight reels you have already compiled. Full match videos are not included. A file is only created when you tap Save backup file, and it only goes where you choose to put it.

The file is not password protected — anyone who has it can read your name, club, and stats. Treat it like the data it contains and keep it somewhere you would keep a photo album. Restoring a backup on another device adds its contents to that device’s local storage.

If you install the app through Google Play, Google may provide us with aggregated, anonymised statistics about the app — install counts, crash reports, and similar diagnostics. This is standard for every app distributed on Google Play, is collected by Google under the Google Privacy Policy, and never includes anything from inside the app — not your footage, your profile, or your match data.

If you subscribe, Google also reports the sale to us in its developer console: an order record with a country, a currency, and an amount, but never your name, your card, or your address.

We do not sell, share, rent, or transmit your personal data to any third party. We are not able to: we never receive it in the first place.

Match footage will usually show other people, often including children. You are responsible for making sure you have any permission needed to film — clubs and leagues commonly have their own photography and filming policies, and local laws may apply to recording in some situations. The app keeps your footage private on your device, but what you choose to record, and anything you choose to share outside the app, is under your control and your responsibility.

The app is intended to be operated by an adult — a parent or coach — or by a player with their parent’s or guardian’s knowledge. We do not knowingly collect personal information from anyone, including children; the app’s design makes such collection impossible, because all data remains on the device and is never sent to us.

Subscriptions are purchased through Google Play, which supports purchase approval for supervised accounts. The app never handles payment itself.

A parent or guardian can review or delete everything the app holds at any time using the app’s own screens, or remove it all at once by uninstalling the app.

Privacy laws such as the UK and EU GDPR give people rights over personal data held by others — including access, correction, deletion, and portability. Because we hold none of your data, you exercise every one of these rights directly, on your own device:

• Access — everything the app holds is visible in the app.
• Correction — edit your profile, matches, and tagged moments in-app at any time.
• Portability — save a backup file to take your data with you.
• Erasure — delete individual items in-app, or uninstall the app to erase everything, including the database, imported videos, and photos.

Payment records are different: they are held by Google, not by us, so requests about them are made to Google under its own policy.

If you email us, we will hold your email address and message only for as long as needed to reply, and you can ask us to delete that correspondence at any time.

Your data stays on your device until you delete it or uninstall the app. We retain nothing, because we receive nothing. There is no account to close and no server-side copy to request. Google retains payment records for subscriptions under its own terms; we receive none of them.

If this policy changes, we will update the effective date above and describe the change here before it takes effect. A change of that kind is also clearly flagged in the app itself, and any new data handling is opt-in.

This version adds the Subscriptions and payments section, describes the internet permission that arrived with it, lists the app’s install-time permissions in full, and updates the backup section — backups are now a file you save rather than a code you copy, and they carry photos, badges, and compiled reels as well as your data.

Questions about this policy, or about privacy in the app generally, can be sent to luke@faultycompassstudio.com.