PRIVACY POLICY

Practice Thinkers Ltd
Effective date: 1 January 2026
Last updated: 1 January 2026

This Privacy Policy explains how Practice Thinkers Ltd (“we”, “us”, “our”) collects, uses, shares and protects personal data when you use our website and the Practice Thinkers iOS app (together, the “Services”).

We aim to handle personal data in a transparent and secure way, in line with UK data protection law (including the UK GDPR and the Data Protection Act 2018).

1) Who we are (Data Controller)

The Services are operated by Practice Thinkers Ltd, a company incorporated in Scotland (company number SC858472) with its registered office at 60 Constitution Street, Leith, Edinburgh, EH6 6RR.

For data protection purposes, Practice Thinkers Ltd is the data controller of the personal data described in this policy.

Contact: peter@practicethinkers.com

2) What personal data we collect

2.1 Account and login data (Firebase Authentication)

When you create an account and log in, we collect and process:

• Email address

• Password (handled securely by Firebase Authentication; we do not store plain-text passwords)

• Unique account identifiers (e.g., user ID)

2.2 Profile and role data (optional)

Depending on what you provide/select in the app, we may process:

• Name (if you choose to provide it)

• Role (e.g., player or coach) and other onboarding selections/preferences

2.3 Practice and training data you enter (Firebase Firestore)

We process the content you choose to enter into the app, such as:

• Practice diary entries and session details

• Notes, reflections, tags and scores

• Training-related inputs you submit as part of the app’s features

2.4 Team / organisation data (Firebase Firestore)

If you join or create a team/programme, we may process:

• Team/organisation name and settings

• Membership details (e.g., which users are linked to which team)

• Coach–player linking information (e.g., linking codes or relationships)

2.5 Images (Team logo upload) (Camera / Photos + Firebase Storage)

The app allows you to upload a team logo. To do this, you may:

• take a photo using your device camera, and/or

• select an existing image from your photo library

If you upload a team logo, we will store:

• the image itself

• basic related metadata (such as upload time and file reference)

Images are stored using Firebase Storage. You can replace or remove the team logo (subject to how your team/admin permissions are configured).

2.6 Analytics data (Firebase Analytics)

We use Firebase Analytics to understand how the app is used and to improve the user experience. This may include:

• app interaction events (e.g., screen views and feature usage)

• device/app information (e.g., app version, device model, operating system version)

• approximate location derived from IP address (depending on device/network)

2.7 Crash and diagnostics data (Firebase Crashlytics)

We use Firebase Crashlytics to diagnose crashes and stability issues. Crash reports may include:

• crash logs and diagnostics information

• device and OS information

• app version and time of crash

• identifiers needed to group crashes and measure stability

2.8 Website purchases and consultation bookings (website)

If you book consultations or purchase services via our website, we may collect:

• name and contact details (e.g., email)

• booking details and notes you provide

• transaction metadata (e.g., purchase confirmation, amount, timestamp)

We do not store your full payment card details. Payments are processed by our payment provider (e.g., Stripe).

2.9 App Store purchases (Apple In-App Purchase)

If you purchase an individual subscription in the iOS app, payment is processed by Apple. We may process limited purchase/entitlement information required to confirm access (for example, subscription status or transaction identifiers). We do not receive your full payment card details.

3) How we use personal data (purposes)

We use personal data to:

1. Provide the Services

• create and manage accounts

• provide app features and content

• store and display your practice logs and related information

1. Manage access and entitlements

• confirm subscription status and enable/disable access to paid features

• administer organisation/team access and coach–player linking

1. Operate, secure and improve the Services

• monitor performance and reliability

• diagnose bugs and improve user experience (Analytics + Crashlytics)

• prevent fraud and protect accounts and systems

1. Customer support and communications

• respond to support requests

• send service messages (e.g., important updates, account/security notices)

1. Legal and compliance

• comply with legal obligations

• enforce our Terms of Service

• maintain records for accounting and tax where required

4) Legal bases for processing

Under UK GDPR we rely on:

• Contract – to provide the Services you request (account, app functionality, consultation bookings, subscription access)

• Legitimate interests – to operate, secure and improve the Services (e.g., analytics, crash reporting, fraud prevention), balanced against your rights

• Legal obligation – where we must keep records for legal/tax/accounting reasons

• Consent – where required (typically for certain website cookies/analytics). You can withdraw consent where this applies.

5) How we share personal data

We may share personal data with trusted service providers that help us deliver and improve the Services, including:

• Google Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics)

• Payment processors

  • Website payments: Stripe (or another provider used on our website)

  • iOS subscriptions: Apple (In-App Purchase)

• Hosting/infrastructure providers needed to operate the Services

• Professional advisers (legal/accounting) where necessary

• Authorities where required by law or to protect rights/safety

We do not sell personal data.

6) International transfers

Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards required under UK data protection law (for example, standard contractual clauses or other recognised transfer mechanisms).

7) Data retention

We keep personal data only for as long as necessary for the purposes described in this policy.

Typical examples:

• Account and practice data: kept while your account is active, and for a reasonable period afterwards unless you request deletion (subject to legal requirements).

• Team logo images: kept until replaced or removed, subject to any backup/retention windows.

• Purchase records: kept as required for accounting/tax.

• Analytics and crash data: kept according to our configuration and operational needs.

8) Your rights

You may have rights including:

• access to your personal data

• correction of inaccurate data

• deletion (in certain circumstances)

• restriction/objection (in certain circumstances)

• data portability (in certain circumstances)

• withdrawal of consent (where processing is based on consent)

To exercise your rights, contact peter@practicethinkers.com.

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

9) Managing analytics and diagnostics

We use Firebase Analytics and Crashlytics to improve the app’s performance and reliability.

Where applicable, we may provide controls in the app (or via device settings) to limit analytics collection.

10) Cookies and similar technologies

10.1 Website

Our website may use cookies and similar technologies for essential functions, performance and analytics. Where required, we use a cookie banner/consent tool.

10.2 iOS App (SDKs)

The App uses SDKs and device identifiers for functionality, analytics and crash diagnostics (including Firebase services).

11) Children

The Services are not intended for children under 16. If you believe a child under 16 has provided personal data, contact us and we will take appropriate steps.

12) Security

We use reasonable technical and organisational measures to protect personal data. However, no system is completely secure; you are responsible for keeping your login details confidential.

13) Future features

We may introduce optional features in future versions of the App (for example, voice recording). If we do, we will update this Privacy Policy before those features are enabled, and we will request any required device permissions at the point you choose to use those features.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice via the website, the app, or email.

15) Contact

Practice Thinkers Ltd
60 Constitution Street
Leith, Edinburgh
EH6 6RR
Email: peter@practicethinkers.com