Privacy Policy

Information we collect

Account information, the email address and password you use to sign up, and the player details you provide during onboarding (name and age). Pro accounts may add additional player profiles (name and age for each).

Training data, the answers you give when generating a session (position, level, focuses, equipment, location, difficulty), the sessions and pathways we generate for you, and any feedback you leave (completion and difficulty ratings).

Billing information, subscriptions are processed by our payment provider, Lemon Squeezy, who acts as merchant of record. We receive your plan and subscription status, but we do not store your full card details.

Technical data, basic information your browser sends (such as IP address and device/browser type) and cookies needed to keep you signed in.

How we use your data

We use your data to provide the service (generate and store your training sessions and pathways), tailor sessions to you, operate your subscription, keep your account secure, respond to support requests, and improve the product. We do not sell your personal data.

Service providers

We share data only with the providers that run the service on our behalf:

• Supabase, authentication and database hosting.
• Anthropic, the third-party service that generates the personalized framing for your sessions and multi-week plans. We send only the minimal context needed (e.g. your chosen focuses and player name/age); we do not send your email or password.
• Lemon Squeezy, subscription billing.

Each provider processes data under its own terms and only as needed to deliver the service.

Data retention

We keep your account and training data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain it to meet legal or accounting obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at gaffrapp@gmail.com.

Cookies

We use strictly necessary cookies to keep you signed in and secure. We do not use advertising cookies.

Children

Gaffr is designed for footballers of many ages. If a player is a child, an account must be created and managed by a parent or legal guardian, who is responsible for the child's use of the service and for any personal data they provide.

Security

We protect your data with industry-standard measures, including encryption in transit, row-level access controls, and restricted server-side access to privileged data. No method of transmission or storage is completely secure, but we work to protect your information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated to you.

Contact

Questions about this policy or your data? Email us at gaffrapp@gmail.com.