Privacy Policy
Last updated: October 7, 2026
Touchline ("we", "our", "the app") is a football training tracker. This policy explains what data we collect, why, and how it's handled.
Data we collect
- Account data: email address and authentication identifiers, via Supabase (and Sign in with Apple, if you use it).
- Training data: sessions you log (type, duration, RPE, notes, focus tags, match stats, strength sets), your profile (name, positions, playing level, birthday and age, whether you're a boy or a girl if you choose to say, height and weight, goals, training days), your habit tracking and the daily notes you write there, your training plan, saved routines, and any AI-generated training plans you request. This is stored in your account so it follows you to a new device.
- Health data (Apple Health): if you connect Apple Health, we read steps, active energy, resting heart rate, heart-rate variability, sleep, breathing rate, wrist temperature, blood oxygen, workouts and body weight to calculate your training load, readiness, sleep habit and weight trend. These readings are taken on demand and stay on your device — the daily figures behind your readiness score are never uploaded. The one exception is under your control: when you tap “Add Apple Health data” on a completed session, the metrics measured during that session (average and maximum heart rate, energy, distance, exercise minutes) are attached to it and stored in your account, so the session keeps what it actually cost and reads the same on your other devices. Only if you allow it (the coach asks once; you can change it in Settings → Apple Health), your readiness score and sleep are sent to our AI provider to answer your coach chats and build your training plan. They are used only for that answer, not stored by the AI provider and not used to train AI models. Apart from that, Health data is never shared with third parties, never used for advertising, marketing or data mining, and never stored in iCloud. You can disconnect in the app (Settings → Apple Health) and revoke access entirely in iOS Settings → Privacy & Security → Health.
- Community content: if you post to the community feed, the text, any photo you attach and the training session you choose to share are stored on our servers and shown to other signed-in users, alongside your username. Posts marked "Only me" are visible to you alone.
- Moderation records: if you report content or block an account, we store the report (including a copy of the reported content), the accounts involved and the reason, so we can review it and enforce our rules.
- Player card: your username, profile photo, club, shirt number, positions and playing level are shown to other signed-in users on your player card and the leaderboards.
- Coach chats: your conversations with the in-app coach are saved on your device only, until you delete them.
- Photos: photos you attach to a community post are uploaded and stored. Photos you add to your own sessions are backed up privately to your account, visible only to you. Photos you scan for calorie tracking are sent to our AI provider to be analysed and are not stored by us.
- Device data: standard technical data needed to run the app (device type, OS version) — no advertising identifiers are collected.
We do not collect location data, contacts, your photo library as a whole, or browsing history.
How we use your data
- To sync your training log across your devices.
- To generate personalized AI training plans (sent to our AI provider only with the training details you explicitly provide in the planner).
- To operate subscriptions and restore purchases (via RevenueCat and Apple's App Store).
- To provide optional features you opt into, such as friend leaderboards and coach-connect (only the data needed for those features is shared with the people you connect with).
- To calculate your training load, readiness and nutrition targets from Apple Health data, on your device — and, for a session you choose to attach them to, to store those measured metrics with it.
- To run the community feed and keep it safe: screening posts for objectionable content, reviewing reports, and enforcing blocks and account removals.
We do not sell your personal data, and we do not use it for advertising. Health data is never used for advertising, marketing, or any purpose other than the in-app features described above, and is never shared with or sold to third parties, in line with Apple's HealthKit requirements.
Data storage & security
Your data is stored with Supabase (PostgreSQL) over encrypted connections. Local device storage uses standard OS-level app sandboxing.
Third parties
- Supabase — authentication and data sync.
- RevenueCat — subscription management (receives your purchase/entitlement status, not payment card details — Apple handles payment).
- Apple — App Store purchases and Sign in with Apple.
- Sentry — crash reporting. When the app crashes we send the error, where in the code it happened, and basic device details (model, OS version) so we can fix it. No account details, email address or training data are attached.
- PostHog (hosted in the EU) — product analytics, so we can see which parts of the app help and where people get stuck. We send a fixed list of in-app actions (for example: an onboarding step finished, the membership screen shown, a workout started or finished, a plan started, a post or feedback sent, but never what you wrote), the screen name, and basic app and device details (app version, iOS version, device model), tied to your random account ID once you sign in. No name, email, username, Apple Health readings, injuries, photos or chat or feedback text are sent. Players under 13 are not tracked at all.
- Anthropic (our AI provider) — the coach chat and the AI training plan send what they need to answer: your profile, training, plan, habits and notes, what you type, and, only if you allow it, your readiness and sleep from Apple Health. It's used only to produce the answer, not used to train models, and not kept beyond that.
Your rights
You can request access to, correction of, or deletion of your data at any time by emailing touchline.app.football@gmail.com. You can also delete your account and all associated data directly from the app (Profile → Delete Account).
Children's privacy
Touchline is intended for users old enough to manage their own football training. We do not knowingly collect data from children under 13 without parental consent where required by law.
Changes to this policy
We'll update the "Last updated" date above when this policy changes materially, and notify users in-app for significant changes.
Contact
Questions about this policy: touchline.app.football@gmail.com