Privacy Policy

What we collect

• Account information: your email address and password (handled by our authentication provider, Supabase - we never see or store your password ourselves), plus an auto-generated username.
• Practice activity: the questions you answer, your chosen action, whether it was correct, and the resulting accuracy stats shown on your Stats page. This is what makes your practice history and accuracy tracking work.
• Billing information (web only, Pro subscribers): your subscription status and renewal date. Your card details are handled entirely by our payment processor, Stripe - we never see or store your card number.
• Basic site analytics (web only): aggregated page- view data via Vercel Analytics, to understand which pages get used. This is not tied to your account and isn't used for advertising.

What we don't do

• We don't sell your data to anyone, ever.
• We don't run advertising and don't use ad-tracking cookies or SDKs.
• We don't share your data with third parties beyond the service providers necessary to run the product: Supabase (database and authentication), Stripe (payment processing, web only), and Vercel (hosting and the analytics above).

The mobile app specifically

The mobile app reads and writes the exact same account and practice data described above - signing in with the same email on the app and the website gets you the same account, the same history, and the same stats. The app doesn't collect anything beyond that: it checks your device's network connection locally to show an offline indicator, but that check never leaves your device. The Android app can take a Pro subscription directly through Google Play. When it does, Google Play handles the payment and we never see your card details - we receive only the fact that a subscription is active, routed through RevenueCat, which is the service we use to read store subscription status. The iOS app has no in-app purchase, because it is not built yet.

Cookies and local storage

If you are just reading the site - the homepage, the free ranges, the guides, the calculators - we set no cookies at all. Not one. There is no advertising cookie, no tracking pixel and no third-party script on those pages, so there is nothing here to ask you to consent to and no cookie banner in your way.

• Sign-in cookies (strictly necessary): once you log in, our authentication provider Supabase sets cookies beginning sb- that hold your session so you stay signed in between pages. They exist only to keep you logged in. Signing out or deleting your account clears them; blocking them means you cannot sign in.
• Practice preferences (on your device only): the trainer remembers small settings in your browser's local storage - whether auto-advance is on, and the table size and stack depth you last practised. This never leaves your device and is not sent to us.
• Analytics (no cookies): Vercel Analytics counts page views without setting a cookie and without building a profile of you. It is why the point above is true.

Why we're allowed to hold it

Under the GDPR and UK GDPR every use of your data needs a lawful basis. Ours are straightforward: your account, your practice history and your sign-in cookies are all performance of the contract between us - they are the product, and it cannot work without them. Billing records are kept because we have a legal obligation to keep tax and transaction records. Aggregate page-view analytics and product emails rest on our legitimate interest in understanding which pages are used and in telling you about the thing you signed up for - and every product email carries a one-click unsubscribe link that we honour immediately.

How long we keep it

Your account, profile and practice history are kept for as long as your account exists, because they are what your stats are made of. Delete your account and they go with it, immediately and permanently - there is no soft-delete and no recovery window, so please export anything you want first. The one thing that outlives your account is billing and tax records: we and Stripe keep those for at least five years after the transaction, which is the minimum the Australian Taxation Office requires business records to be kept for. Aggregate analytics is never tied to your account and is retained in aggregate form only.

Where your data is

We are based in Australia and our service providers operate globally, so your data is processed outside your own country: Supabase (database and authentication), Vercel (hosting and analytics) and Stripe (payments, web only) all run infrastructure in the United States and the EU. Where that means moving personal data out of the UK or the European Economic Area, each of those providers relies on the European Commission's Standard Contractual Clauses, and they process data only on our instructions - we do not sell or share it with anyone else.

Your choices

You can edit your username or opt out of the (not yet launched) leaderboard from your Account page at any time. You can permanently delete your account and all associated data yourself, at any time, from the Account page on the website or in the mobile app - this immediately cancels an active Pro subscription and removes your profile, practice history, and login. To request a copy of your data instead, email us at support@pushfoldtrainer.com.

Depending on where you live you may also have the right to ask us to correct or restrict what we hold, to object to a particular use, or to receive your data in a portable form. Ask at the same address and we'll answer within 30 days. If you think we've got it wrong, you can complain to a regulator: in Australia the Office of the Australian Information Commissioner (oaic.gov.au), in the UK the Information Commissioner's Office (ico.org.uk), and in the EEA your national data protection authority. We'd rather you told us first, but you don't have to.

Changes to this policy

If what we collect or how we use it changes in a meaningful way, we'll update this page and change the date above.

Contact

Questions about this policy or your data: support@pushfoldtrainer.com.