Privacy Policy

Last updated: October 2026

1. Introduction

Gaffer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service (the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

2.2 Payment Information

Web payments are processed by Stripe. In-app subscriptions are processed by Apple or Google Play and managed through RevenueCat. We do not store your complete card details.

2.3 Usage Data

We automatically collect certain information when you use the Service, including:

2.4 Content You Create

We store the tactical diagrams, training sessions, match plans, squad information, and calendar events you create within the Service.

3. How We Use Your Information

We use the information we collect to:

4. Third-Party Services

We share information with the following third-party services:

4.1 Supabase

Our database and authentication provider. Stores your account information and app data securely.

4.2 Stripe

Processes subscription payments. Subject to Stripe's Privacy Policy.

4.3 Anthropic (Claude AI) - AI-Powered Coaching Features

Gaffer uses the direct Anthropic Claude API for exercise generation, session planning, notebook analysis, match preparation, and dashboard insights.

Data shared with Anthropic Claude:

Purpose: We send this data to Anthropic to generate personalised coaching suggestions, exercise setups, and tactical analysis. Anthropic may also process it for abuse monitoring, security, and legal obligations.

Data retention: Anthropic may retain prompts, context, and responses sent through Claude API for abuse monitoring, security, and legal obligations. They are not guaranteed to be deleted immediately after processing.

Consent: AI data sharing requires your explicit opt-in consent before any data is sent to Anthropic. You can grant or revoke this consent at any time in Settings > Privacy & Data. Revoking consent immediately disables all AI features and prevents further data sharing.

Anthropic's policies: Data processing by Anthropic is subject to the Anthropic AI Terms of Service and Anthropic Privacy Policy.

Gaffer temporarily caches completed AI responses for about 24 hours to recover interrupted requests. Request metadata is retained for about seven days; onboarding allowance records remain until account deletion.

4.4 Google Sign-In / Apple Sign-In

If you choose to sign in with Google or Apple, we receive your email address and name from these providers.

4.5 RevenueCat

Manages in-app subscriptions on iOS and Android. Apple and Google Play process the respective store purchases. Subject to RevenueCat's Privacy Policy.

4.6 Third-Party AI Data Protection

We require all third-party AI providers to maintain data protection standards equivalent to our own. Data shared with AI providers is limited to what is necessary for the requested feature, is transmitted securely via encrypted connections (TLS), and is not used to train AI models unless explicitly disclosed.

4.7 Website analytics

On the website, Google Analytics uses cookies to measure visits and feature use only after you accept analytics. Your choice is saved in this browser and is separate from your account and AI data consent. You can reject analytics or change your choice at any time in Settings, the website footer, or below.

Analytics settings

5. Data Retention

We retain the information needed to provide the Service while your account is active. Deleting your account removes your active account and personal coach profile from our main database; shared club work may remain for other members. Purchase records, support correspondence, security logs, and backups may be retained for limited periods for legal, security, or operational reasons.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights:

To exercise these rights, contact us at frederik@gafferapp.net.

Request Gaffer account deletion on the web

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: frederik@gafferapp.net

Website: https://gafferapp.net

frederik@gafferapp.net · support@gafferapp.net · gafferapp.net