Training Tracker is a tool for coaches, clubs and schools to plan training sessions, build drills and playbooks, and prepare for games. This policy explains what information we collect, how we use it, and the choices you have. Because coaches use Training Tracker to plan sessions for the teams they coach, the app holds two different kinds of personal information: information about the coaches and administrators who hold accounts, and information about the players they coach, who are often children. Section 4 deals specifically with player and child information, and Section 5 deals specifically with video. Please read both.
Account information. When you create an account we collect your name, username, email address and password. Passwords are hashed and never stored in readable form. Organisation and team information. Your organisation name, team names, logos, branding colours and the settings you choose. Content you create. Training plans, game plans, drills, categories, plays, playbooks, diagrams, images, notes, teaching points and any other content you enter. Player information you enter. Player names and lists, starters, bench and unavailable players, and any notes you record about players. See Section 4. Drill videos. Video files you upload to a drill, along with the filename, file size, duration and a thumbnail image. See Section 5. Billing information. If you subscribe to a paid plan, our payment processor collects your billing details. We never see or store your full card number. Technical and security information. We record your IP address when a sign-in attempt fails, so we can limit brute-force attacks on accounts. These records are automatically deleted after 15 minutes. We also use your IP address on a short-term basis to rate-limit some public endpoints. Our hosting providers keep standard server logs. Information you import. If you connect a fixture calendar feed or a competition results page to a team, we fetch and store the fixture information from that source so it can appear in your plans. That information comes from the third-party service you point us at, not from us. Prospective customers. If you or your organisation ask us for a demonstration or trial, or your organisation is referred to us, we may create a draft account containing your organisation name, a contact name and an email address before you have signed up. If you would prefer we did not hold that information, contact us and we will delete it.
We use the information we collect to run Training Tracker: to provide the service and its features, to store and display the content you create, to authenticate you and keep accounts secure, to process subscriptions and payments, to provide support and respond to your questions, and to send you service messages such as invitations, password resets and billing notices. We may also send occasional messages about new features or product news. You can ask us to stop sending these at any time by contacting us. We do not sell your information. We do not use your content, including player information or video, to advertise to you or to anyone else.
Training Tracker accounts are for adults. Accounts are intended for coaches, team managers, administrators and other staff aged 18 or over. Training Tracker is not directed to children, we do not market the app to children, and we do not knowingly allow a child to create an account or collect personal information directly from a child. If you believe a child has created an account, contact us and we will remove it. Coaches do record information about children. Most teams coached with Training Tracker include players under 18. When a coach enters a squad list, marks who is starting or unavailable, writes a note about a player, or uploads video of a training session, the app is holding personal information about those children. We want to be clear about that rather than leave it unsaid. Who is responsible for consent. Where a school, club or organisation holds the Training Tracker subscription, that organisation decides what is recorded about its players and is responsible for having the consents, permissions and child-safety policies that its own rules and the law require, including any parent or guardian consent needed to record, store or share images and video of a child. We store and process that information on the organisation's behalf and act on its instructions. If you coach independently, that responsibility is yours. What we ask of coaches and organisations. Please record only what you actually need in order to coach. Do not enter health, medical, disability, religious, or other sensitive details about a player, and do not enter a player's contact details, address or date of birth. Consider using first names or initials rather than full names where that is enough for your purpose. Before uploading video, make sure you are permitted to film those players and to store the footage, and read Section 5 so you understand how video links work. Requests from parents and guardians. If you are a parent or guardian and you want to know what is held about your child, or you want it corrected or deleted, the fastest route is usually your child's coach, club or school, because they control the account and can act immediately. You can also contact us at trainingtrackersupport@gmail.com and we will help. Where the information belongs to an organisation's account, we will pass your request to that organisation and support them in responding. If you ask us to remove a specific video, we will delete the file and disable its link, and we will do so promptly rather than waiting for the organisation to respond.
Videos you attach to a drill are uploaded from your device directly to Amazon Web Services (S3) in Sydney, Australia. They do not pass through our own servers. Each video is stored under a long, randomly generated address. Please read this carefully: video links are not password-protected. So that a video can be opened from a printed session plan by scanning a QR code, each video also has a short link that works without signing in. This means anyone who has the link, is given or forwarded a plan PDF containing the QR code, or photographs that QR code, can watch the video without a Training Tracker account. The link is long and random, and we do not publish or index it, but it is not restricted to your team. Treat a video link the same way you would treat the video file itself. Before you share or print a plan that contains video QR codes, and particularly where the footage shows children, make sure you are comfortable with everyone who receives that plan being able to view the footage, and pass it on accordingly. How long a link lasts. A video link stays valid for as long as the video exists. Links are not set to expire, are not tied to a particular person or device, and cannot be individually cancelled or reissued while the video is still stored. Deleting the video is the only way to stop its link working, so if a link has been shared more widely than you intended, delete the video. Deleting a video. When you delete a video in the app, we delete the file from storage. Its link stops working from that point on, including any QR code already printed. If a plan has already been distributed, deleting the video is the way to cut off access to it. If you need help removing a video, contact us at trainingtrackersupport@gmail.com.
We do not sell, trade or rent your personal information. Your content is visible to the other members of your organisation and teams according to the access each person has been given. Organisation administrators can see the teams, plans, drills and content within their organisation. We rely on a small number of service providers to run Training Tracker. Each receives only what it needs to do its job and is contractually required to protect it: Stripe, for subscription payments and billing. Amazon Web Services (S3), for drill video storage. MongoDB Atlas, for the application database. Fly.io, for application hosting. We may also disclose information where we are required to by law, where we need to in order to establish or defend a legal claim, or where we reasonably believe it is necessary to prevent a serious threat to a person's life, health or safety. Where a disclosure relates to the safety of a child, we will act on it promptly and cooperate with the relevant school, club or authority. Some Training Tracker pages, such as published tournament draws and results, are deliberately public. These show team, school and fixture information only, never individual player details.
Training Tracker is hosted in Australia. The application runs in Sydney, the database is hosted in the Sydney region, and drill videos are stored in the Sydney region. Your data is not routinely transferred overseas. Some of our providers are companies with operations outside Australia, and limited information may be accessed from overseas for support and administration. Stripe processes payments through its own international infrastructure. We take reasonable steps to ensure these providers handle your information consistently with this policy and applicable privacy law.
We use industry-standard measures to protect your information against unauthorised access, alteration, disclosure and destruction. Traffic is encrypted in transit. Passwords are hashed and never stored in plain text. Sign-in attempts are rate limited to resist brute-force attacks, and sessions use tokens that can be revoked. Access to teams, plans and drills is checked against your permissions on every request. No system can be guaranteed completely secure. Please use a strong and unique password, do not share your account, and tell us immediately if you think your account has been accessed by someone else. Note that the video links described in Section 5 are an intentional exception to the access controls above.
We keep your account and content for as long as your account is open, because the value of the app is in the drill and plan library you build up over seasons. Failed sign-in records are deleted automatically after 15 minutes. You can delete individual drills, plans, videos and other content at any time from within the app, and an organisation administrator can remove users. Deleting a video removes the underlying file. You can delete your account and its associated data, including stored videos, from the Settings page, or by contacting us. Doing so cancels any active subscription. We will action a deletion request within 30 days. We may retain a limited amount of information for longer where we are required to, for example billing records kept for tax purposes, and copies may persist in routine backups for a short period before being overwritten.
We use session tokens to keep you signed in and local storage to remember your preferences. We do not use third-party advertising trackers, we do not run third-party analytics that profile you, and we do not sell your browsing data.
You can access and update your personal information at any time through the Settings page, and you can delete your account there as well. You may also ask us to give you a copy of the information we hold about you, correct it if it is wrong, delete it, or explain how we have handled it. To make a request, or to complain about how we have handled your information, contact us at trainingtrackersupport@gmail.com. We will respond within 30 days. If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner at oaic.gov.au.
If a breach of personal information occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme. Where the breach affects information an organisation has entrusted to us, including player information, we will notify that organisation without undue delay so it can meet its own obligations.
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date at the top. Where a change materially affects how we handle player or child information, or how video is stored or shared, we will take reasonable steps to notify account holders directly.
If you have any questions about this Privacy Policy, want to make a privacy request, or have a concern about information held about a child, contact us at trainingtrackersupport@gmail.com. Requests concerning a child are treated as a priority.