Privacy Policy
FullPitch is an iPhone and Apple Watch app that records football matches and turns them into stats. It is made by Douglas De Carli Immig, an individual developer based in Canoas, Brazil ("we", "us"). This policy explains what data the app handles, where it lives, and what choices you have.
The short version: your matches and your Health data stay on your devices and in your own Apple accounts. We run no server that stores them and we cannot see them. The only data that reaches us is optional, aggregated app-usage analytics, and only if you switch it on.
1. Data the app records
When you record a match with the Watch app, FullPitch collects, on the device:
- Workout data from Apple Health: heart rate, active energy, and the workout route.
- Location during the match, used to measure distance, speed, sprints, and to draw your heatmap. Location is only read while a match is being recorded.
- Motion data (stride cadence from the pedometer), so distance keeps working when GPS drops out.
- Match details you type in: the score, the opponent, the venue, and the events you log (goals, assists, half time, pauses).
- Pitch calibration: the corner positions of the pitch you place on the map, used to project your movement onto a pitch diagram.
The Watch app saves each match to Apple Health as a workout. You control that access through the Health permission prompts, and you can revoke it at any time in the Health app under Sharing.
2. Where your data lives
On your devices
All match data, including every measurement, route, heatmap, and sprint, is stored locally on your iPhone. Deleting a match in the app removes it. Deleting the app removes all of its local data. Workouts written to Apple Health remain in Health until you delete them there.
iCloud (your private database)
If you are signed in to iCloud, FullPitch syncs a limited set of match metadata to your private iCloud database so your history survives a reinstall or a new phone. This is your own Apple account; we have no access to it, and Apple's iCloud terms govern it.
| Synced to iCloud | Never synced, stays on device |
|---|---|
| Match date, type, and duration; half and pause times; score; opponent; venue; the events you logged; which achievements you earned and when; workout identifiers used to match a record with its Health workout | Heart rate, calories, distance, speed, speed zones, sprints, pace, the GPS route, the heatmap, pitch calibration, and every other measured value |
Health-derived data never reaches iCloud through FullPitch. After a reinstall or a phone change, the app rebuilds measurements from the workouts in Apple Health where they are available, and shows an honest "not available" state where they are not.
3. Analytics (optional, off by default)
On first launch the app asks whether you want to share app-usage analytics. Nothing is collected unless you choose "Share analytics". You can withdraw at any time in Profile → Share app usage analytics, and collection stops immediately.
If you opt in, the app sends a small, fixed set of events to Google Firebase Analytics, which we use to understand whether features are used and whether the app is growing:
- Share card events: a card was generated, shared (with the destination, such as Messages or Instagram), or the share was cancelled.
- A match was completed (the fact only, never its numbers).
- Weekly activity (one event per week when the app is opened).
- Subscription funnel events: the paywall was shown and from where, a locked feature was tapped and which one, a product was selected, and whether a purchase or restore started, succeeded, failed, was cancelled, or is pending.
- One setting that records whether premium features are gated for your install, used to compare the app with and without the paywall.
Along with these events, Firebase records standard technical information: a random app-instance identifier, device model, operating system version, app version, country, and language. Firebase does not collect your name, email, or contacts, and FullPitch does not create accounts.
Crash reports. With the same opt-in, the app also sends crash reports to Google Firebase Crashlytics so we can find and fix bugs. A crash report contains the app's state at the moment it crashed (which code was running, device model, operating system version, app version, and a random installation identifier). It never contains match data, Health data, or anything you typed. Declining analytics also turns crash reporting off.
What analytics never contain: no heart rate, calories, distance, speed, sprints, routes, heatmaps, scores, opponents, or any other measurement or Health value. The app's analytics code is built so that a measured number cannot be attached to an event.
Advertising features of Firebase are switched off in the app's configuration: no ad personalization, no ad storage, and no ad user data. FullPitch does not show ads, does not use the advertising identifier (IDFA), and does not track you across other companies' apps or websites.
4. Remote configuration
Regardless of the analytics choice, the app fetches a small remote configuration from Google Firebase (for example, whether the paywall is switched on). That request carries a random Firebase installation identifier and basic technical details such as app version, platform, language, and country. It carries no match or Health data and is not used for advertising.
5. Subscriptions
FullPitch Pro is sold through Apple's in-app purchase system. Apple processes the payment; we never receive your payment details. Your subscription status is checked on your device using Apple's StoreKit. Apple provides us with aggregated sales reports that do not identify individual customers. If you opted in to analytics, the funnel events listed in section 3 describe your interaction with the paywall, but not your payment information.
A subscription changes only what the app shows. It never changes what is stored: every match, at every age, stays on your device in full whether or not you subscribe.
6. Sharing cards
When you export a share card, the app renders an image from your match (for example, your distance, top speed, and heatmap) and hands it to the iOS share sheet. Where it goes from there is entirely your choice. We never receive the card.
7. Who receives data
| Recipient | What | Why |
|---|---|---|
| Apple | Health workouts you save; iCloud metadata sync; in-app purchases | Operating system services under your Apple account and Apple's own privacy policy |
| Google (Firebase) | Analytics events and crash reports, only with your opt-in; remote configuration requests | Usage measurement and feature flags. Google acts as our processor. Servers may be located outside your country, including in the United States, under Google's standard contractual safeguards |
We do not sell personal data, and we do not share it with anyone else.
8. Retention
- Match data on your device: until you delete the match or the app.
- iCloud metadata: until you delete the match, or delete the app's data from iCloud in Settings → your name → iCloud → Manage Storage.
- Apple Health workouts: until you delete them in the Health app.
- Analytics: user-level event data is retained by Firebase for two months; aggregated reports persist longer and cannot identify you.
9. Your rights
Under the Brazilian General Data Protection Law (LGPD), the EU and UK GDPR, and similar laws, you may have rights to access, correct, delete, or port your data, to withdraw consent, and to object to processing. Because your match data never leaves your own devices and Apple accounts, most of these rights are exercised directly in the app and in iOS:
- Access and portability: everything is visible in the app and in Apple Health.
- Deletion: delete a match, delete the app, or delete workouts in Health.
- Withdraw analytics consent: Profile → Share app usage analytics.
For analytics data already sent to Firebase, or for anything else, email us at the address below and we will act on your request within the period required by law. You also have the right to complain to your data protection authority (in Brazil, the ANPD).
10. Children
FullPitch is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided data through the app, contact us and we will delete it.
11. Changes
We will post any changes on this page and update the effective date. If a change materially affects how your data is used, the app will tell you before it takes effect.
12. Contact
Douglas De Carli Immig
Canoas, RS, Brazil
[email protected]