Privacy Policy

1. Information We Collect

When you use Gaffer, we collect the following information:

• Email address (for account authentication)
• FPL Team ID (to fetch your squad data)
• Firebase Cloud Messaging device token (to deliver push notifications)
• Notification preferences (to honor your settings choices)

2. How We Use Your Information

Your information is used solely to provide the App's core functionality:

• Your FPL Team ID is used to look up your squad and determine which player events are relevant to you
• Your device token is used exclusively to send you push notifications about your squad's in-match events
• Your email address is used for account authentication and recovery

We do not sell, share, or use your personal data for advertising or marketing purposes.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity — your FPL Team ID, email address, and account data are required to provide the App's core service
• Consent — push notifications are sent only with your explicit consent, which you may withdraw at any time through your device settings or the App's notification preferences

4. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

• Firebase Authentication and Cloud Messaging (Firebase Privacy Policy)
• Google Sign-In (Google Privacy Policy)
• Amazon Web Services (AWS Privacy Policy)

Player and team data is sourced from publicly available Fantasy Premier League endpoints. We do not store or redistribute raw Premier League data. No additional analytics or tracking services are used.

5. International Data Transfers

Your data is processed and stored on servers operated by Amazon Web Services and Google (Firebase), which may be located in the United States or other countries outside of your country of residence. By using the App, you consent to the transfer of your information to countries where data protection rules may differ from those in your jurisdiction.

6. Data Storage and Security

Your account data is stored securely with encryption at rest. Device tokens, team registrations, and notification preferences are retained only as long as your account is active. We implement reasonable technical measures to protect your data, but no method of electronic storage is 100% secure.

7. Data Retention and Deletion

You may delete your account at any time through the Settings screen. When you delete your account, all associated data — including your FPL Team ID, device tokens, and event history — is permanently removed from our servers. There is no recovery after deletion.

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You can exercise your right to deletion at any time through the in-app account deletion feature. For other data requests, please contact us at the email below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App. Continued use after changes constitutes acceptance of the updated policy.