Privacy Policy

1. Introduction

Apps by Angela ("we", "our", "us") provides a mobile application designed to help gymnastics clubs manage their operations, communicate with members, and streamline club administration. This privacy policy explains how we collect, use, store, and protect your personal information when you use our app.

We are committed to protecting the privacy of all our users, including children and young people. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

When you register for an account or use the app, we may collect the following information:

Account Information

• Full name
• Email address
• Phone number
• Date of birth (required for age verification and safeguarding purposes)
• Account password (stored securely via Firebase Authentication)

Child/Gymnast Information

• Child's name
• Home address, town, and postcode
• Contact email
• Medical conditions, allergies, and medication details
• Special requirements

Emergency Contact Information

• Emergency contact name
• Emergency contact phone number
• Relationship to the gymnast

Payment Information

• Payment transactions are processed securely through Stripe and Apple Pay. We do not store your card details directly. All payment data is handled by Stripe in accordance with PCI DSS standards.

Other Information

• Photos uploaded within the app (e.g. profile images, merchandise images)
• Push notification preferences and tokens
• Parental consent records

3. Why We Collect Date of Birth

Date of birth is collected as a core requirement of the app's functionality. In line with gymnastics safeguarding policies, users aged 16 and over may create their own accounts, while users under 16 must have a parent or guardian register on their behalf. Date of birth is essential to verify age eligibility and to ensure compliance with child safeguarding obligations in sport.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Verify age eligibility for safeguarding purposes
• Enable communication between the club and its members
• Process merchandise orders and payments
• Send push notifications about club updates, events, and important information
• Manage class registrations, waiting lists, and attendance
• Store medical and allergy information to ensure the safety of gymnasts during sessions
• Maintain emergency contact details for use in the event of an emergency

5. How We Store and Protect Your Data

Your data is stored securely using Google Firebase, which provides enterprise-grade security including:

• Encryption of data in transit and at rest
• Secure authentication via Firebase Authentication
• Access controls and security rules on database collections

Payment processing is handled entirely by Stripe, a PCI Level 1 certified payment processor. We never have access to your full card details.

6. Data Sharing

We do not sell your personal data to any third parties. Your information may be shared with:

• Firebase (Google) — for authentication, data storage, file storage, and push notifications
• Stripe — for processing payments
• Apple (APNs) — for delivering push notifications on iOS devices

These services act as data processors on our behalf and are bound by their own privacy policies and data protection obligations.

7. Children's Privacy

We take the privacy of children seriously. Users under the age of 16 cannot create an account independently — a parent or guardian must register on their behalf. Medical, allergy, and emergency contact information for children is collected solely for safeguarding and welfare purposes during gymnastics activities.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access — you can request a copy of the personal data we hold about you
• Rectification — you can update or correct your information through the app's Profile section
• Deletion — you can delete your account at any time through the Profile section in the app's side menu. This will permanently remove your account and associated data
• Data portability — you can request your data in a portable format
• Withdraw consent — you can withdraw consent for push notifications through your device settings

9. Account Deletion

You can delete your account at any time from within the app. Navigate to the Profile section (available in the side menu) and select "Delete Account". This action is permanent and will remove your profile details and associated data from the app. This cannot be undone.

10. Push Notifications

We use push notifications to send you important club updates, event reminders, and other relevant information. You can manage your notification preferences or disable notifications entirely through your device settings at any time.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at:

Email: info@appsbyangela.co.uk