Privacy Policy

Touchline · Last updated: 1 November 2026

1. Who we are

Touchline is an Android app for grassroots football coaches. This policy explains how we handle information when you use the Touchline app or this website (touchlineapp.co.uk), wherever you are in the world.

Data controller: Touchline is provided by 10th Dimension Limited, which is the data controller for personal data processed in connection with the Touchline app and this website. You can contact us at contact@touchlineapp.co.uk.

Contact: contact@touchlineapp.co.uk.

We are based in the UK, so this policy is written to meet UK data protection law (UK GDPR) and the EU GDPR. People use Touchline in many countries, so we apply the same approach to everyone, and section 13 and section 15 explain the extra rights you may have under the laws where you live.

2. What Touchline is designed to do

Touchline is built as a local-first coach tool. Core match tracking — clock, lineup, substitutions, goals, cards, My Team, and season reports — is intended to work on your device, including offline pitch-side use. Touchline also has a sign-in account (email address and password), so the data you save to your account, including any optional cloud backup, is stored with our service provider Google Firebase as well as on your device (section 4). It is designed for touchline use, not for league administration or team administration.

3. Information stored on your device and with your account

Depending on how you use the app, Touchline may store information such as:

  • Team and player names you enter
  • Match details, events, and related notes
  • App preferences and settings
  • Match and season data

This information is kept on your device so the app works offline. Where it is saved to your account or included in an optional cloud backup, a copy is also stored with your account in our Firebase project so it can be restored.

This content is created by you for coaching purposes. Treat player and volunteer details carefully and only enter what you need.

4. Information we may receive

Your account. When you create a Touchline account, your email address and password are handled by Firebase Authentication, a service from Google; passwords are stored by Firebase in protected (hashed) form and we cannot see them. Linked to your account, we also store your profile and app settings and the team, player, match and season data you save to it, including any optional cloud backups. We use this only to sign you in, keep your data with your account and restore it. Google processes this data for us as our service provider (processor) and may process it outside the UK and EEA under appropriate safeguards (see section 14). To delete your account and this data, see our Delete your account page.

When you contact us by email, we receive the address and content you send so we can reply.

If you purchase Touchline Plus via Google Play, purchase and entitlement validation is handled by Google Play Billing. We do not receive your full payment card details. Google’s own privacy terms apply to Play purchases and account data.

This marketing website may be served with standard web server logs (for example IP address, browser type, and pages requested) for security and reliability. We do not use that logging to build marketing profiles of visitors.

The app also sends crash reports (section 7) and usage analytics (section 8) to Google Firebase. You can turn either off in the app’s Settings.

5. Sharing and export (Touchline Plus)

If you use share or export features (typically Touchline Plus), content is shared with other people or apps only when you choose to share or export it — for example to another app, file, or person. Saving data to your account or a cloud backup (section 4) does not share it with anyone else.

6. Advertising (Google AdMob)

On the free tier, Touchline may show a full-screen advertisement after a match finishes. We do this to help keep core match tracking free. We do not show ads during live match play (while the clock and events are in progress). Touchline Plus has no ads.

Ads are provided by Google AdMob, a service from Google. We do not use any other ad networks. When an ad is requested or shown, AdMob may collect and use your device’s advertising ID and information about your device, such as its model, operating system, IP address and approximate location, to show ads, measure them and prevent fraud. Google’s own privacy policy applies to how it uses this information.

Your choices. Where the law requires it, including in the UK and EEA, Touchline shows Google’s consent message so you can choose how your data is used for ads. Depending on your choice and where you are, the ads you see may be personalised (based on your interests) or non-personalised. You can review or change your choice at any time with Settings > App > Ad privacy options in the app.

Wherever you are, you can also reset or delete your advertising ID, or opt out of personalised ads, in your Android device settings (the exact menu depends on your device, usually under Settings > Privacy > Ads or Settings > Google > Ads). Upgrading to Touchline Plus removes ads completely.

7. Crash reports (Firebase Crashlytics)

If Touchline crashes, the app sends a crash report to Firebase Crashlytics, a service from Google, so we can find and fix the problem. We rely on our legitimate interests (UK GDPR / EU GDPR Article 6(1)(f)) in keeping the app working properly and fixing faults quickly. A crash report contains:

  • the device model and manufacturer, and the Android version
  • the Touchline version
  • technical details of the crash (the stack trace and the app’s state at the time, such as memory and orientation)
  • a random Crashlytics installation ID and a Firebase installation ID, used to count how many installations a crash affects
  • whether the app has Touchline Plus (yes or no)

Crash reports never include your name, team, player names, match details, notes or any other information you type into the app, and we don’t use them to identify you or for advertising. Google processes this data for us as a service provider and may process it outside the UK and EEA under appropriate safeguards (see section 14). Crashlytics keeps crash reports for 90 days.

You can turn crash reports off at any time in Settings > App > Send crash reports. When it’s off, no crash reports are sent, and any reports already saved on your device but not yet sent are deleted.

8. App usage analytics (Google Analytics for Firebase)

The Touchline app uses Google Analytics for Firebase, a service from Google, to understand how the app is used so we can improve it. It collects:

  • the screens you view, and your app sessions
  • four app events: match started, match saved, report viewed (with the type of report) and share (with what was shared: a result or a lineup)
  • Touchline Plus in-app purchase events, which Google Analytics logs automatically
  • a random app-instance ID
  • your approximate location, worked out from your IP address

Usage analytics does not include your name, email address, players, teams, scores or other match details, and it isn’t linked to you by a user ID. We have turned off collection of your advertising ID and Android ID in Google Analytics for Firebase (the advertising ID is still used by AdMob for ads, as described in section 6). Usage analytics is only collected while the Send usage analytics switch is on and, where consent is required, after you have given it.

In the UK and EEA, only with your consent. Usage analytics runs only after you agree in the Google privacy message shown in the app. Our legal basis is your consent (UK GDPR / EU GDPR Article 6(1)(a)).

Elsewhere, on by default. Outside the UK and EEA, where consent isn’t required, the Send usage analytics switch is on by default and usage analytics runs on the basis of our legitimate interests in improving the app (UK GDPR / EU GDPR Article 6(1)(f)). You can turn it off at any time with the switch, wherever you live.

Google processes this data for us as our service provider (processor) and may process it outside the UK and EEA under appropriate safeguards (see section 14). We have not turned on Google signals or linked Google Ads.

Google Analytics keeps event-level data for 2 months and user-level data for 14 months. The 14-month period starts again each time you use the app.

You can turn usage analytics off at any time in Settings > App > Send usage analytics. Turning it off also clears the analytics data stored on your device. Crash reports have their own switch (see section 7).

9. Website analytics and cookies

This section is about this website, touchlineapp.co.uk. Analytics in the Touchline app is covered in section 8.

We use Google Analytics 4 on touchlineapp.co.uk to understand how many people visit, which pages they view and how they found the site, so we can improve it.

Only with your consent, wherever you are. Analytics cookies are set only if you click Accept on the cookie banner. If you reject or ignore it, no analytics cookies are set. Our legal basis is your consent (UK GDPR / EU GDPR Article 6(1)(a)), as required by the cookie rules in PECR and the ePrivacy Directive.

If you accept, Google Analytics collects:

  • the pages you view
  • your approximate location (country and city, worked out from your IP address; Google Analytics 4 does not log or store IP addresses)
  • your device type, browser and screen size
  • the site that referred you
  • a random cookie ID

It does not collect your name, email address or any data from the Touchline app, such as teams, players or matches.

The cookies are _ga, which distinguishes visitors and lasts up to 2 years, and _ga_<ID>, which keeps session state and lasts up to 2 years.

Google processes this data for us as our service provider (processor) and may process it outside the UK and EEA under appropriate safeguards (see section 14). We don’t use it for advertising, and we have not turned on Google signals or ad personalisation.

You can change your mind at any time with the Cookie settings link at the bottom of every page. You can also delete cookies in your browser settings.

10. Children and grassroots context

Touchline is intended for users aged 18 and over, such as coaches and team organisers. It is not directed at children, and we do not knowingly collect personal data from children (including, in the United States, from children under 13 under the Children’s Online Privacy Protection Act, COPPA). If you believe a child has sent us personal data, for example by email, contact contact@touchlineapp.co.uk and we will delete it.

Coaches often record information about young players. That information is stored on the coach’s device and, if the coach saves it to their account or a cloud backup, with that account in our Firebase project (section 4). We use it only to provide the app to that coach, and it is not shared with anyone else unless the coach chooses to share or export it (section 5). If you record information about young players, you are responsible for doing so lawfully and appropriately under the data protection laws that apply where you are, and your club, league or association guidance. Prefer initials or shirt numbers where full names are unnecessary.

11. Legal bases (UK and EU GDPR)

Where UK or EU data protection law applies to any personal data we process (for example your account and email correspondence), we typically rely on:

  • Legitimate interests — operating and securing the app and website, responding to support requests and app usage analytics outside the UK and EEA
  • Contract — providing your Touchline account and the data you save to it, and paid Touchline Plus features you purchase
  • Consent — where we ask for it for a specific optional purpose, such as app usage analytics and your ad choices in Google’s consent message in the UK and EEA, and website analytics cookies

Other countries’ laws use similar ideas. Wherever you are, we use personal data only for the purposes described in this policy.

12. Retention

Data stored only on your device remains until you delete it or uninstall the app (subject to how Android handles app storage). Your account and the data saved with it, including cloud backups, are kept until you delete them or ask us to delete your account; we then delete them within 30 days, as explained on our Delete your account page. Emails you send us are kept only as long as needed to handle your enquiry and maintain a basic support record. Crash reports and analytics data are kept for the periods set out in sections 7, 8 and 9. Play purchase records follow Google’s retention practices for billing.

13. Your rights wherever you live

Whatever country you live in, you can ask us to:

  • tell you what personal data we hold about you and give you a copy
  • correct anything that is wrong
  • delete it
  • stop or limit using it for a particular purpose, or withdraw consent you have given

To make a request, email contact@touchlineapp.co.uk. It is free. We may ask for information to confirm the request comes from you (for example, by replying from the email address you used to contact us), and we aim to reply within one month. You can ask someone else, such as an authorised agent, to make a request for you; we may ask them for proof that you have authorised them.

Under UK GDPR and EU GDPR, you also have the right to object to processing based on legitimate interests and, in some cases, to data portability.

To delete your Touchline account and the data stored with it, follow the steps on our Delete your account page. Uninstalling the app does not delete your account.

Data stored only on your phone is not visible to us, so we cannot copy or delete it for you: use the in-app controls or uninstall the app to remove it from the device. Crash reports and usage analytics use random IDs rather than your name, email address or account, so we may not be able to link them to you. You can stop them at any time with the switches in the app’s Settings, and you can delete website cookies in your browser.

We will not treat you differently, for example by charging you a different price or giving you a worse service, because you exercise your privacy rights.

Complaints. If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You can also complain to the data protection authority where you live, work or think the problem happened. For example: the Information Commissioner’s Office (ICO) in the UK; your national data protection authority in the EU or EEA; your state attorney general or, in California, the California Privacy Protection Agency in the US; the ANPD in Brazil; the Office of the Privacy Commissioner of Canada; or the Office of the Australian Information Commissioner (OAIC).

14. International transfers

We are based in the UK. The service providers we use, such as Google, may store and process data in other countries, including the United States, where data protection laws may differ from those where you live. When personal data is transferred outside the UK or EEA, we rely on the safeguards the law allows, such as adequacy decisions or the standard contractual clauses in our providers’ data processing terms. You can contact us for more information about these safeguards.

15. Additional information for specific regions

The rights in section 13 apply to everyone. Some laws give you extra rights or require us to tell you specific things. These apply only where the law in question applies to us and to you.

United States (California and other states)

Several US states, including California (under the CCPA, as amended by the CPRA), give residents rights to know what personal information is collected about them, to access, correct and delete it, to opt out of its “sale”, its “sharing” for cross-context behavioural advertising and targeted advertising, and not to be discriminated against for using these rights.

  • Account data: your email address and password credentials (held by Firebase Authentication), your profile and settings, and the team, player and match data you save to your account or a cloud backup, held by Google Firebase as our service provider (section 4).
  • What we collect: identifiers (random installation, app-instance and cookie IDs, your device’s advertising ID used by Google AdMob, and your email address if you contact us); internet or device activity (screens viewed, the app events and website pages listed in sections 8 and 9, crash details, and device information used for ads); approximate location worked out from your IP address (not precise location); and commercial information (Touchline Plus purchase events). We collect these from you and your device, for the purposes described in sections 4 to 9.
  • Who receives it: Google, as our service provider for crash reports and analytics, Google Play for purchases, and Google AdMob for ads on the free tier. We do not collect sensitive personal information.
  • Sale and sharing: We do not sell personal information for money. On the free tier, Google AdMob may use your device’s advertising ID and device information to show ads after a match, which may be personalised (section 6). Some US state laws may treat this as “sharing” personal information or as targeted advertising. To opt out, reset or delete your advertising ID or opt out of ads personalisation in your Android settings, or upgrade to Touchline Plus, which has no ads. You can also email us at contact@touchlineapp.co.uk.

To use any of these rights, email contact@touchlineapp.co.uk. If we refuse your request, you can appeal by replying to our decision, and you can contact your state attorney general if you are unhappy with the outcome.

Brazil

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you rights including confirmation that we process your data, access, correction, anonymisation or deletion of unnecessary data, portability, information about who we share data with, and withdrawal of consent. You can exercise these rights, and contact the person responsible for data protection at Touchline, at contact@touchlineapp.co.uk. You can also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Canada

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws give you the right to access and correct personal information we hold about you, and to withdraw consent, subject to legal limits. Questions or complaints can go to contact@touchlineapp.co.uk, and you can also contact the Office of the Privacy Commissioner of Canada.

Australia

If you are in Australia, we aim to handle your personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You can ask to access or correct your personal information at contact@touchlineapp.co.uk. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

Other countries

If you live somewhere else, you may have similar rights under your local law. Email us and we will help.

16. Security

We take reasonable technical and organisational steps appropriate to a small app and static website. Account sign-in is handled by Firebase Authentication, and account data is stored with Google Firebase and sent over encrypted connections. No method of electronic storage or transmission is perfectly secure; keep your device locked and use a strong, unique password for your Touchline account.

17. Changes

We may update this policy as Touchline evolves (for example when Touchline Plus features or Play Billing details change). The “Last updated” date above will change when we do. Continued use after an update means you should review the revised policy.

18. Contact

Questions about privacy, or requests to use your rights, wherever you live: contact@touchlineapp.co.uk.

Last reviewed: 1 November 2026.