Privacy Policy

1. Who We Are

Train My Game Pty Ltd ("TMG", "we", "us", "our") is an Australian company based in Adelaide, South Australia. We operate the Train My Game platform — a sports coaching and player development tool for coaches and athletes.

Contact: admin@trainmygame.com.au

2. What Data We Collect

We collect the following categories of personal information:

• Identity & Contact: full name, email address
• Profile Data: age, date of birth, sport position, team details
• Performance Data: training session logs, drill completions, scores, statistics, progress metrics
• Media: session videos uploaded by coaches or players
• Payment Information: billing details processed via Stripe (we do not store card numbers directly)
• Device & Technical Data: device type, browser, IP address, operating system
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used to send in-app and push notifications
• Usage Data: how you interact with the platform, session timestamps, feature usage
• Challenge Logs: daily challenge completion records, scores, times, streaks, and tier rankings (Beginner, Solid, Elite) generated through the daily challenges feature
• Leaderboard Data: where a coach has enabled leaderboards for their player group, your daily challenge score may be visible to other players in that coach's roster. You will be notified within the app when leaderboard visibility is active.

3. Why We Collect It

We collect and use personal information to:

• Provide and operate the coaching platform (creating programs, tracking progress)
• Process payments between coaches and players via Stripe
• Send notifications about sessions, program updates, and platform news
• Improve the platform through usage analytics
• Respond to support requests
• Comply with legal obligations

4. Children's Data & Parental Consent

Our parental consent system works as follows:

• When a player under 18 accepts an invitation, they provide their date of birth and their parent/guardian's name and email
• The player's account is created and marked pending parental consent
• An email is sent to the parent explaining what data is collected, who the coach is, and providing a consent confirmation link
• The player may use the app immediately while consent is pending
• If consent is not confirmed within 48 hours, the coach is notified to follow up
• Once consent is confirmed, the parent receives weekly email summaries of their child's training activity
• Parents can view their child's training history, stats, and session logs at any time via a secure Parent Portal at app.trainmygame.com.au/parent
• Parents can withdraw consent at any time via the Parent Portal, which immediately locks the player's account and notifies the coach

We comply with the Privacy Act 1988 (Cth) and its Australian Privacy Principles in relation to all personal information, including that of minors. We do not knowingly collect personal information directly from children under 13 without verified parental consent.

If you believe we have collected data from a minor without appropriate consent, please contact us at admin@trainmygame.com.au and we will promptly investigate and take appropriate action.

5. How We Store Your Data

Your data is stored using the following third-party services:

• Firebase (Google Cloud): Our primary database, authentication, file storage, and cloud functions infrastructure. Data is stored on Google Cloud servers, which may be located in the United States or other regions. Google maintains appropriate security certifications and data processing agreements. By using the Platform, you consent to your personal information being stored and processed in the United States in accordance with Google's data processing agreements, which comply with internationally recognised privacy standards including ISO 27001 and SOC 2.
• Stripe: Payment processing. Card and banking details are handled directly by Stripe and subject to Stripe's own privacy policy and PCI DSS compliance. We store only transaction records and Stripe account identifiers.

We implement appropriate technical and organisational security measures to protect your data against unauthorised access, loss, or misuse.

6. Who We Share Data With

We do not sell your personal data to any third party. Data is shared only as follows:

• Within the platform: Coaches can see the performance data, session logs, and profile information of their own registered players only. Coaches cannot access data belonging to players registered with other coaches.
• Stripe: Payment processing data is shared with Stripe to facilitate transactions between coaches and players.
• Google / Firebase: As our infrastructure provider, Google processes data on our behalf under a data processing agreement.
• Legal requirements: We may disclose information if required by law, regulation, or court order.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide services.

• If you close your account and request deletion, we will delete your personal data within 30 days of that request.
• Certain data may be retained for longer periods where required by law (e.g. financial records).
• Backups may persist for up to 90 days before complete removal from all systems.

8. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to any user, Train My Game Pty Ltd will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988 (Cth)). Notification will be made as soon as practicable after we become aware of an eligible data breach. If you believe your data may have been compromised, contact us immediately at admin@trainmygame.com.au.

9. Your Rights

Under the Australian Privacy Act 1988 and Australian Privacy Principles, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal obligations)
• Opt-out: unsubscribe from marketing communications at any time
• Complaint: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us at admin@trainmygame.com.au. We will respond within 30 days.

10. Cookies

We use essential cookies only — those necessary for the platform to function (e.g. authentication session tokens). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email to the address associated with their account at least 14 days before the changes take effect. Continued use of the platform after notification constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related queries, requests, or complaints:

Train My Game Pty Ltd
Adelaide, South Australia, Australia
Email: admin@trainmygame.com.au

13. Governing Law

This Privacy Policy is governed by the laws of South Australia, Australia. Any disputes will be subject to the exclusive jurisdiction of the courts of South Australia.