PRIVACY
POLICY

PuckMetrix

Last Updated: September 7th, 2026 • Version 4.0

Privacy Policy for PuckMetrix

Last Updated: September 7th, 2026 Version: 4.0

What changed in 4.0

Team, season, league and tournament names now travel readable, the same as venue names already did. They used to be encrypted before upload; they no longer are. A player’s name is different: it is still encrypted on your device, and still unreadable to us or to Cloudflare.

This does not let anyone else see your data. Sharing games or rosters with another person is not a feature the app has — nothing here changes who can see your data, only what our own server can read.

We also corrected what we say about padding. Version 3.2, below, says encryption hides what a name says but not how long it is. That described what we believed at the time; the app does pad encrypted values into fixed sizes, and the readable list now says so. We have left the 3.2 entry where it is rather than quietly rewriting it.

What changed in 3.4

We added one more readable field to the venue list: which way round the rink runs. Some rinks have the home team defending the opposite end, and the app now lets you record that against the venue so its stats come out right.

It is a fact about a building, like the address already in that list, and it identifies nobody. We are listing it because the section it belongs to reads as a complete list, and leaving it out would quietly make that untrue.

Nothing else about the app or what we hold has changed.

What changed in 3.3

We fixed a line that contradicted the rest of this policy. Version 3.2 said flatly that we do not collect GPS coordinates, while the sync section said venue coordinates travel in the clear. Both were describing the same thing badly. The app has never asked for your location and still does not; what it stores is the published position of a rink you searched for. The two sections now say that in the same words.

Nothing about the app changed.

What changed in 3.2

We now say that encryption hides what a name says, not how long it is. Nothing about the app changed; this is a detail we had not spelled out, and the policy promises to show you where the line is rather than imply there isn’t one.

What changed in 3.1

We now say how long a deletion record is kept: 90 days. Version 3.0 said “for a period”, which was vague — and, until this release, not true of the code, which kept those records indefinitely. They are now purged after 90 days, which is far longer than a phone is plausibly away from the network and still long enough for a device that was offline to learn the deletion happened.

Nothing else about what we hold, or who can read it, has changed.

What changed in 3.0

Sync exists now, and it is off until you turn it on. Previous versions of this policy said your data never leaves your device. That remains true for anyone who does not sign in — which is how the app ships and what it does until you choose otherwise.

If you do turn sync on, some of your data is uploaded so your devices can share it. This version explains exactly what, in what form, and who can read it.

Summary (TL;DR)

✅ What we do:

❌ What we DON’T do:

Introduction

PuckMetrix (“we,” “our,” or “the app”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application for tracking hockey and box lacrosse game statistics.

PuckMetrix is free, and every feature is unlimited. There are no tiers, no in-app purchases and no payment processing of any kind.

Data Collection and Usage

Information We Collect

1. Game and Team Data

Purpose: To provide core game tracking functionality and generate statistics Storage: Stored on your device, using Apple’s SwiftData framework Transmitted only if you turn on sync: With sync off — the default — this data is never uploaded to us or anyone else, and we have no copy of it. With sync on, it is uploaded so your other devices can have it, in the form described under “Sync” below.

1a. Sync (off by default)

Sync is opt-in. Until you sign in and turn it on, nothing in this section happens and the app behaves exactly as it always has.

Signing in. Sync uses Sign in with Apple. We receive the anonymous identifier Apple gives us for you, and nothing else — we do not request your email address or your name. There is no password, no profile, and no other way to sign in.

What is encrypted before it leaves your device. A player’s name is the sensitive part of a youth-sports roster, so it is encrypted on your device with a key we never receive. One other value is encrypted, for a different reason:

What travels readable. The app cannot work without these, and none of them identify a child:

What this means in practice. If our server were fully compromised, an attacker would get game events, jersey numbers, rink locations, and team, season, league and tournament names — plus which size bucket a player’s name padded to — and no child’s name. We think that is the right place to draw the line, and we would rather tell you where it is than imply there is no line.

What never syncs, at all:

Where it goes: Cloudflare Workers and D1 — see “Third-Party Services” below.

Your recovery phrase. When you turn sync on we show you a recovery phrase once. If you lose every device and do not use iCloud Keychain, that phrase is the only way to read your own encrypted data again. We cannot recover it for you, because we never had it.

Two devices, two sets of games. If you already tracked games on another device before turning sync on there, you may end up with duplicates. Nothing merges them automatically, and the app warns you about this before you sign in.

2. Voice Input

Voice input is push-to-talk: audio is recorded only while you hold the microphone button.

3. Voice Recognition Quality Data

When you use voice input, the app records how well recognition performed so the feature can be improved:

Basic data — the “Voice analytics” setting, on by default, can be turned off:

Full transcripts — the “Keep full transcripts” setting, off by default, opt-in only:

Purpose: To let us diagnose recognition failures and improve accuracy Storage: Stored only on your device, alongside your game data Not transmitted: These records are never uploaded — not to us, not to anyone. Nothing is shared. They stay on your device until you delete your data or delete the app Control: Settings → Account Preferences → Voice analytics. Turn it off at any time; turning it off also turns off “Keep full transcripts”

4. Crash and Diagnostic Data

PuckMetrix has no crash-reporting SDK of its own. Nothing in the app uploads crash data anywhere. Two separate things happen instead, both run by Apple:

Purpose: To find and fix crashes and performance problems What crash reports contain: Device model, OS version, app version and stack traces What they do not contain: Your game data (player names, scores, event locations) or your voice transcripts Control: Apple’s analytics can be disabled via iOS Settings → Privacy & Security → Analytics & Improvements

Information We Do NOT Collect

Third-Party Services

Cloudflare (only if you turn on sync)

Sync runs on Cloudflare Workers, with data stored in Cloudflare D1. If you never turn sync on, nothing of yours ever reaches them.

Apple (Sign in with Apple)

Used only to sign you in for sync.

ElevenLabs

We use ElevenLabs to transcribe voice input, but only for people who turn on enhanced transcription. It is off until you turn it on, and while it is off no audio reaches ElevenLabs at all.

iOS Speech Recognition

The default transcription engine — what you get unless you turn on enhanced transcription:

Data Storage and Security

With sync off — how the app ships

With sync on

The Trade-Off You Should Know About

With sync off, your data is only as safe as your device. If you lose your phone, reset it, or delete the app, your games are gone. Use iCloud or iTunes device backups to protect them, and export PDF reports for anything you want to keep permanently.

With sync on, you gain a second copy and take on a second exposure. Your games survive a lost phone, and some of your data now sits on a server. We have tried to make that exposure as small as the feature allows — see what is encrypted, above — but it is not zero, and you should choose with that in mind.

One thing sync is not: a backup you can restore from selectively. Deleting a game on one device deletes it everywhere. If that matters to you, export PDF reports.

Data Security

Data Isolation

Your Rights and Controls

Access and Control

You have complete control over your data:

Erasing Your Data

To erase your data:

  1. Open the app and go to Settings
  2. Tap “Erase All Data”
  3. Confirm

This removes all app data on your device — teams, players, games, events, statistics, venues, tournaments and voice recognition records — and returns the app to its first-run state.

If sync is on, it erases the server copy too, and tells you about both halves — for example, “Deleted 4 teams, 38 games and 1,204 events from this device and from sync.” If either half fails, the app says which one, rather than reporting success, and you can tap “Erase All Data” again to retry.

Deletion cannot be undone — export anything you want to keep first.

Deleting Your Account

If you have signed in, Settings → Sync → Delete Account removes your account entirely: the server copy of your data, the record linking you to Apple, and your sessions. Your games stay on the device you are holding unless you also erase them.

There is no waiting period and nothing to email us about.

Revoking Permissions

You can revoke permissions at any time:

Children’s Privacy

PuckMetrix is designed for hockey and box lacrosse coaches, parents, and enthusiasts of all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information without parental consent, please contact us so we can delete it.

Note: Player names and jersey numbers entered in the app are provided by the user (typically a coach or parent) and are not collected directly from children.

With sync on, a child’s name does leave the device — encrypted. It is uploaded so your other devices can show it, and it is encrypted on your device first, with a key we never receive. We cannot read it, and neither can Cloudflare. The jersey number, the team they play for, and the events attached to it travel readable. If you would rather nothing about a roster left the device at all, leave sync off, which is how the app ships.

One thing to be aware of: if you turn on enhanced transcription and then speak a child’s name aloud while using voice input, that audio is sent to ElevenLabs. Leave enhanced transcription off — the setting the app ships with — and the audio never leaves the device. If you would rather nothing were recorded at all, don’t use the microphone button.

Data Retention

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Your continued use of the app after changes indicates your acceptance of the updated policy.

International Users

PuckMetrix is available worldwide. With sync off, your game data stays in one place: your device.

With sync on, your data is stored by Cloudflare, which operates a global network and may store and process it in regions outside your own. Crash diagnostics are handled entirely within Apple’s own systems, and if you turn on enhanced transcription your voice audio is transcribed by ElevenLabs; either may also process data outside your region.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Legal Basis for Processing:

Contact Information

If you have questions about this Privacy Policy or your data:

Developer: Steve Tannock Email: [email protected] Bluesky: @tannock.net Response Time: We aim to respond within 7 business days

Transparency Commitment

We believe in radical transparency:

Your privacy is not negotiable. If you have concerns, please contact us.