Privacy Policy

Effective date: 4 October 2026
Last updated: 4 October 2026
Policy version: 2026-07

StumpNote helps cricketers reflect on their game. This policy explains what we collect, why, who handles it, how long we keep it, and the choices you have. It covers the StumpNote player app (iPhone, Apple Watch, Android) and the StumpNote web app, and the StumpNote Coach and StumpNote Parent apps, which use the same accounts and backend.

We have tried to write this in plain language. If something is unclear, contact us at hello@sherlabs.com. This policy was prepared by the operator and has not been independently legally reviewed.

1. Who we are

StumpNote is operated by Nilesh Chanuka Jayanandana Hetti Hewage trading as Sher Labs, ABN 77 387 397 893, of 19 Clubrush Gr, Officer VIC 3809, Australia ("StumpNote", "we", "us"). We are the controller of the personal information described here.

Privacy contact: hello@sherlabs.com.

2. The short version

• You write or speak journal entries about your cricket. We store them and use AI to find patterns and help you plan training.
• AI is provided by Google (Gemini and Google Cloud Text-to-Speech) and runs through our servers. The app asks your permission before any AI feature sends your data, and you can withdraw it any time in Profile, AI data sharing. AI can be wrong. It is not medical advice.
• Health data from Apple Health or Health Connect is optional and only used if you allow it. The Apple Watch app saves your workouts and heart rate to Apple Health.
• Coaches, captains and parents only see what the sharing rules and your choices allow.
• We do not sell your personal information. We do not use it for advertising and we do not track you across other companies' apps or sites.
• Young players are protected by an age gate, guardian-managed profiles and extra safeguards (section 8).
• You can delete your account inside the app.

3. What we collect

3.1 Information you give us

• Account details: email address, name, sign-in method. If you use Sign in with Apple or Google we receive the identifier and the name and email that Apple or Google share with us. Apple may give us a private relay email address.
• Age: a date of birth (entered at sign-up, used to apply the age gate) and, in the profile, birth year or date of birth. A guardian creating a managed profile supplies the child's name and birth year.
• Profile and cricket information: playing role, batting and bowling style, age group, team and league details, goals and focus areas, drills, training and game plans, scorecards, opposition notes.
• Journal content: match and training entries, notes, reflections, mood and confidence check-ins, game-day notes, readiness answers, and injury or condition records you log.
• Voice recordings: audio you record in the app for journal entries, mood check-ins, game-day notes, coach-session notes, playbook dictation or profile setup. We store the audio where a feature needs it and a transcript derived from it.
• Photos and videos: video clips you record or upload, and images such as scorecard screenshots. The app can also save watermarked session videos to your photo library when you ask it to.
• Team and coaching information: teams you join or manage, roles (player, captain, vice-captain, coach, guardian), invites, squad and match plans, coach notes you write about players you coach, and private feedback.
• Questions you ask the AI coach and the answers returned.

3.2 Health and fitness information (optional)

If you grant permission, the app reads from Apple Health (iPhone) or Health Connect (Android): sleep, heart rate, resting heart rate, heart-rate variability, step count, active energy, walking/running distance, body weight, respiratory rate, blood oxygen, and workouts. On Android the app also declares permission for body temperature, VO2 max and exercise sessions. We use daily summaries to estimate readiness and recovery. These are stored in your account.

Apple Watch app. When you record a session on the watch, the watch starts a workout, reads live heart rate and active energy, and measures wrist motion to detect swings and bowling actions. A finished workout (with its duration, heart rate and active energy) is saved to Apple Health, so it shows in Fitness and Health. Very short or cancelled sessions are discarded. A summary of the session (discipline, wrist side, timing and motion-derived metrics, device model) is sent to your StumpNote account.

You can revoke Health permissions at any time in iOS Settings or Health Connect. Derived values already stored stay until you delete them or your account.

Using health data in AI context is controlled by a profile setting, off by default for minors. Device health data is never used as AI context for guardian-managed child accounts.

3.3 Purchases

If you subscribe, Apple (or Google) handles payment. We and RevenueCat receive your subscription status, product, entitlements and purchase history, linked to your StumpNote user ID. We never receive your card details.

3.4 Device and technical information

• Push notification tokens (iOS, Android or browser) stored with your user ID, platform and app variant, if you allow notifications.
• Analytics (adult accounts): screens viewed, feature usage events, app version, device and operating system type, and an identifier tied to your account, collected by Firebase Analytics (Google). It is off until you sign in, is on for signed-in adult accounts, and is not collected for managed, under-18 or junior accounts. There is currently no separate analytics switch in the app.
• Service logs and metering: per AI request, the feature name, model, token counts, a computed cost and your user ID; monthly counts of video uploads and voice transcriptions for plan limits; and request logs for debugging and abuse prevention. These record counts and sizes, not the content of your entries.
• Consent records: when a guardian consents or re-consents, we store the policy version, type of consent and time.

3.5 What we do not collect

We do not collect precise or coarse location, contacts, phone numbers, financial or card details, advertising identifiers, or browsing history from other apps or sites. We do not run advertising SDKs. We do not use crash-reporting SDKs.

4. How we use your information

Legal bases where GDPR or UK GDPR applies: contract (providing the app), consent (health data, AI processing of your content, notifications), legitimate interests (security, fair-use limits, product analytics for adult accounts, improving the product) and legal obligation.

5. Who processes your information (sub-processors)

We use these providers to run StumpNote. Each only receives what it needs.

Each provider handles information under its own terms and privacy policy, which you can read on its website. This list names the providers and what they do; it is not a description of their contracts. We do not sell your information to any of them.

We share information with a service provider only to operate the app, with a coach, captain or guardian only as described in section 7, with authorities when the law requires it, and in a sale or restructure of our business with notice to you. We do not sell your personal information and we do not share it for cross-context behavioural advertising.

6. AI processing

• What goes to AI. Nothing is sent to an AI provider until you allow it in the app's AI consent sheet (and you can withdraw in Profile, AI data sharing). When you use an AI feature, our servers send the relevant content (your text, audio, images or video) and a compact summary of your profile to Google's Gemini API, and for spoken sessions the script text to Google Cloud Text-to-Speech. Calls are made from our backend, not directly from your phone, and logged by us for cost and abuse control.
• Consent. Before clips or journal-based AI features are used, the app shows a consent sheet that says what is sent. You can decline and keep using the non-AI parts of the app.
• Player memory. To make AI personal, we maintain cached summaries of your cricket: form, patterns, mood and confidence trends, injuries or conditions, goals, and, only if you enable it, health-derived readiness. Teams have an equivalent summary. These are deleted with your account.
• AI can make mistakes. Insights, plans, drills and transcriptions may be wrong, incomplete or out of date. They are guidance for reflection and training. They are not medical, psychological or professional advice. If you are injured or unwell, see a qualified professional. If you feel unsafe, contact local emergency services or a helpline. Mood support shows support resources when it detects distress.
• Safeguards. Mindset and playbook scripts are checked by deterministic rules (for example, no breath-holding, no outcome promises, no diagnosis). Drills respect your logged injuries. Younger players get age-appropriate guidance and bowling-load limits, and AI never asks juniors about alcohol.
• No automated decisions with legal effect. AI output is advisory. You decide what to act on.
• Training and retention by AI providers. We do not sell your content. We use Google's Gemini API, which is provided under Google's Gemini API terms; those terms describe how Google handles prompts and responses, including that Google may keep logs for a limited period to detect and prevent abuse, and we send only what is needed to produce the result. We make no promise here about Google's own data practices beyond what Google publishes; please read Google's terms for the detail. We do not currently use your content to train our own models. If that changes we will tell you first and ask for any consent required.

7. Sharing with coaches, captains, teams and guardians

Nothing is shared by default beyond the rules below. Access is enforced in our database, not just in the app.

• Coaches. A coach you accept (or who accepts you) can view the player data relevant to coaching you, such as journal insights, plans and watch sessions. Coach-triggered AI features use the player's data. Links need acceptance and can be ended.
• Captains and team members. Team features show team-related information to members and the captain as needed (squad, match plans, team insights).
• Team pulse. Team readiness and watch "pulse" views are aggregates. Below three tracked players only banded ranges are shown, never exact per-player figures, and no individual's value leaves the pulse function.
• Guardians (parents). A guardian linked to a young player sees three groups of information, each with its own switch: cricket, wellbeing and growth. These default to on. Only the player can change them, and not while the account is guardian-managed. A guardian can end a link. Guardians receive alerts after an injury log or mood check-in, subject to those switches, opt-outs and quiet hours. A child's private wellbeing entries are not shown if wellbeing sharing is off.
• Everyone else. Other users cannot see your entries, clips, health data or AI summaries.

8. Children and young people

• Age gate. Before any account is created (email, Apple or Google), a neutral date-of-birth screen runs. People under 13 cannot create their own account, and we collect no identity or email from them at that point. The minimum age for a self-managed account is 13.
• Guardian-managed profiles (under 18). A parent or guardian can create a managed profile for a child (up to 10 children) in the StumpNote Parent app, attesting that they are the child's guardian. We record that consent with the policy version. The guardian governs the account: they can review, correct, export and delete the child's data and withdraw optional consents. The guardian signs in to the StumpNote Parent app, creates the child's managed profile and confirms in the app that they are the child's parent or guardian. We store a consent record (the guardian, the child, the policy version and the time). We do not check identity documents or take a payment to verify this: we rely on the guardian's confirmation. If you believe a profile was created without a real guardian's consent, contact us and we will review it and delete it if needed.
• Linking an existing player. A teen can invite a guardian to link. Players aged 13 and over who were guardian-managed take over their own account on claiming it; younger children stay under guardian governance.
• Re-consent. When this policy changes materially, guardians are asked to re-consent in the Parent app.
• Junior protections. For managed, under-18 and junior accounts: analytics is off; device health data is excluded from the profile and from AI context; heart-rate-derived AI lines require a setting that is off by default for minors; AI uses age-appropriate language, applies bowling-load limits and never asks about alcohol; Mindset personalisation stays off until the guardian turns it on; we do not use children's content for advertising, to sell, or to train our own models.
• Parent-operated devices. If a child's account is used on a parent's phone, the phone's Health data belongs to the parent and is never used for the child.
• Coaches and clubs. A coach or club that manages a junior player's information must hold appropriate parental authority. The guardian keeps the rights above.

9. Retention and deletion

• While your account exists we keep your data so the app works.
• Delete account. In the player app go to Profile, then Delete account. In StumpNote Coach use Home, Account, Delete account; in StumpNote Parent use Settings, Delete account. Deletion is immediate in our active systems. It removes your profile, journal entries, transcripts, coach notes, goals, plans, clips, thumbnails and reels, voice-note audio, Mindset audio, watch sessions, health summaries, AI chat history, player memory (summaries, weakness analyses, daily briefs, search embeddings), subscriptions records held by us, push tokens, consent-linked profile data, and your sign-in. Storage files are removed on a best-effort basis alongside the database rows. Health data the Apple Watch app already saved to Apple Health is yours and is not removed with your StumpNote account: delete it in the Health app. Deleting a guardian account also deletes the child profiles that guardian created and manages alone; a child with their own sign-in, or who is also linked to another guardian, keeps their data and only that guardian's link ends.
• Backups. Encrypted backups may hold copies for up to 7 days before they expire.
• Processors. We instruct our processors to delete data they hold for us. Apple and Google keep their own records under their own policies (for example, purchase records and data in Apple Health on your device, which our deletion does not touch).
• Anything kept longer. Limited records we are required to keep for tax, accounting, fraud prevention or legal claims, and de-identified usage and cost metering. AI usage and request logs are kept for up to while the account exists, then de-identified.
• Analytics. Firebase Analytics event data is kept for 2 months, the retention period set in our Firebase project.
• Health data. Disconnecting Health stops further collection. Values already synced remain until you delete them or your account.
• Cannot sign in? Email hello@sherlabs.com. A guardian can request deletion of a managed child's profile the same way.

10. Your rights

Depending on where you live (including under the Australian Privacy Act 1988 and its Australian Privacy Principles, the GDPR and UK GDPR, and the California Consumer Privacy Act), you may have the right to:

• access the personal information we hold about you;
• correct it (most of it you can edit in the app);
• export it in a usable form;
• delete it (in the app, or by email);
• object to or restrict some processing, including profiling by player memory (we will reset it on request);
• withdraw consent at any time (for health, AI processing or notifications; for analytics, email us) without affecting earlier processing;
• not be discriminated against for exercising your rights; and
• complain to your privacy regulator. In Australia that is the Office of the Australian Information Commissioner (oaic.gov.au); in the EU/UK, your local data protection authority.

To use a right, email hello@sherlabs.com. We will verify your identity (a guardian for a managed child) and reply within the time the law requires, normally within 30 days.

11. Security

• Traffic between the app, our servers and our providers uses TLS (HTTPS).
• Data and files stored in Supabase are encrypted at rest by the platform.
• Sign-in uses signed tokens. Database access is controlled by row-level security so each user reaches only their own records, plus data deliberately shared as described in section 7.
• Video clips and Mindset audio are stored in private buckets and served through time-limited signed links.
• No system is perfectly secure. If a breach affecting you occurs we will notify you and regulators as the law requires.

12. International transfers

Our primary database and files are in Mumbai, India. Our providers (Google, RevenueCat, Firebase, Vercel, Apple) operate globally, including in the United States, and you may use StumpNote from anywhere. Where the law requires safeguards for transfers, we will put them in place. For Australian users, we take reasonable steps under APP 8 to make sure overseas recipients handle information consistently with the APPs. Our primary database is hosted in Mumbai, India, and providers may process information in other countries.

13. Cookies and the web app

The StumpNote web app does not use advertising cookies. It uses browser storage (local storage and, if you enable browser notifications, a service worker and a push token) to keep you signed in, remember settings and deliver notifications you opt into. Hosting providers log standard request information (IP address, browser type) for security and reliability. Firebase Analytics runs in the web app, as in the mobile apps, for signed-in adult accounts only (section 3.4); it does not run before you sign in or for child accounts, and it may store its own identifiers in your browser. There is currently no cookie banner or separate analytics switch in the app. If you do not want analytics, email us and we will tell you what we can do. You can clear site data and block notifications in your browser at any time.

14. Changes to this policy

We may update this policy. We will post the new version here with a new "Last updated" date. For material changes we will tell you in the app, and ask guardians of managed children to re-consent.

15. Contact

Nilesh Chanuka Jayanandana Hetti Hewage trading as Sher Labs, ABN 77 387 397 893, 19 Clubrush Gr, Officer VIC 3809, Australia Email: hello@sherlabs.com Governing law: Australia

Appendix A: Data map