top of page

Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how we collect, use and protect your personal data when you use DrillUp, including the DrillUp mobile application and the DrillUp web application (together, the “App”), and your rights in relation to that data. It applies however you access DrillUp.

1. Who we are

DrillUp is operated by Theo Imperiale, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA  (“we”, “us”, “our”). You can contact us at info@drillup.co.uk. We are the “controller” of your personal data, which means we are responsible for deciding how it is held and used.

If you have any questions about this Policy or your personal data, contact us at info@drillup.co.uk.

2. Whose data this Policy covers

This Policy is written for the coaches who subscribe to and use DrillUp. It explains how we handle your personal data as a subscriber.

DrillUp also lets you enter information connected with your own coaching – for example your club name, the age group you coach, training and match days and times, scheduled sessions, and your training and match reviews. Where any of that information relates to other people (including children you coach), you are responsible for that information as the relevant controller, and for making sure you are allowed to provide it to us. We process it on your behalf in order to provide the App’s features to you. See section 8 (Your responsibilities).

3. The personal data we collect

We collect and use the following categories of personal data. If you choose to register or sign in using “Sign in with Apple” or “Sign in with Google”, we receive your name, email address and a user identifier from Apple or Google, which we store in order to create and manage your account. If you use Apple’s “Hide My Email” option, Apple provides us with an anonymised forwarding email address rather than your real one, and that is what we store. Your use of Apple or Google sign-in is also subject to Apple’s or Google’s own privacy policy.

Table of the personal data we collect

4. How and why we use your data (lawful bases)

Under UK data protection law we must have a “lawful basis” for using your personal data. We rely on the following:

Table of how and why we use data

We do not use your data for advertising, and there is no advertising in the App.

5. Analytics, cookies and similar technologies

We use PostHog to understand how DrillUp is used so we can improve it. Analytics only start after you give your consent.

On the web app

PostHog uses cookies on our website. When you first visit, you will see a cookie banner allowing you to accept or reject analytics cookies. Essential cookies needed to run the site work without consent; analytics cookies are only set if you accept them. You can change your choice at any time via [COOKIE SETTINGS LINK]. Full details of the cookies we use are in our Cookie Policy: [LINK].

​

On the mobile app

The mobile app does not use cookies in the same way a website does, but it uses similar technologies (such as device identifiers) for analytics. These are only used after you consent through an in-app prompt, and you can change your choice in the App’s settings.

PostHog analytics data is hosted on servers in the UK/EU.

6. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who help us run DrillUp, and who act on our instructions, and where the law requires. Our main providers are:

​

Mobile App:

Table of who we share data with (mobile app)

Web App:

Table of who we share data with (web app)

We may also disclose personal data if required by law, to enforce our terms, or to protect our rights, users or others.

7. Sending data outside the UK

7. Sending data outside the UK

Your core account and content data (held in Supabase) is processed in the United Kingdom, your analytics data (PostHog) is processed in the UK/EU, and our crash reporting (Sentry) is processed in the European Union. These benefit from UK “adequacy” status and do not require additional transfer safeguards.

Some of our providers process data in the United States, namely Mailgun (service emails), Stripe (payments), Cloudflare (hosting and content delivery) and Firebase (push notifications). Where data is transferred to the United States, appropriate safeguards are in place as required by UK data protection law. In particular:

  • Mailgun transfers are protected under the UK Extension to the EU-US Data Privacy Framework, to which Mailgun Technologies, Inc. is certified, and additionally under Standard Contractual Clauses with the UK Addendum.

  • Stripe and Revenue Cat transfers are protected under recognised safeguards including the UK Extension to the EU-US Data Privacy Framework and/or Standard Contractual Clauses with the UK Addendum.

  • Cloudflare transfers are protected under recognised safeguards including the UK Extension to the EU-US Data Privacy Framework and/or Standard Contractual Clauses with the UK Addendum.

You can ask us for more information about these safeguards using the contact details in section 14.

8. Your responsibilities for information about others

DrillUp lets you record information connected with your coaching, which may include information about the people you coach (including children) – for example age groups, session times and locations, and your reviews of sessions.

You are responsible for that information. In particular, you must:

  • only enter information about others where you are lawfully allowed to;

  • comply with your own data protection obligations as a controller of that information, including where it concerns children;

  • obtain any consents required (for example from parents or guardians) before recording information about a child; and

  • keep that information accurate and no more extensive than you need.

We provide the App as a tool; we are not responsible for your compliance with your own data protection obligations in respect of the people you coach.

9. How we keep your data secure

We take appropriate technical and organisational measures to protect your personal data, including hosting core data with Supabase in the UK, restricting access, and using reputable providers. No system can be completely secure, but we work to protect your data and will notify you and the Information Commissioner’s Office (ICO) of any serious breach where the law requires.

10. How long we keep your data

We keep your personal data for as long as you have an account with us and for as long as needed for the purposes set out in this Policy. After your account closes, we keep certain data only as long as necessary – for example to meet legal, tax or accounting requirements, or to resolve disputes – and then delete or anonymise it. For the avoidance of doubt, we will delete your data once you decide to permanently delete your account.

11. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;

  • ask us to correct inaccurate data;

  • ask us to delete your data in certain circumstances;

  • object to, or ask us to restrict, certain processing;

  • ask us to transfer your data to another provider (data portability); and

  • withdraw your consent at any time where we rely on consent (for example, analytics).

To exercise any of these rights, contact us at info@drillup.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk, though we’d ask you to contact us first so we can try to help.

12. Children

DrillUp is intended for use by coaches aged 16 or over. It is not intended for or directed at children under 16, and they should not create accounts or subscribe. If you are 16 or 17, you may use DrillUp, but you should do so with the awareness of your parent or guardian, and we handle your personal data in the same way as described in this Policy. Where you, as a coach, record information relating to children you coach, section 8 applies and you are responsible for that information.

13. Changes to this Policy

We may update this Policy from time to time. If we make significant changes, we will let you know by email or through the App. The “Last updated” date at the top shows when it was last revised.

14. How to contact us

If you have any questions about this Policy or how we use your personal data, please contact us at info@drillup.co.uk

bottom of page