Privacy Policy
This Privacy Policy explains how NIL Plus d.o.o. (“we”, “us”, “our”, the “Service Provider”, or the “Operator”), the company behind the Perfect Training mobile and web application (the “App”), collects, uses, stores, and shares information when you use the App. By creating an account or using the App, you agree to the practices described below.
If you do not agree with this Policy, please do not use the App.
1. Who we are
The Perfect Training App is a personalised sports training application designed primarily for youth and amateur football/soccer players. It delivers structured weekly training plans, exercise videos, progress tracking, and tools to help users measure their resting heart rate and calculate personalised heart-rate training zones.
The App is operated by:
NIL Plus d.o.o.
Cesta talcev 67
4000 Kranj
Slovenia
If you have any questions about this Policy or about your personal data, you can reach us at:
- General support: support@perfecttrainingapp.com
- Parental consent: parents@perfecttrainingapp.com
2. Information we collect
We only collect information that we need to operate the App and provide its features.
2.1 Account information (via Sign in with Google or Sign in with Apple)
When you create an account, we receive from your identity provider:
- A unique user ID
- Your email address
- Your display name (if available)
- Your profile picture (if available)
- Whether your email is verified
- The sign-in method you used (Google or Apple)
2.2 Profile information you provide during onboarding
- First name and last name
- Nickname
- Gender
- Date of birth
- Height and weight
- Preferred unit system (metric or imperial)
- Years of experience in the Perfect Training program
- Playing position and skill level (where applicable)
2.3 Training and performance data
- Current season and current training week
- Daily club obligations (Training / Match / Free)
- Completion status for daily activities and individual exercises
- Weekly streaks and progress scores
- Weekly “feeling” check-ins (great / okay / tired)
- Off-season program selections
2.4 Heart-rate measurement data (Target Heart Rate / THR feature)
The App includes a feature that allows you to measure your resting heart rate (RHR) using your phone’s rear camera. We store the resulting numeric measurements:
- Up to three resting heart-rate (BPM) measurements
- The timestamp of each measurement
- The calculated average resting heart rate
- The calculated maximum heart rate (estimated as 220 minus age)
- The six personalised training zones derived from your RHR using the Karvonen formula
See Section 4 below for details on how the camera is used and what is — and is not — collected.
2.5 Parental consent information (users aged 16 or under)
If you indicate that you are 16 years old or younger, the App collects:
- Your parent’s or legal guardian’s email address
- The status and timestamps of the parental approval workflow
2.6 Notification preferences
- Whether daily/weekly reminders are enabled
- The time of day you have selected for reminders
- Your device time zone (used to schedule reminders correctly)
2.7 In-app feedback
If you submit feedback through the App, we store the contents of your message together with your user ID so we can improve the App and respond if needed.
2.8 Technical and diagnostic data
The App uses Firebase services that may collect standard technical data such as:
- Your device’s IP address
- Device type and manufacturer
- Operating system and version
- App version and language
- An internal Firebase installation identifier
- Basic crash diagnostics and performance metrics
- Approximate time zone derived from your device
This information is processed by Google as our infrastructure provider (see Section 7).
3. Information we do not collect
To be clear, the App does not collect any of the following:
- Your precise or coarse location (no GPS, Wi-Fi, or cell-tower location)
- Your contacts, calendar, SMS, or call logs
- Your microphone or audio recordings
- Your photos or media library
- Your browsing history outside the App
- Advertising identifiers for ad targeting
- Health data from Apple Health, Google Fit, or any other health platform
4. Camera and flashlight — how the THR feature works
The App requests access to your rear camera and flashlight for one purpose only: to let you measure your resting heart rate using a technique called photoplethysmography (PPG).
When you start a heart-rate measurement:
- You place your fingertip over the rear camera lens.
- The App turns on the flashlight to illuminate your fingertip.
- The camera streams low-resolution video frames only inside your device.
- The App analyses brightness changes in the red channel of those frames in real time to detect the rhythm of your pulse.
- After roughly 60 seconds, the App calculates a single beats-per-minute (BPM) value.
Important:
- No photos, videos, or raw camera frames are ever saved to your device’s storage.
- No photos, videos, or raw camera frames are ever uploaded, transmitted, or shared with our servers, with Google, with Apple, or with any third party.
- The only thing that leaves the camera pipeline is the final BPM number, which is stored against your account so you can see your training zones.
- The flashlight is used solely to improve the accuracy of the pulse signal.
- You can deny or revoke camera permission at any time in your device settings. If camera permission is denied, you will not be able to use the THR feature, but the rest of the App will continue to work.
5. How we use your information
We use the information described above to:
- Create and maintain your account and authenticate you on each launch
- Generate and personalise your weekly training plan
- Track your training progress, streaks, and completion history
- Calculate and display your personalised heart-rate training zones
- Send you the local notifications you have enabled (e.g. weekly plan reminder, RHR measurement reminders)
- Contact your parent or legal guardian, where applicable, to obtain parental consent if you are 16 or younger
- Respond to support requests and feedback you send us
- Detect, investigate, and prevent abuse, fraud, security incidents, and Terms-of-Use violations
- Comply with applicable laws and lawful requests from public authorities
We do not sell your personal information, and we do not use it for behavioural advertising.
6. Legal bases for processing (EEA / UK users)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:
- Performance of a contract — to provide the App’s core features after you create an account.
- Consent — for camera access (THR feature), local notifications, and, where applicable, parental consent for minors. You can withdraw your consent at any time.
- Legitimate interests — to keep the App secure, prevent abuse, and improve functionality, in a manner that is balanced against your rights.
- Legal obligation — to comply with applicable laws and legitimate requests from authorities.
7. Service providers and where your data is stored
We use Google Firebase (provided by Google LLC / Google Ireland Limited) as our backend infrastructure, including:
- Firebase Authentication — to manage sign-in with Google and Apple
- Cloud Firestore — to store your profile, training, and heart-rate data
- Firebase Hosting — to host this Privacy Policy and the App’s web build
- Firebase Storage — for limited media storage where applicable
- Firebase Analytics — basic usage and diagnostic information
Your data is stored on Google’s infrastructure and may be processed in countries outside your country of residence, including the United States. Where required, transfers of personal data outside the EEA / UK are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We may also receive limited information from:
- Google Sign-In (Google LLC) — for authentication
- Apple Sign in with Apple (Apple Inc.) — for authentication
- Google Fonts (Google LLC) — for typography
- YouTube (Google LLC) — for embedded training videos
These providers process the technical data needed to deliver their services in line with their own privacy policies.
We do not share your personal data with advertisers, data brokers, or any other third party for marketing purposes.
8. How long we keep your data
We keep your personal data for as long as your account is active. If you ask us to delete your account, we will delete your personal profile, training history, and heart-rate measurements within a reasonable period, except where we are required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.
To request deletion, contact us at support@perfecttrainingapp.com from the email address associated with your account.
9. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal data:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete information.
- Erasure (“right to be forgotten”) — ask us to delete your personal data.
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, commonly used format.
- Objection — object to processing based on legitimate interests.
- Withdrawal of consent — where processing is based on consent.
- Complaint — lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at support@perfecttrainingapp.com. We will respond within the time limits required by applicable law.
10. Children and parental consent
The App is intended primarily for youth athletes. We treat users aged 16 or younger as minors who require parental or guardian consent before they can fully use the App.
When a user indicates an age of 16 or younger during onboarding:
- The App asks the user to provide a parent or guardian’s email address.
- We use that email address solely to communicate with the parent or guardian and obtain their approval.
- Until parental consent is recorded, access to the App’s features may be limited.
If you are a parent or legal guardian and you believe that your child has provided personal information to us without your consent, please contact parents@perfecttrainingapp.com and we will promptly delete the relevant information.
11. Security
We use industry-standard measures to protect your personal information, including TLS encryption in transit, encryption at rest on Google’s infrastructure, and Firebase Security Rules that restrict who can read or write specific records. Despite these measures, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, where the changes are material, notify you in the App or by email. Your continued use of the App after a change becomes effective constitutes acceptance of the updated Policy.
13. Contact us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
- Support: support@perfecttrainingapp.com
- Parental consent: parents@perfecttrainingapp.com