Pull It Together
This policy explains what personal information Pull It Together ("PIT", "we", "us") collects, why we collect it, who can see it, and the rights you have over it. It applies to our mobile apps and to pullittogether.app.
Pull It Together is operated by Toki Productions Limited, a company registered in England and Wales (company number 17419154), registered office 2 Endeavour Avenue, Exeter, England, EX2 7GR. For any privacy question, or to exercise your rights, contact us at dev@tokiproductions.com.
Your monitoring is private by design. Your check-ins, reflections, wellbeing scores and cycle tracking are visible only to you. Your coach and your club cannot see them — not the numbers, not what you write, not whether you logged at all. You choose what, if anything, to share.
PIT is used by athletes ("players"), coaches, and club administrators. What we collect and who can see it depends on your role, described throughout this policy. If you are under 18, please also read Young athletes below.
Subscriptions are processed by Stripe. We do not see or store your full card details — Stripe handles them directly. We keep only identifiers needed to manage your subscription (such as a customer and subscription reference and its status).
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing your account and the app's core features | Performance of a contract |
| Storing and displaying your health & wellbeing and cycle data | Your explicit consent |
| Sending notifications and reminders you enable | Consent |
| Taking payment and managing subscriptions | Performance of a contract |
| Keeping the service secure and preventing abuse | Legitimate interests |
| Meeting legal and regulatory obligations | Legal obligation |
Your wellbeing check-ins and cycle information are health data, which UK GDPR gives extra protection. We process it only with your explicit consent, use it solely to power the features you engage with, and keep it private to you as described below. You can withdraw consent at any time by deleting the data or your account, or by contacting us.
Your check-ins, reflections, wellbeing/readiness scores and cycle tracking are visible only to you. Coaches and club admins cannot access them.
Only the information tied to team participation — such as your name, team membership, and items you explicitly share or that are part of coaching features (for example personal bests or goals you share, and programmes a coach assigns) — is visible to your coach and club. We make clear in the app which of these are shared.
We do not sell your personal information, and we do not use it for third-party advertising.
We use a small number of trusted processors who handle data on our behalf, under contract and only as needed to run PIT:
| Provider | Purpose |
|---|---|
| Supabase | Secure database, authentication and hosting of your account data (hosted in the EU/UK region) |
| Stripe | Payment processing and subscription management |
| Apple Push Notification service & Google Firebase Cloud Messaging | Delivering the notifications you enable |
| Cloudflare | Hosting and delivery of our website |
We aim to keep your data hosted in the UK/EU. Where a provider processes data outside the UK, we rely on appropriate safeguards (such as UK/EU adequacy decisions or standard contractual clauses) to protect it.
We keep your information for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain limited records to meet legal obligations (for example, payment records).
Access is protected by authentication and database-level security rules so that each person can only reach the data they're entitled to. Data is encrypted in transit, and your monitoring data is kept private to your account as described above. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.
PIT sets no cookies, and we use no analytics, advertising or tracking services of any kind. There is no Google Analytics, no advertising pixel and no third-party script following you around.
The app does keep a small amount of information in your own browser, on your own device. None of it is sent anywhere or used to profile you:
Because none of this is used for tracking or advertising, we do not ask for cookie consent. Clearing your browser data removes all of it; you will simply be signed out and your preferences reset. If we ever add analytics, we will ask for your consent first and update this policy.
Under UK GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, contact dev@tokiproductions.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
PIT is intended for athletes aged 13 and over. Where an athlete is under the age of 16, we expect a parent, guardian or club to be involved in their use of the app and, where required, to provide or confirm consent for processing health data. If you believe a child has provided us with personal data without appropriate consent, contact us and we will remove it.
We may update this policy from time to time. If we make significant changes, we'll let you know in the app or by email. The "last updated" date above always reflects the current version.
Toki Productions Limited
2 Endeavour Avenue, Exeter, England, EX2 7GR
dev@tokiproductions.com