The short version. Your match journals, your scores and your worst days on court are yours. They are never sold, never used for advertising, and never shown to other users. There is no tracking and there are no ads in this app. You can delete everything at any time.
Who is responsible for your data
Smashed Cat is operated by Armand Chollet, sole proprietor, based in France. Under the GDPR, this makes me the data controller for the information described below.
Contact for any privacy question or request: hello@smashedcat.com. I read every message myself.
What data is collected
Account information
- Your email address. If you use Sign in with Apple and choose to hide your email, I only ever receive an anonymous relay address (@privaterelay.appleid.com) and never your real one.
- A unique account identifier.
- Your language preference.
What you tell the app
- Your answers to the onboarding questions (how you feel before a match, when your head lets you down, what you'd like to change).
- Your match journals: what you write or say about a match, the score and the result.
- Your self-assessments and your anchor phrase.
- Your mental profile scores and their history, calculated from the above.
Usage within the app
- Completed warm-up sessions and changeover cards you open, used to award badges.
- Dates of your entries.
What is not collected
- No advertising identifiers, no tracking across other apps or websites.
- No location, no contacts, no photo library.
- No behavioural profiling for marketing purposes.
Voice recordings
When you record a match debrief by voice, the audio is sent for transcription and the recording is not stored — only the resulting text is saved to your account, so you can read and correct it before submitting. Microphone access is only ever used when you tap record.
Why your data is processed, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and securing your account | Performance of the contract (Art. 6(1)(b)) |
| Analysing your matches and building your mental profile — the core function of the app | Performance of the contract (Art. 6(1)(b)) |
| Transcribing your voice notes | Performance of the contract (Art. 6(1)(b)) |
| Managing your subscription | Performance of the contract and legal obligation (Art. 6(1)(b) and (c)) |
| Replying to you when you write to me | Legitimate interest (Art. 6(1)(f)) |
Who else touches your data
I run this alone, so the app relies on a small number of specialist providers. They only ever act on my instructions, for the purposes listed here.
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Account authentication and database | Your account information and everything you save in the app. Stored in the European Union. |
| OVH | Application server | Data in transit. Servers located in France. |
| Anthropic | Analysing your match journals | The text of your journal and your mental profile scores. Not used to train their models. |
| OpenAI | Transcribing voice recordings | The audio of your recording, for transcription only. Not used to train their models. |
| Apple | Sign in with Apple, subscription payments | Handled by Apple under their own privacy policy. I never see your payment details. |
| RevenueCat | Subscription management | An anonymous identifier and your subscription status. No journal content. |
Anthropic, OpenAI and RevenueCat are based in the United States. Transfers to them are covered by the European Commission's Standard Contractual Clauses.
How long it is kept
- Your account and its contents are kept for as long as your account exists.
- If you delete your account, everything is deleted from the database. Backups are overwritten within 30 days.
- Payment records are kept for the period required by tax law, and are held by Apple, not by me.
Your rights
Under the GDPR you can, at any time:
- Ask for a copy of everything held about you.
- Correct anything inaccurate.
- Delete your account and all its data.
- Object to a particular use, or ask that it be restricted.
- Ask for your data in a portable format.
Write to hello@smashedcat.com and I will act within one month. If you're not satisfied with how I handle it, you can complain to the CNIL (cnil.fr), the French data protection authority.
Security
All traffic is encrypted in transit. Access to your data is restricted at database level so that one account cannot read another's. That said, no system is perfectly secure, and I won't pretend otherwise.
Children
Smashed Cat is not intended for children under 16. I don't knowingly collect data from them. If you believe a child has created an account, write to me and I'll remove it.
Changes to this policy
If this policy changes in a way that materially affects you, you'll be told in the app before the change takes effect. The date at the top always reflects the current version.