Pullr

Privacy Policy

Version v1.3 · Last updated: 9 October 2026

Who we are

Pullr is made by Lailapps, which is responsible for your personal data (the data controller). This policy explains what Pullr collects in its apps and on the web, why, and the choices you have. Questions and requests: support@lailapps.com.

What you give us

  • Account: your name, email address and how you sign in (email, Google or Apple). With Sign in with Apple you can hide your email; we then only receive Apple's relay address.
  • Profile: your picture, positions, jersey number and settings such as language, theme and units.
  • Team: your teams and role, staff title, attendance and RSVPs, and the fee and equipment records your coaches keep for you.
  • Content: plays, playbooks, formations and routes, wristbands, call sheets, training plans, film reels (links to YouTube videos), comments and notes.
  • Training: the workouts, sessions, lifts, personal records and test results (such as sprint times and jumps) you log, and the exercises you create, with an optional photo.
  • Messages to us: feedback and support requests, with your name, email, app version, platform and language.

What is collected automatically

  • A push token for your device, if you allow notifications.
  • Crash reports and performance measurements: device model, operating system, app version, and what went wrong and where.
  • Usage statistics such as app opens, sessions and screens viewed, with an app instance ID and an approximate location (country or city) derived from your IP address.
  • Which features you use (for example sign-up steps, workouts started, plays saved), linked to your internal user ID.
  • An app integrity check that confirms requests come from the genuine Pullr app.

We don't collect your precise location, your contacts or your advertising ID, and we don't track you across other companies' apps or websites.

Cookies

On the web, Pullr uses Google Analytics (Google LLC) and PostHog (PostHog, Inc.) only after you accept them in the cookie banner. If you accept, Google Analytics stores its _ga cookies and PostHog stores an identifier in your browser's local storage, and we see which screens and features are used. We don't send your name or email address to either service; PostHog receives your internal user ID, Google Analytics doesn't. Advertising features are turned off.

If you decline, no analytics cookies or identifiers are stored. Your choice is saved only in this browser.

You can change it at any time under Profile > Cookie preferences. If you withdraw your consent, the _ga cookies and PostHog's identifier are deleted.

Photos

You can add a profile picture and a photo to each exercise you create, and coaches can add a team logo. Pullr only opens the photo you pick; it doesn't browse your library. The image is shrunk on your device, hidden details such as where it was taken are removed, and it is stored in our cloud. Your profile picture and team logo are shown to your teams; an exercise photo is seen only by you, or by your team if the exercise is shared with it. You can remove your picture from your profile, or an exercise photo from its exercise, at any time; deleting an exercise deletes its photo. If you haven't uploaded one and you sign in with Google, your Google profile picture is shown straight from Google.

How we use your data

  • To run Pullr: your account, your teams, and keeping your content and training in sync across your devices.
  • To send the notifications you allow.
  • To handle subscriptions and unlock Pro features.
  • To keep Pullr secure and prevent abuse.
  • To fix crashes, measure performance and see, in aggregate, which features are used so we can improve them.
  • To answer your feedback and support requests.

We don't sell your personal data, we don't show ads and we don't use your data for advertising or profiling.

What your team sees

Members of your team see your name, picture, jersey number, positions and role, the content you share with the team and your comments. Coaches and staff also see your attendance, the fee and equipment records they keep for you, and the lifts you log for the team; other members see those lifts only if they are made visible to the team. Your own fee records are visible only to you and staff. Your personal plays, workouts and records stay private unless you share them. When a coach invites someone, the coach enters that person's email address; we use it only for the invitation, which expires after 7 days.

Payments

Pullr Pro is bought as an in-app purchase through Apple or Google, and RevenueCat manages the subscription for us. We receive your subscription status, the product, and the purchase and renewal dates, linked to your user ID. We never receive your card details; Apple and Google process the payment under their own privacy policies.

Payments on the web

The Team package is paid on the web through Lemon Squeezy. Lemon Squeezy tells us the status and end date of the subscription, and the email address used at checkout so we can match the payment to your account. For packages bought at the Turkey price we also keep the billing country, and for teams on that price we count the device language and time zone of members who join. We never receive your card details.

Notifications

If you allow notifications, we store a push token for your device and use Firebase Cloud Messaging to deliver team announcements, session changes, fee reminders and clip tags. You can turn notifications off at any time in your device settings. Announcements stay in the team feed as part of the team's history.

Calendar sync

Calendar sync is optional. If you turn it on, Pullr writes your scheduled training sessions (title, time, place, type, coach and exercises) to a calendar you choose: on Android through your phone's calendar; on iPhone and on the web through Google Calendar with your permission. While sync is on, new and changed sessions are updated in that calendar automatically. Pullr uses this access to add, update and remove the events it created. On iPhone and on the web it also reads the title, description and start time of the other events in that calendar within the synced dates, only to avoid creating duplicates. Your calendar data is never sent to our servers. On the web, access lasts about an hour and is not stored. On iPhone, Google Sign-In keeps the access on your phone until you turn sync off or remove it in your Google Account. You can turn sync off at any time.

Google user data (Google Calendar)

Pullr accesses Google user data strictly to provide calendar synchronization features for team practices and scheduled training sessions. With your explicit consent, Pullr requests access to the following scopes:

  • Google Calendar List (calendar.calendarlist.readonly): Used solely to allow you to select which calendar you want to sync your scheduled training events to.
  • Google Calendar Events (calendar.events.owned): Used strictly to create, update, or remove Pullr scheduled training sessions and events directly on your selected Google Calendar. To avoid creating duplicate events, Pullr also reads the title, description, and start time of events in the selected calendar within the dates being synced.

Data Handling & Storage: Pullr does not store, retain, or process your Google Calendar events or data on external servers. Calendar interactions, including the duplicate check, occur directly on your device: in your browser session on the web, in the Pullr app on iPhone; event details read for that check are held only in memory while syncing and are never saved. On the web, the access token is valid for about one hour and is kept only in the open page. On iPhone, Google Sign-In keeps the authorization in the phone's keychain so that sync can continue; turning sync off revokes it, and it is never sent to our servers. We do not sell, rent, or transfer your Google user data to third parties, nor do we use it for advertising, marketing, creditworthiness evaluation, or to develop, improve, or train AI or machine learning models.

Your Control: Calendar sync starts only after you turn it on and grant access; while it is on, new and changed sessions are updated in your calendar automatically. You can turn sync off at any time and revoke Pullr's access in your Google Account at myaccount.google.com/permissions.

Limited Use Disclosure

Pullr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We share data only with the providers that run Pullr for us, and only as far as they need it:

  • Google Firebase (Google LLC): sign-in, database, file storage, server functions, push notifications, Crashlytics, Performance Monitoring, Analytics, App Check and web hosting.
  • Google and Apple: sign-in with your Google or Apple account, and in-app purchases.
  • RevenueCat: subscription management.
  • YouTube: film reels play YouTube videos inside the app. Pullr uses YouTube API Services, so Google's Privacy Policy (https://policies.google.com/privacy) applies to them.
  • Google Maps Platform (Google LLC): place suggestions while you type a session location. What you type in that field is sent to Google, and Google's Privacy Policy (https://policies.google.com/privacy) applies.
  • PostHog (PostHog, Inc.): product analytics, which shows us where the app gets in people's way. PostHog receives your internal user and team IDs, your role in the team and which features you use, never your name, email address or what you type. It doesn't record your screen. On the web it runs only after you accept analytics cookies.

We don't sell or rent your data. We disclose it to others only if the law requires it or to protect the rights and safety of our users.

Where your data is stored

Your data is stored on Google Cloud servers in the United States, and our providers may process it in other countries. When data leaves the EU/EEA, the UK or Turkey, we rely on the safeguards the law requires, such as standard contractual clauses.

How long we keep it

We keep your data for as long as you have an account. When you delete your account:

  • Your profile, picture, personal content, training data and sign-in record are deleted at once.
  • What belongs to a team stays with it, so its history remains complete. Your name is removed from the plays, training sessions and other content you shared; on film comments it is replaced with “Former member”. The attendance, fee and equipment records your coaches keep for you stay under your name, so the team can follow up on open fees and equipment. Announcements you sent and lifts you logged for the team also stay.
  • Feedback you sent is kept without your name and email.

Crash reports are deleted after 90 days and usage statistics after at most 14 months. We keep records longer only where the law requires it.

Your rights and deleting your account

You can view and edit most of your data in the app. You can also ask us for a copy of your data, ask us to correct, delete or transfer it, or ask us to restrict or stop using it; where we rely on your consent, you can withdraw it at any time. Write to support@lailapps.com and we will answer within 30 days.

To delete your account, go to Profile › Delete Account in the app, or sign in at https://pullrapps.lailapps.com and do the same. If you can't sign in, email us from the address on your account and we will delete it for you. Deleting your account doesn't cancel a store subscription.

You can also complain to a data protection authority, such as Turkey's Personal Data Protection Authority (KVKK) or the authority in your EU country.

Children

Pullr is not intended for children under 13 and we don't knowingly collect their data. If you are under 18, use Pullr with the permission of a parent or guardian. If you believe a child under 13 has an account, contact us at support@lailapps.com and we will delete it.

Security

Data is encrypted in transit and at rest on Google Cloud. Access rules make sure only members of a team can read that team's data, and app integrity checks block unofficial apps. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

Changes to this policy

When we change this policy, the version number above changes. For important changes we will tell you in the app or by email before they take effect.