20 Metres Privacy Policy

Who we are

20 Metres is made by Koffee Studios Ltd. ("we", "us"), a software studio based in Gibraltar. We are responsible for the app and for any personal data processed through it. You can reach us at hello@koffeestudios.com.

This policy covers the 20 Metres app for Android and iOS. It doesn't cover other apps or websites, even ones linked from the app.

Information that stays on your device

To work, 20 Metres saves some things in its own private storage on your phone or tablet. This information is never uploaded to us or anyone else, and we have no way of seeing it:

• Custom sounds: clips you record in the app and audio files you choose from your device. When you choose a file, the app keeps its own copy.
• Participants: any names you type into the participant list.
• Results history: the level and shuttle each person reached, an estimated VO2 max worked out from that level, the date, and which sound was used.
• Settings: your chosen sound, voice settings, and any custom names or sound clips you've set for each level's announcement.

Device backups (such as iCloud or Google backups) may include the app's data, depending on your device settings. Those backups are handled by Apple or Google under their own privacy policies.

Crash reports

We use Firebase Crashlytics, a service provided by Google, to find out when the app crashes or hits a serious error, so we can fix it. When that happens, the app sends a crash report containing:

• technical details of the error (a "stack trace" showing where in our code it happened);
• your device model, operating system version, and the app version;
• the device's state at the time, such as free memory and storage, orientation and whether it's rooted or jailbroken;
• the time of the crash, and a random identifier created for this installation of the app.

Crash reports don't include your recordings, sounds, participant names or results, and we don't use them to identify you. The random identifier only lets us tell whether several crashes come from the same installation. It isn't linked to your name, account or any other app, and it's reset if you reinstall the app.

Google processes crash reports for us and keeps them for 90 days. Google may process them on servers outside the UK and Gibraltar, under its data processing terms and the safeguards required by data protection law. You can read how Google handles this data in the Firebase privacy information.

Our legal basis for collecting crash reports is our legitimate interest in keeping the app working reliably, which we've balanced against the very limited, non-identifying nature of the data.

Permissions the app asks for

• Microphone: only used while you're recording your own sound, and only after you allow it. Recordings are saved on your device and never sent anywhere. If you say no, everything else in the app still works.
• Files and media: when you choose an audio clip, you pick it with your device's own file or media picker, and the app only gets the file you select.
• Keep the screen on: stops your screen turning off during a test. This doesn't involve any data.
• Internet: only used to send crash reports.

Spoken announcements

Level announcements are spoken by your device's built-in text-to-speech service. The app gives it short phrases such as "Starting level 5", plus any custom level names you've written. Speech is handled by your device's speech service (from Apple, Google or your phone's manufacturer) under its own terms. We don't receive anything from it.

Sharing your results

If you tap Share, the app creates a result card and passes it to your device's share menu. Nothing is sent unless you choose where to share it. Once you share it, the app or person you send it to handles it under their own privacy policy. The card can include whatever is shown on it, such as names and scores, so check it before you share.

Children

The bleep test is often run in schools and sports clubs, so 20 Metres may be used by or for children. The app doesn't collect personal information from anyone, children included, and the only data it sends (crash reports) doesn't identify the user. If you're recording results for a group, the names you enter stay on your device. Using first names or initials is a good idea if the device is shared.

Your choices and rights

• Delete results: remove single results or clear your whole history in the app's history screen.
• Delete sounds: remove saved sounds from the sound library in the app.
• Delete everything: uninstalling the app deletes all of its data from your device.

Under data protection law (including the Gibraltar GDPR and UK GDPR) you have rights to access, correct and delete personal data about you, and to object to how it's used. Because the app keeps your data on your device and crash reports aren't linked to you, there's usually nothing we hold that we could connect to you, but you can always contact us at hello@koffeestudios.com and we'll help. If you're unhappy with how we've handled your data, you can complain to the Gibraltar Regulatory Authority or your local data protection authority.

Security

Data saved by the app sits in storage that your device's operating system keeps private to 20 Metres. Crash reports are sent over an encrypted (HTTPS) connection.

Changes to this policy

If the app changes how it handles information, we'll update this page and the "Last updated" date at the top. If a change is significant, we'll also mention it in the app's release notes.

Contact

Questions about this policy or your privacy? Email hello@koffeestudios.com.