Privacy notice

1. What we collect

Account information

Your first and last name, username, email address, password hash, email-verification status, and account creation and update dates. We also store sign-in sessions and verification or password-reset records. Your password is stored as a hash, not readable text.

Phone verification

Your mobile number, verification status and date, consent date, a Firebase user identifier, and short-lived verification request and rate-limit records. We do not store the text-message code. New registrations require email and phone verification before account access is activated. Your number is not displayed to other players.

Practice information

The matches, drills, scores, shot outcomes, error reasons, timing, progress, notes, and table or equipment details you enter or save. This includes unfinished sessions saved by the app.

Optional player profile

Phone number you provide, equipment brands and specifications, purchase details, satisfaction and upgrade interests, league and team information, reported ratings, playing conditions, match habits, goals, and available practice time. If you turn on equipment history, we keep dated snapshots of your saved equipment changes until you turn it off and save or your account is deleted.

Community information

Your optional profile photo and country, state/province and city, rooms you join, messages and replies, topic choices, community-rules acceptance, blocked-player preferences, reports and moderation decisions. Photos are cropped and stored separately from account records. Your selected location suggests rooms; it is not a live location tracker.

Activity and technical information

First and most recent activity times, dates when you use training, administrator account and moderation actions, sign-in IP addresses and browser information, and records used to limit repeated requests. Hosting providers also process connection information, such as IP addresses, requested pages, and diagnostic logs, to deliver and protect the service.

Contact messages

Your name, reply email, subject, message, and a submission identifier when you use the contact form. We use protected hashes derived from your email and IP address to limit spam. Please do not include passwords or sensitive information you do not need to share.

Optional browser notifications

If you enable notifications, we store your browser’s push subscription address and encryption keys, notification preferences, time zone for quiet hours, and delivery status. Subscriptions are linked to your account and are not visible to other players. Your browser provider (such as Apple, Google, Microsoft, or Mozilla) handles push delivery. Turn notifications off for a device at Notification settings to remove its subscription, or revoke permission in your device settings. Account deletion removes all subscriptions.

Optional voice input

When you enable the voice coach, your browser converts speech into commands and answers. Saved shot outcomes and planning measurements become part of your practice history. See Cookies & voice for details.

Most information comes from you or your use of QBP. For an existing account linked through ChatGPT, the hosting platform can also provide an authenticated user ID, name, and email to connect earlier practice history. A ChatGPT account is not required for regular player registration.

2. How we use it

We use this information to create and secure your account, verify your email and mobile number, reset passwords, save and display your progress, respond to inquiries, manage accounts, understand how many players use QBP, and investigate errors or abuse.

We also use optional player profiles to understand equipment preferences, playing goals, and training needs. QBP suggests player personas from profile answers using explainable rules; these are inferences, not verified skill ratings or personality assessments. Administrators can view grouped insights and individual profiles. You can review the reasons for a persona and change or clear your answers.

Community information lets us display conversations, suggest local rooms, show approved profile photos, and review reports. We use automated text filters, posting limits and administrator review to moderate Community. New profile photos are reviewed before they are shown to other players.

Account emails are for verification, password recovery, and service matters. QBP does not currently send marketing campaigns or use advertising trackers.

When you request phone verification, we send a one-time text code to confirm that you control the number. Changing the number requires verification again. These texts are not marketing messages, and verifying a number does not verify your legal identity.

3. Who can access it

Your email address, optional pool profile, saved equipment history, suggested personas, and private practice records are not published to other players. When you participate in Community, your username, approved profile photo, messages and replies are visible to verified players who join the room and to administrators. Rooms are not private conversations. Your selected city is not displayed with messages. Blocking hides messages and replies between the two accounts; it cannot prevent screenshots or someone using another account. Reports and your blocked-player list are not displayed to the reported or blocked player.

The admin can see aggregate registration, engagement and practice metrics, recent completed practice, and names, usernames, email addresses, verification and account status, registration dates, recent activity, optional player profiles and selected location, saved equipment history, and suggested personas. The admin can edit account details, send account emails, suspend access, delete accounts and associated practice history, review submitted photos and reports, remove community content, and restrict community posting. Passwords are not displayed to the admin.

The operator also has access to stored records for running the service and handling support or privacy requests. Providers process information needed for their services:

• Hosting and storage: OpenAI Sites and Cloudflare support delivery of QBP, its database, and security. See the OpenAI privacy policy and Cloudflare privacy policy.
• Email: Resend processes email addresses, email content, and delivery information for account emails, contact messages and photo-review alerts. A photo-review alert includes your username and a link to the admin review queue, without attaching your photo. Contact messages and review alerts also reach the admin’s email provider and mailbox. See the Resend privacy policy.
• Optional speech recognition: Your browser or device provider may process voice input, as explained below.
• Phone verification: Google Firebase receives and stores the number you submit and processes verification and technical data to deliver text codes. Google also uses phone numbers for spam and abuse prevention across its services. The verification flow uses Google reCAPTCHA, which can process browser and device information and cookies. These services load when you request a code. See the Google privacy policy and terms.

These providers may process information in the United States and other countries, where privacy laws can differ from those where you live. We may also disclose information when required by law or when necessary to address fraud, security incidents, or protect legal rights.

4. Cookies & voice

Sign-in cookies. QBP uses cookies to keep you signed in and remember your selected account mode. Player sign-in sessions have a seven-day lifetime and can be renewed during use. You can sign out or clear site data in your browser. Blocking these cookies can prevent sign-in from working.

Device preferences. Your voice-coach prompting preference is stored in your browser until you change it or clear the site’s data. Clearing browser data does not delete your account or saved practice history.

Microphone and speech. Voice input is optional and starts when you turn on the voice coach and allow microphone access. Your browser’s speech service may send audio to its provider for recognition; it is not necessarily processed only on your device. QBP does not upload or store microphone recordings on its own servers. Spoken plans and transcripts are used in the current session; the shot results and planning measurements you save are stored as practice records. Turn the coach off or revoke microphone permission in your browser to stop voice input. You can use the on-screen controls without a microphone.

Tracking preferences. QBP does not use third-party advertising or cross-site analytics trackers. It does not change its essential functions in response to a Do Not Track signal. Because we do not sell personal information or share it for targeted advertising, a Global Privacy Control signal does not change those practices. Service providers still process the technical information needed to operate the app.

Links to external training resources open services with their own privacy practices. This notice covers QBP.

5. How long we keep it

Account information and saved practice history remain while your account is open, unless you delete a supported record or the admin processes a deletion request. QBP does not currently remove accounts automatically just because they are inactive. Daily training activity is linked to your account and removed with it. Administrator action records are kept for accountability; deleting an account removes the link to that player from those records.

Phone-verification records follow your QBP account. Google may retain the corresponding Firebase account and abuse-prevention information under its own policies. If you request deletion, the admin can also review removal of the Firebase account; Google's separate security retention may still apply.

Community messages remain when you leave a room. You can remove your own messages, remove or replace your photo, and unblock players. Removing a message clears its text from the active conversation while basic message metadata can remain. A report may retain details supplied by the reporter for moderation. Deleting your account removes associated community profiles, messages, memberships, blocks and reports from the active database and removes profile photos from active storage.

Contact messages and photo-review alerts remain in the admin’s mailbox and email-provider records while needed to handle the inquiry, review or follow-up. They are separate from your player account, so tell us if your deletion request also covers correspondence. Retention can depend on an unresolved issue, security investigation, or legal requirement; there is no single automatic deletion period for all records.

Deleting an account removes its optional pool profile, equipment history, associated practice history, and sign-in records from the active app database. Limited information may remain in provider logs or backups until those systems delete it under their retention processes, or where keeping it is legally required. Account suspension preserves history and is not deletion.

We use password hashing, secure sign-in cookies, and access controls to protect information. No online service can guarantee complete security.

6. Your choices and requests

• Review or correct: use Your player account to view your email and update your name or username. Open Your pool profile to change or clear optional answers, remove equipment entries, and turn equipment history off. Contact the admin for other corrections.
• Community: manage your photo and location in your account. In Community, use a message’s options to remove your message, report content or block a player. You can leave rooms and manage your blocked-player list.
• Export: sign in, open History, and select Export history to download your saved training records. Ask the admin for other account information.
• Delete: request deletion of your account and practice history. Deletion is handled by the admin and is not immediate when you submit the form.
• Control your device: turn voice coaching off, remove microphone permission, or clear QBP’s cookies and local preferences in your browser settings.

Send requests using the email on your account when possible. We may ask you to verify account ownership before releasing or deleting information; never send your password. We will explain any information we need to keep and any limits on a request.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of your information, restrict or object to processing, withdraw consent where processing relies on it, and complain to a privacy regulator. Contact the admin to exercise a right or ask for a decision to be reviewed. We will handle applicable rights within the time required by law and will not penalize you for exercising them.

7. Children

QBP is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact the admin so we can investigate and remove it as appropriate.

8. Notice updates

We will update this page and its date when our practices change. For significant changes, we will provide an additional notice in the app or by email, and request consent where required before using information in a new way.