ISO ยท Privacy
Privacy policy
last updated 5 September 2026
ISO is a solo basketball training app for iPhone, made by Toby Howell (ABN 83 477 289 166) in Australia. This page explains what the app collects, why, where it goes, and how to get rid of it. It is written to be read, not scrolled past.
The short version
- You can browse the whole app without an account. Signing in is only needed to save your history and sync it.
- Signing in with Apple or Google gives us your name and email. Nothing else from those accounts, apart from a profile photo if Google passes one along.
- Your workouts, drills, favourites, settings and session history live on your phone and, once you sign in, on our servers in Sydney, Australia.
- If the app crashes, a crash report goes to Sentry in the United States. It carries no name, email or account id.
- No ads. No analytics. No tracking. Nothing is sold or shared for marketing.
- You can delete your account inside the app. It locks immediately and is permanently erased after 7 days.
- What ISO collects
- What ISO does not do
- Where your data lives
- Keeping and deleting
- Your rights
- Children
- This website
- Changes and contact
What ISO collects
Your account
When you sign in with Apple or Google, we receive your name and your email address. If you use Apple's Hide My Email, we receive the private relay address Apple creates instead of your real one. We store these in your profile so the app can show your name and so we can reach you about your account. Nothing else is read from your Apple or Google account, and we never see your password.
Your profile photo (optional)
Google may pass along the photo on your Google account. You can also choose a photo from your library or take one with the camera. Either way it is resized to a small JPEG and stored in our photo storage. You can remove it or switch to initials at any time in Profile.
One thing to know: the photo storage is public-read. Your photo's link is not listed anywhere, but anyone who has the exact link can view it. Don't use a photo you wouldn't want seen.
Camera and photo library access are only requested when you tap those options, and only used for that one choice. ISO never scans your library.
Your training
Everything you do in the app: workouts you build, custom drills, favourites, your settings (weekly target, audio cues, timer delays), and every session you start. For each session that means which workout, when you started, how long it ran, the minutes banked per category, and how many drills you completed.
That is the full list. No location, no heart rate, no contacts, no health data.
Crash reports
If the app crashes, a report goes to Sentry, the crash reporting service we use. It contains what went wrong (the technical trace), your device model, iOS version, the app version, and a random id Sentry generates for the install. It does not contain your name, email, account id or anything you typed. Web addresses in the report are stripped of their query strings so no record ids travel with it. Crash reporting has no session replay, screenshots or performance tracking, and it is switched off entirely in development builds.
What ISO does not do
- No advertising, and no advertising identifiers.
- No analytics, usage tracking or third-party trackers. We don't know which screens you open or how often.
- No selling, renting or sharing of your data with anyone for marketing.
- No third-party code beyond what sign-in (Apple, Google), sync (Supabase) and crash reports (Sentry) need.
Where your data lives
- On your phone. ISO works offline. Your data is kept on the device so you can train without a connection.
- On our servers, once you sign in. We use Supabase, hosted in Sydney, Australia. Each account can only read and write its own rows. The database enforces this itself, not just the app.
- Crash reports are processed by Sentry in the United States.
- Sign-in is handled by Apple or Google under their own privacy policies.
How long we keep it, and how to delete it
We keep your data for as long as you have an account.
To delete your account, open Profile, tap the settings gear, and choose Delete account. Your account locks immediately: you are signed out everywhere and nothing more can be written to it. It is held for 7 days in case you change your mind, then permanently erased along with your profile photo. Signing back in during those 7 days restores it.
Signing out never deletes anything. Deleting the app from your phone removes the local copy only. Your account and its data stay until you delete the account.
Crash reports are kept by Sentry for 90 days and then discarded.
Your rights
Wherever you are, you can ask us to show you what we hold about you, correct it, or delete it. Email support@isohoops.app and we will respond within 30 days. Deletion is also self-serve in the app, as above.
We follow the Australian Privacy Principles. If you are in the UK or EU and want to exercise a right under the GDPR, the same email works and the same answer applies. If you think we have handled your data badly and we can't sort it out together, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
ISO is not directed at children under 13 and we don't knowingly collect their data. If you believe a child under 13 has created an account, email us and we will delete it.
This website
isohoops.app sets no cookies, runs no analytics and has no sign-in. Fonts and images are served from the site itself, so nothing is fetched from third parties when you visit. The site is hosted on Cloudflare, which keeps the usual server logs (IP address, browser type, pages requested) to deliver the page and protect against abuse.
Changes and contact
If this policy changes, the date at the top changes and the new version replaces this one here. If a change materially affects what we collect, we will tell you in the app.
Questions go to Toby Howell, ABN 83 477 289 166, at support@isohoops.app.