Privacy Policy
Harbour City Software Pty Ltd (ABN 40 638 348 455) - "we", "us" or "our" - operates the Third Slip app for iPhone and the thirdslip.app website (together, the "Services").
You do not need to give us your name, email address, phone number or payment card details to use the app. We do collect pseudonymous identifiers and the operational data needed to deliver live scores, run Live Activities, manage subscriptions and free allowances, understand how the app is used, and diagnose faults. Pseudonymous data does not directly identify you, but it can distinguish your app account or device.
What we collect
- App account and device identifiers - the app creates a pseudonymous user ID and authentication token for you automatically. We also process an app-generated device ID and basic device and app details such as platform, device model, operating system version, app version and build number.
- Live Activity and notification data - Apple Push Notification service and ActivityKit provide the tokens used to deliver notifications and start and update Live Activities. We store the teams, series, competitions and seasons you follow, whether automatic Live Activities are enabled for each of them, Live Activities you have started or scheduled for a particular match, and the dismissals we record when you swipe one away, so a match you have dismissed on one device is not started again on it that day.
- Purchase and entitlement data - purchases are processed by Apple. We do not receive your payment card or bank account details. We receive and store Apple-provided transaction identifiers, product information, subscription status and expiry information, and related entitlement data, so we can validate purchases, restore access and administer the free Live Activity allowance.
- Usage analytics - we use TelemetryDeck in the app and on this website. It receives a pseudonymous analytics identifier, app interactions and feature usage, and limited technical context such as platform, app version, subscription status, background refresh status and whether Low Power Mode is on. This is collected automatically and is used to understand and improve the Services.
- Marketing attribution - we use AppsFlyer to measure which marketing campaigns lead to app installs, free trials and subscriptions. We use the privacy-reduced build of its SDK, which has no advertising-identifier (IDFA) dependency, and we disable collection of the iOS vendor identifier (IDFV) before the SDK starts. AppsFlyer receives an AppsFlyer-generated installation identifier, install and app-launch events, subscription and free-trial events including the product ID, price or revenue and currency, basic device and app details, and Apple Ads attribution information. AppsFlyer also receives your IP address, which may be used for attribution, approximate location and fraud prevention. Where an install or conversion is attributed to one of our advertising partners, limited attribution and conversion information is shared only with that partner to measure that campaign.
- Diagnostics - when something goes wrong and remote error reporting is switched on, the app may send us a description of the error, the part of the app it happened in, app and operating system versions, and a limited excerpt of the relevant server response. We use this to investigate faults and improve reliability.
- Support correspondence - if you email us, we receive whatever you choose to include in that email.
What we do not collect
We do not ask for or store your name, email address, phone number, date of birth, contacts, photos or precise location. We do not show third-party advertising in the app, we carry no betting odds or gambling advertising, and we do not sell your data. Other than the limited install and conversion information described above, which exists to measure our own campaigns, we do not share your data with third parties for advertising purposes.
How we use this data
We use the data described above to operate and secure the Services, authenticate your pseudonymous app account, deliver live scores and Live Activities, remember what you follow, validate purchases and subscriptions, administer the free Live Activity allowance and prevent repeated abuse of it, measure the effectiveness of our marketing, provide support, understand feature usage, and diagnose technical problems.
Service providers and data sharing
We use service providers to operate the Services. These include Cloudflare for website hosting and backend infrastructure, Apple for App Store purchases and for push notification and Live Activity delivery, TelemetryDeck for analytics, and AppsFlyer for marketing attribution. These providers process data on our behalf, or as necessary to provide their platform services, and may process data outside Australia.
Opening a news story takes you to the publisher's own site. That site receives the request as it would any other visit, and what it does with it is covered by the publisher's privacy policy rather than this one.
We may also disclose information where required by law, to protect the security or integrity of the Services, or as part of a business transfer. We do not otherwise share pseudonymous app data with third parties for their own marketing purposes.
Data storage and security
Data sent between the app and our servers is encrypted in transit using HTTPS. Your authentication token is stored in the iOS Keychain. It is stored as a synchronisable item, so iCloud Keychain may carry it to your other Apple devices and restore it after a reinstall - which is what lets your subscription and follows come back without an account.
We use reasonable technical and organisational measures to protect the data we hold. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Data retention and deletion
We retain pseudonymous account, device, purchase, allowance, follow and Live Activity records for as long as they are needed to provide the Services, maintain purchase access, prevent abuse of the free allowance, meet legal obligations and resolve disputes. Analytics and diagnostic data is retained according to our operational needs and the retention settings of our service providers.
Deleting the app removes most locally stored data, but it does not delete server records, and the authentication token may remain in the iOS Keychain and be restored after a reinstall.
You may request deletion of the data associated with your pseudonymous app account by emailing contact@harbourcitysoftware.com.au. We will delete or de-identify data linked to that account unless we need to keep particular records for legal, security, purchase-verification, fraud-prevention or dispute-resolution purposes. Purchase records held by Apple are controlled by Apple and subject to its own policies.
Your choices
- Live Activities - you can allow or disable Live Activities for Third Slip in the iOS Settings app, stop a running one from the match screen, swipe one away, and turn automatic starts on or off for anything you follow.
- Notifications - you can allow or disable notifications in the iOS Settings app.
- What you follow - teams, series and competitions can be added or removed at any time in the app.
- Subscriptions - you can manage or cancel a subscription through your Apple App Store account.
- Delete your data - contact us using the process above.
Children
The Services are intended for a general audience and are not directed at children under 13. We do not knowingly ask children to provide direct personal identifiers. The pseudonymous and technical data described in this policy is processed whenever anyone uses the Services. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where appropriate.
Changes to this policy
We may update this policy from time to time. Changes will appear on this page with an updated effective date.
Contact us and complaints
If you have questions about this policy, or wish to complain about how we handle your information, contact us at:
Harbour City Software Pty Ltd
Email: contact@harbourcitysoftware.com.au