This Privacy Policy explains what personal information the Visualize: Mental Reps mobile app ("Mental Reps," the "App") collects, how it is used and shared, and the choices and rights you have. It also serves as our notice at collection for California residents and covers users in Canada (see section 14). This Policy covers the App and this website.
The short version
Mental Reps is developed and operated by an individual developer, who is responsible for your personal information ("we," "us," "our"):
Mustafa İzzet Kuyumcu
Republic of Türkiye
Email: mustafaizzet@gmail.com
Mental Reps is a sports performance training tool. It is not a medical, mental health or therapy service, and we do not ask for or intend to collect health information. Please do not write medical or health details in your session notes or messages.
| Category | What exactly | When / source | Why |
|---|---|---|---|
| Identifiers | A random account ID created by Firebase Authentication, also used as your customer ID with our subscription provider | Automatically, the first time you open the App | To link your data to your account, back it up and restore it, and confirm your subscription |
| Account information (optional) | Email address, name and profile photo link from your Google account | Only if you choose to sign in with Google | To keep your data across devices, recognize your account for support, and let your coach recognize you if you join a club |
| Sport profile | Sport, position and training goals you select | When you set up or edit your profile | To recommend scenarios that fit you |
| Training activity | Which scenario you completed and when, your vividness and control ratings, and optional session notes you type | When you finish and rate a session | To show your progress, streak and history, and to back them up |
| Messages | The text of feedback or custom-scenario requests you send, the category, sport and position, your email (if signed in with Google), your subscription status and device platform | Only when you send a message in the App | To read and reply to your message and to improve the App and its scenarios |
| Club membership (optional) | The club you join, your join request, the time you gave consent, and your membership status | Only if you enter a club invite code | To run the club feature (see section 6) |
| Purchase information | Subscription status, product, purchase, renewal and expiration dates, trial status, and purchase identifiers | From Google Play and RevenueCat when you start a trial or subscribe | To verify your subscription and unlock Premium |
| Diagnostics | Crash and error reports: stack traces, device model, operating system and app version, a Crashlytics installation ID, and your account ID | Automatically if the App crashes or hits an error | To find and fix bugs |
| Device platform | Whether you use Android or iOS | With your profile | Support and troubleshooting |
| Beta sign-up (optional) | First name, email address, whether you are an athlete, parent or coach, the athlete's age group (13–17 or 18+), sport, level, phone type, country, the moment you want to train (optional), and the web link you came from | Only if you fill out the beta form on this website. Athletes under 18 are signed up by a parent or guardian | To add you to the Android test or the iPhone waiting list, email you about the beta and its short surveys, and understand who the App is useful for |
Payment details: Your card and other payment details are handled by Google Play and never reach us.
What we do not collect: We do not collect your location, contacts, photos or files, and the App does not record audio or video. We do not use advertising identifiers, show ads, or track you across other companies' apps or websites.
Sensitive personal information: We do not ask for sensitive personal information as defined by California law, and we do not use or disclose any for purposes that would give rise to a right to limit its use.
This website has no analytics, cookies or trackers. The beta sign-up page creates an anonymous Firebase Authentication session, stored in your browser, so each browser can sign up only once. It is hosted on Firebase Hosting and loads fonts from Google Fonts, so Google receives your IP address and browser information as part of serving those files.
We do not use your information for advertising, we do not build advertising profiles, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
We do not sell your personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined in California law. We have not done so in the past 12 months. We disclose personal information only as follows:
These providers process information on our behalf under their terms and data processing agreements and may not use it for their own advertising.
See section 6. This happens only after you enter an invite code and give consent.
We may disclose information if required by law, subpoena or other legal process, or if we believe in good faith it is necessary to protect the rights, property or safety of our users, the public or us.
If the App is sold or transferred, your information may be transferred to the new owner, who will be bound by this Policy for information collected under it. We will notify you in the App before that happens.
Mental Reps lets a club or team give its athletes Premium access. Joining is optional and requires an invite code, Google sign-in and your consent in the App. Once your coach approves your request:
Coaches and clubs that receive your information are responsible for how they use it. If you are under 18, talk with your parent or guardian before joining a club.
If you uninstall the App without deleting your account, your cloud data stays linked to your account so you can restore it later. A guest (not signed-in) account cannot be recovered after uninstalling, so if you want that data deleted, delete your account in the App first or email us. See how to delete your account.
Mental Reps is not directed to children under 13, and we do not knowingly collect personal information from children under 13. In Canada, the minimum age is 14, because Quebec law requires the consent of a parent or guardian to collect personal information from a minor under 14, and we do not collect that consent. The App asks for a birth year before any account is created, and users who indicate they are below the minimum age for their country cannot continue. If we learn that we have collected personal information from a child under 13 (or, in Canada, under 14), we will delete it promptly. If you are a parent or guardian and believe your child below the minimum age has used the App, contact us at mustafaizzet@gmail.com and we will delete the data.
Users aged 13 to 17 (14 to 17 in Canada) should use the App with the knowledge of a parent or guardian, who must approve any purchase. We do not sell or share personal information of any user, including users under 16. Users under 18 can have anything they have entered, such as notes and messages, removed by deleting their account in the App or by emailing us (this also satisfies California Business and Professions Code section 22581).
Data is encrypted in transit between the App and our servers (TLS) and stored on Google Cloud infrastructure, which encrypts data at rest. Database security rules allow each user to access only their own data; club data is available only to that club's approved staff. Access to the administration console is limited to the developer. No method of storage or transmission is 100% secure, but we work to protect your information and will notify you and the authorities of a data breach where required by law.
We are based in Türkiye, and our service providers operate servers in the United States, the European Union and other countries. Your information may be stored and processed in the United States, the European Union and Türkiye, where data protection laws may differ from those in your state, province or country. Our main database (Cloud Firestore) is located in the United States (multi-region nam5). We rely on our providers' contractual and security safeguards for these transfers. By using the App, you understand that your information will be transferred to and processed in these locations.
How we handle requests: to protect your data, we verify your request by matching it to your account, for example by asking you to email us from the Google account you use in the App, or to confirm details only the account holder would know (such as your sport, position and recent sessions). We respond within 45 days, and may extend that by another 45 days when reasonably necessary, in which case we will tell you. We do not charge for requests and will not discriminate against you for exercising your rights.
If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), gives you the following rights, subject to legal exceptions:
You can make a request by emailing mustafaizzet@gmail.com. You may use an authorized agent; we may ask the agent for proof of your signed permission and ask you to verify your identity directly.
| CCPA category | Examples | Source | Disclosed for a business purpose to |
|---|---|---|---|
| Identifiers | Account ID, Crashlytics installation ID, email address, name | You; your device; Google sign-in | Google (Firebase), RevenueCat; your club if you join one |
| Customer records (Cal. Civ. Code 1798.80(e)) | Name, email | Google sign-in | Google (Firebase); your club if you join one |
| Commercial information | Subscription and trial status, purchase history | Google Play, RevenueCat | Google, RevenueCat |
| Internet or other electronic network activity | Sessions completed in the App, crash and error logs | You; your device | Google (Firebase); your club (sessions only, without notes) |
| Inferences | Scenario recommendations based on your sport, position and goals (created in the App) | Derived from your profile | Not disclosed |
| Other information you provide | Sport profile, ratings, notes, messages | You | Google (Firebase); your club (ratings only) |
We do not collect sensitive personal information, biometric information, precise geolocation, or audio or visual recordings. Retention periods are described in section 7.
Shine the Light (Cal. Civ. Code 1798.83): we do not disclose personal information to third parties for their own direct marketing purposes.
Residents of other states with consumer privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may have rights to confirm whether we process their personal data, access it, correct it, delete it, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and profiling with legal or similarly significant effects. We do not sell personal data, use it for targeted advertising, or engage in such profiling. We extend the access, correction, deletion and portability rights to all users regardless of whether a particular law applies to us.
Appeals: if we decline your request, you can appeal by replying to our decision or emailing mustafaizzet@gmail.com with the subject "Privacy request appeal." We will respond within the time required by your state's law (generally 45 to 60 days). If you are not satisfied, you can contact your state Attorney General.
Nevada: we do not sell covered information as defined in Nevada law.
If you live in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you live in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25 (together, "Canadian privacy law"). This section adds to the rest of this Policy.
nam5), and our service providers Google (Firebase, Google Play, Google Sign-In) and RevenueCat, Inc. process it on our behalf in the United States and other countries; club and custom-scenario features run on Google Cloud servers in the United States, and custom-scenario requests are processed by Anthropic, PBC in the United States. We are based in Türkiye. While your information is outside Canada, it is subject to the laws of those countries and may be accessed by their courts, law enforcement and national security authorities. Before transferring personal information outside Quebec, we assess whether it will receive adequate protection, and we rely on our providers' contractual commitments, security measures and data processing agreements.We may update this Policy. The current version is always on this page with its effective date. If we make material changes, we will notify you in the App before they take effect, and where required by law we will ask for your consent.
Questions, requests or complaints about privacy: mustafaizzet@gmail.com (Mustafa İzzet Kuyumcu, who is also our privacy officer for Canada). We aim to reply within a few business days.