Privacy Policy

The short version

Turnstile is a personal sport-venue tracker. Your visits, photos, reviews, and notes belong to you. They live on your device and (if you sign into iCloud) sync to your private iCloud account — nowhere else.

• No analytics SDKs. No advertising SDKs. No tracking.
• No third-party servers receive your data.
• Sign in with Apple is optional. It is required only to leave a review.
• You can delete your account and all reviews in-app, in two taps from Settings.

What Turnstile stores

On your device

• Visits you log — venue, date, opponent, score, companions, notes, rating.
• Photos you attach to visits, or that you link to a venue from your camera roll. When possible we keep a reference to the photo asset in your library (PHAsset.localIdentifier) rather than copying the full image into Turnstile's database.
• Reviews you write — rating, optional review text, and a soft-delete flag.
• Settings like which sports you have enabled and whether historic venues are shown.

In your private iCloud (only if you are signed into iCloud)

• The records above are mirrored to your iCloud private database using CloudKit so the same data is available on every Apple device you sign in with. Apple holds the data; we never see it. We can't read it, can't query it, can't aggregate it.

If you Sign in with Apple

• We store the opaque user identifier Apple gives us (a long string like 001234.…). It is not your name, email, or any other personal identifier.
• The identifier is stored in your device's Keychain with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly.
• If, on first sign-in, you chose to share your name or email, we store those alongside the identifier. We never receive them again on later sign-ins.
• We never receive or store your Apple ID password.

What Turnstile does not store or transmit

• We do not run any backend. There is no Turnstile server.
• We do not collect device identifiers, IP addresses, or fingerprints.
• We do not use any analytics SDK (no Firebase, no Mixpanel, no Amplitude, nothing).
• We do not use any advertising SDK or cross-app tracking.
• We do not access your contacts, calendar, microphone, or other apps' data.

Permissions we ask for

• Photo Library (read & write) — only when you choose to attach a photo to a visit or link one to a venue. We read EXIF date and GPS solely to suggest which venue the photo belongs to.
• Location (when in use) — only when you opt into sorting venues by distance, or when you ask Turnstile to detect which venue you are currently at. We never read location in the background.

You can decline either permission and Turnstile still works — just without those two features.

Reviews and accounts

Today, reviews are local-only — they sync only between your own devices via your iCloud private database. Other Turnstile users cannot see them. If a future version of Turnstile introduces a public reviews feed, that will be opt-in and announced clearly before it ships.

Sign in with Apple is required only to leave a review. You can browse, log visits, and attach photos without an account.

Deleting your data

• Delete your account: Settings → Account → Delete account. Type "DELETE" to confirm. We permanently delete your UserAccount record, all of your reviews, and the Apple user identifier from your Keychain. Your visit log and photos remain on your device.
• Wipe all data on a device: delete the Turnstile app. iOS clears the local database with it.
• Stop iCloud sync: turn Turnstile off in iOS Settings → Apple ID → iCloud, or sign out of iCloud entirely.
• Revoke Sign in with Apple: iOS Settings → Apple ID → Sign-In & Security → Sign in with Apple → Turnstile → Stop using Apple ID. Turnstile does not call Apple's revokeToken endpoint because we never obtain a server-side refresh token.

Children

Turnstile is suitable for general audiences. We do not knowingly collect personal information from children under 13. Since we don't run a backend and don't collect personal data, there is nothing to collect about a child even if one uses the app.

Changes to this policy

If we change how Turnstile handles data, we update this page and the in-app copy in lockstep, and we bump the "Last updated" date above. Material changes are flagged in the app's release notes on the App Store.

Contact

Questions or concerns? Email help@psiegel.org.