Privacy Policy

Last updated: 9 May 2026

FPLCraft ("we", "our", or "us") provides an AI-assisted Fantasy Premier League companion app. This Privacy Policy explains what information the app collects, how that information is used, who it is shared with, and the choices you have. By using FPLCraft you agree to the practices described here.

1. Information we collect

Information you provide

• FPL credentials. When you sign in, FPLCraft uses the official Premier League OAuth flow. We never see or store your password. We receive an access token issued by the Premier League and store it on the device using the OS keychain.
• FPL Manager profile. Your FPL Manager ID, team name, region, and gameweek history — all of which are public on the FPL website.
• Optional support requests. If you email support@fplcraft.com we retain your email and message until the issue is resolved.

Information collected automatically

• Diagnostic data (Firebase Crashlytics). Anonymised crash reports, the device model, OS version, and a randomly generated install ID. We use this strictly to find and fix bugs.
• Usage events (Firebase Analytics). Aggregated counts of which screens are opened and which features are used. We do not link these to your FPL identity.
• Push tokens (Firebase Cloud Messaging). A device token that lets us deliver deadline reminders and price-change alerts. You can disable notifications at any time in OS settings.

2. How we use your information

• To authenticate you against the Fantasy Premier League service.
• To display your team, fixtures, leagues, and statistics.
• To generate AI recommendations (captain, transfers, wildcards).
• To send notifications you opted into (deadlines, price changes).
• To diagnose crashes and improve performance.

3. AI processing

AI features are powered by third-party large language models from Anthropic and Google. When you use a feature that calls an AI model, we forward only the specific FPL data needed for that recommendation (e.g. your squad and the current gameweek context). Requests are routed through our secure server proxy so your device never holds an API key, and prompts are not used to train the underlying models.

4. Third-party services

FPLCraft relies on the following service providers. Each operates under its own privacy policy.

• Premier League / FPL API — official source for FPL data.
• Google Firebase — Crashlytics, Analytics, Cloud Messaging, Remote Config.
• Anthropic (Claude API) — AI model provider.
• Google AI (Gemini API) — AI model provider.
• Cloudflare — DNS, edge caching, and static-site hosting for this website.

5. Data retention

FPL access tokens are stored on your device and are deleted when you sign out. Diagnostic data is retained by Firebase per Google's standard retention windows (up to 14 months for Analytics, up to 90 days for crash reports). Support emails are kept until the issue is resolved and then deleted within 90 days.

6. Your choices

• Sign out. Removes your FPL access tokens from the device immediately.
• Disable notifications. Turn off push at the OS level — FPLCraft cannot deliver any messages without that permission.
• Delete diagnostic data. Email us at privacy@fplcraft.com with your install ID (Settings → About) to request deletion.

7. Children

FPLCraft is not directed to children under 13 (or under 16 in regions where stricter age limits apply). We do not knowingly collect personal data from children.

8. Security

We use HTTPS/TLS for all network traffic, store credentials in the OS keychain (Android Keystore / iOS Keychain), and route AI requests through a server proxy that holds the API keys instead of the client. No system is perfectly secure, but we follow industry best practices.

9. International transfers

Our service providers operate globally. Data is processed in the EU, the UK, and the United States. By using FPLCraft you consent to those transfers under the safeguards each provider publishes.

10. Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top of this policy reflects the most recent revision. Material changes will also be announced in-app.

11. Disclaimer

FPLCraft is an independent product. It is not affiliated with, endorsed by, or sponsored by the Premier League, Fantasy Premier League, or any Premier League club. All trademarks belong to their respective owners.

12. Contact

Questions or requests about this policy can be sent to privacy@fplcraft.com.