Privacy

What Drillbag holdsWhat Drillbag keeps.

• Your name, the way your group knows you.
• Your sign-in link, the key that signs you in. Any invite someone copied for you stops working once Drillbag can send you a fresh link, by text or by email.
• Your phone number, if you saved it in the app or whoever added you typed it in. A number someone else typed never gets you texts. Only your own tap on TEXT ME REMINDERS does.
• Your email address, if you gave one or whoever added you typed one in. When your phone gets neither notifications nor texts, the app emails you there instead.
• Who brought you in, and when you were added. If you joined on or after September 24, 2026, members who have that person in their tiers can see who brought you in.
• Your crew. You join the crew of whoever brought you in, or start one of your own if they added you just for themselves, and you stay in it. It has no name. Once you've opened your link, everyone in it who hasn't put you in a tier sees you under NOT IN YOUR TIERS.
• An address for your phone's notifications, only if you turned them on. It goes when you turn them off.
• Your texting record: every save of your number in the app, every STOP or START you text, and any opt-out your carrier reports, each with its time and the number it was for. A HELP you text is noted too.
• Sessions you posted: when, where, the size, every change you made to one, and any note you wrote. POST also remembers the place, size and widen time of your last post, so the next one starts there.
• Sessions you joined: what you claimed and when, and any you said you can't make. When you drop out, the app notes only that a spot reopened, never who left.
• Whether you drilled: your answer to "Did you drill?" for each session you were in.
• Who made it: the names you tapped under "Who else made it?", and when, and whether someone who was there tapped yours. Used only to count who you've drilled with. Nobody is shown who tapped whom.
• Your tiers: who you put in them, or was put there when you arrived, for the person who brought you in. The order, and who you've taken out.
• Whose sessions you hid, and when.
• Your answers on the add-to-a-tier card, No thanks included, and who each one was about. They're never told either way.
• Every message it sends you: what it said, the number or email it went to, when, and whether it arrived. For a notification it keeps the words, never your phone's address. When it decides not to send you one, it notes why.
• When a notification reached your phone: your phone tells Drillbag when it shows one, so a message it never showed can come by text instead.
• When you use it, so Paul can tell whether Drillbag is working: the first time you opened your link, which days you open the app and the time of your first open each day, and when you tap a link in one of its texts, emails or notifications.
• When you left, if you did, and when you came back.
• A note for Paul when a number or email turns up twice. If anyone saves one in the app that already belongs to someone else, the note names both people, the number or address, and when. Neither person is told.
• An email left on the homepage, and when it was left, if you asked to hear when Drillbag is ready for your crew. It's used to let you know and for nothing else. Paul gets it by email so he can write back, and it's listed on his roster.

That's the complete inventory. The site and the app run no ads and no third-party trackers.

What Paul can seeTwo pages nobody else can open.

Paul runs Drillbag. His roster shows every member's name, number and email, whether they've opened their link, whether they've left, whether their notifications and texts are on, and a copy of their sign-in link, so he can send it again. It also lists any number or email two people share, with the notes described above.

His metrics page shows how many days each person opened the app in the last 7 and 28 days, the last day they did, and how many sessions each person has posted.

He can also turn on a notice for every session anyone in his own crew posts: who, when, where and the size. And because he runs the server, he can read the database itself.

What it is used forCoordinating sessions.

Your information exists to run your group's week: showing sessions to the people they're open to, and sending the messages about them. Your number and email also keep one person from being added twice, and who brought you in is how you get introduced to the people who know them. The days you open the app and the links you tap are counted for one more reason, to see whether Drillbag is working for your group. The days you open the app also decide when your "New here?" card stops: after the first ten. It's never sold and never used for advertising.

Who carries itThe services it runs on.

Drillbag runs on other companies' services, and each gets only what its job needs. Fly runs the app and holds its database. Cloudflare serves this site. Twilio carries the texts, and Gmail carries the emails. Your phone's own push service, Apple's or Google's, carries the notifications. The site and the app load their typefaces from Google Fonts, so Google sees your internet address when a page opens.

TextsConsent, on the record.

Text notifications start only after you enter your own number in the app. Every consent and every opt-out is timestamped and kept. Reply STOP to any text and the texts stop. Reply HELP for help.

LeavingWant out? Tap Leave Drillbag.

You can change your name, number and email yourself on the You page. Anything else you want corrected, write to [email protected].

Leave Drillbag is on the same page. Tap it and Drillbag stops reaching you and takes you off everyone's lists. Your history stays, so if you come back, it's all still there.

Coming back is your link. Tap it, then COME BACK, and you're where you were. The spots and sessions you gave up when you left stay given up.