Privacy Policy

Last updated: October 2026

This Privacy Policy explains how ProEdge:Football collects, uses, shares, and protects your personal data. We are committed to complying with UK GDPR and the Data Protection Act 2018.

1. Who We Are

ProEdge:Football ("we", "us", "our") is responsible for personal data processed to provide the app and website. For privacy questions or requests, contact planetvermilion@gmail.com.

2. Personal Data We Collect

The data we collect depends on which features you choose to use:

• Account and sign-in data: Username, display name, email address, password hash, sign-in provider identifiers for Google or Apple, account and login dates, and the date you accepted the Terms. We do not receive your Google or Apple password.
• Player profile data: Information you choose to add, which may include birthday or age, gender, height, body type, dominant foot, playing level, training goals, team or club names, and profile image.
• Match and training data: Opponent and match details, position and minutes, scores and player contributions, ratings, tags, text reflections, saved voice transcripts, uploaded match photos, AI feedback, training plans, drill progress, custom player paths, and points or referral activity.
• Performance imports: If you import or enter performance data from a football or wearable-tracking source, we store the source, session date or label, and metrics extracted from your submissions or entered or confirmed by you.
• Run and location data: If you start GPS run tracking and grant location permission, we record route points while the run is active, including location and time, and derive running distance, duration, pace, and speed. Route data is saved with your account so you can view the run later. To display a map, the app requests map tiles from OpenStreetMap for the approximate area around the route; the tile service does not receive your saved route-point list.
• Coach and team data: Team and club memberships, rosters, fixtures, schedule details and images, sessions, attendance or participation, assigned drills and completions, team notifications, coach feedback, and team or club leaderboard activity.
• AI video data: If you choose AI Video Analysis, your clip (currently up to 30 seconds and 50 MB) and relevant match context are sent to Google Gemini for analysis. We retain the resulting analysis with the match, not as a video library.
• Voice and image inputs: Audio, images, or other files you choose to submit for transcription, schedule or performance extraction, or another AI feature may be sent to the provider used by that feature. The resulting transcript or extracted information may be saved if you add it to an app record.
• Subscription information: Apple or Google and RevenueCat handle in-app subscription transactions. We receive subscription product and entitlement status, but not your full payment-card details.
• Notifications: If you allow push notifications, we store a device push token linked to your account so we can send requested service notifications. You can change notification permission in your device settings.
• Version and voluntary feedback: We record native app version and build metadata and may keep the version observed near account signup until account deletion to compare retention without treating later upgrades as new acquisitions. If you choose to give return feedback, we keep your latest selected reason and interview preference linked to your account. Interview contact is optional, off by default, and uses your account email only if you agree. You can update or withdraw that preference in the app; no research invitation is sent automatically. Focused drill reminders are requested explicitly and scheduled on your device.
• Analytics and technical data: App and website feature-use events, event time, platform, and pseudonymous device or session identifiers. When you sign in, some pre-sign-in app events may be linked to your account. Website events can include limited campaign labels, broad referrer and device categories, and store-link clicks. Our first-party analytics events are retained for up to 180 days. Android install attribution may use a Play Store referrer; iOS install attribution is not available.
• Support and account communications: Messages you send us and email address information needed to deliver password-reset or other service emails.

3. How We Use Personal Data

• To create and secure your account, provide the features you request, and save your match, training, run, profile, and team records.
• To generate AI insights, training plans, coaching responses, transcripts, image extractions, and video analysis when you choose those features.
• To let coaches manage teams and provide team features, and to show relevant information to players and coaches in a team.
• To operate referrals, points, leaderboards, subscriptions, customer support, and service notifications.
• To understand feature usage, diagnose technical problems, protect the service, and prevent abuse.
• To comply with legal requirements and handle disputes or safety concerns.

4. Who Can See or Receive Your Data

Your account is not a public webpage. However, some information is visible inside the signed-in app: coach accounts can search player usernames and display names to invite players, and limited profile details and performance summaries can be shown to signed-in users. If you join a team, its coach can access your logged match records for coaching, including match reflections and attached material where available. Team members may see team schedules, published fixtures, shared feedback, and notifications; club members may see club leaderboards. Only join teams you trust; you can leave a team in the app.

We also share data with service providers that help us run the service, such as AI, hosting, email, analytics, notification, and subscription providers. We may disclose information when required by law, to protect people or the service, or as part of a business transfer. We do not sell personal data for third-party advertising.

If you share a player card, report, or export outside the app, the recipients and the apps you choose may keep their own copies. External coaching videos, maps, and sign-in services may receive connection or device information when you use them, under their own privacy policies.

5. AI Processing and Service Providers

When you use an AI feature, the information needed for that feature may be sent to its provider. OpenAI services, accessed through Replit's AI integration, are used for features such as generated text, voice transcription, and some image or performance processing. Google Gemini is used for AI video analysis and receives training-plan drafts with limited relevant context (age band, position, playing level, goals, and selected match insights) for an independent check against coaching references. This check does not send account identifiers or the raw reflection field as separate inputs, although generated plan text may reflect information you provided. AI providers process submitted inputs under their own service terms and privacy information. We do not use AI outputs as a substitute for a qualified coach or health professional.

Other providers include RevenueCat and Apple or Google for subscription status and billing; PostHog for app analytics; Resend for transactional email such as password resets; and Expo for push-notification delivery. These providers may process data in countries outside the UK. Where required, we use appropriate safeguards for international transfers. Provider handling is also subject to the provider's own terms and privacy information.

6. Legal Bases

• Contract: To create your account and deliver the services and features you request.
• Legitimate interests: To secure, maintain, and improve the service; understand aggregated product use; prevent abuse; and protect our users and business, balanced against your rights.
• Consent: Where required, for optional device permissions and other processing that asks for your consent. You can withdraw a device permission through your device settings; this does not affect processing already carried out.
• Legal obligation: To meet applicable legal and regulatory requirements.

7. Children and Team Information

ProEdge:Football is intended for users aged 13 and over. Users under 18 need parental or guardian permission. We rely on the confirmation provided at registration; we do not claim to independently verify every user's age or guardian permission. Involve a parent or guardian before sharing match footage, photos, location, or profile information. Coaches must have appropriate authority and permission before adding information about young players. Contact us if a child under 13 has created an account or a child is using the service without required permission.

8. Retention and Deletion

• We keep account and product data while your account is active and as needed to provide the service.
• When you request account deletion in the app, we remove the account and associated product records from our active system. A limited record may remain where required by law or needed for security, fraud prevention, dispute handling, or administrative audit; backups may persist until overwritten under normal backup cycles.
• First-party product analytics events are retained for up to 180 days. Analytics providers may apply their own retention periods.
• For AI Video Analysis, the temporary upload is removed from our processing storage and we request deletion of the uploaded file from Gemini after processing. Deletion by a provider may not be immediate in every system or backup. We retain the analysis result with the match until the associated record is deleted.
• Voice and image files used only for transient processing are not retained as separate account files by us; any transcript or extracted information you save in a match, team, or profile record is retained as part of that record.
• Season-end leaderboard snapshots and limited administrative audit records may be retained as historical or security records, including a name or other minimal identifying detail, even after an account is deleted.
• If the service closes, access to your account and stored data may end and data may be deleted. We do not promise post-closure access, export, or retention for a particular period. Where reasonably practicable, we will give notice of a planned closure. Any retained personal data remains subject to applicable law and your rights.

9. Your Rights and Choices

Depending on the circumstances, UK data-protection law gives you rights to access, correct, delete, restrict or object to processing, and receive certain data in a portable format. You may also withdraw consent where processing relies on consent.

• Delete your account: In the app, go to Profile > Delete My Account & Data. This does not cancel an Apple or Google subscription; cancel it separately through that store.
• In-app export: Profile > Export My Data downloads a CSV of account identifiers and selected match-log fields. It is not a complete export of every category of information we hold. Email us for a broader access or portability request.
• Other requests: Email planetvermilion@gmail.com. We may need to verify your identity and will respond within the time required by law, normally one month.

You may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Location, Cookies & Local Storage

GPS location is used for run tracking only when you start or resume a recorded run and grant the required location permission; background permission lets an active run continue when the app is not on screen. The route is saved with that run. You can stop tracking in the app and manage location access in your device settings.

The website uses a necessary session cookie for signed-in web sessions. The marketing site stores a random visitor identifier and session identifier in browser storage to measure visits, campaign categories, and store-link clicks. First-party event records are retained for up to 180 days; browser identifiers can remain until you clear browser storage. The mobile app stores pseudonymous analytics and session identifiers on the device. We do not use these identifiers to serve third-party advertising.

11. Security and International Transfers

We use safeguards intended to protect personal data, including encrypted connections, hashed account passwords, and access controls. No service can guarantee absolute security. Some service providers may process information outside the UK; where required, we use an appropriate transfer mechanism and safeguards.

12. Changes to This Policy

We may update this Policy as our service or legal requirements change. We will update the date above and, where a change is material, take reasonable steps to notify affected users.

13. Contact & Complaints