Privacy Policy

Last updated: August 2026

This Privacy Policy explains how ProEdge:Football collects, uses, shares, and protects your personal data. We are committed to complying with UK GDPR and the Data Protection Act 2018.

1. Who We Are

ProEdge:Football ("we", "us", "our") is the data controller for personal data collected through this app. You can contact us at: planetvermilion@gmail.com

2. Data We Collect

We collect the following categories of personal data:

• Account data: Your chosen display name, username, and email address. Email is required to create an account and is used for account recovery and password reset emails.
• Sign-in data: If you register using Google Sign-In, we receive your name and email address from Google. We do not receive your Google password.
• Player profile data: Optional information you provide to personalise your experience, including age, height, dominant foot, body type, playing level, and training goals.
• Performance data: Match details you log: opponent, position, minutes played, performance ratings (performance, confidence, energy), tag selections, and text or voice reflections.
• Voice data: Audio recordings you make for voice reflections. The audio is sent to OpenAI Whisper for transcription and then immediately discarded. We do not store raw audio files on our servers.
• Video data: If you use the AI Video Analysis feature (Pro only), your match clip is uploaded to Google's Gemini Files API for analysis. The clip is permanently deleted from both Google's servers and our own immediately after the analysis is complete. We store only the analysis result.
• Activity data: Daily login dates (used to calculate streaks and award login points) and video analysis usage count (used to enforce the weekly quota).
• Leaderboard data: An annual snapshot of the top ProEdge League rankings is stored on 1 July each year to record that season's results. This snapshot includes your display name, position, and seasonal points total.
• Push notification tokens: If you grant notification permission, we store an Expo push token linked to your account in order to send you match-ready alerts and other in-app notifications. You can withdraw permission at any time in your device settings.
• Payment data: Subscription payments are handled by RevenueCat and processed via the Apple App Store (iOS) or Google Play (Android). We store only your subscription status. We never see or store your payment card details.
• Analytics data: We use PostHog to collect anonymised event data (such as which screens you visit and features you use) to help us improve the app. On iOS, we additionally ask for your permission via Apple's App Tracking Transparency framework before collecting device identifiers. If you decline, no device-level tracking occurs and all app features remain fully available.
• Usage data: Basic technical data such as your session identifier and the date your account was created.
• Consent records: The date and time you accepted our Terms and Conditions.

3. How We Use Your Data

• To provide and operate the ProEdge:Football service, including storing your match history and generating AI insights.
• To generate personalised AI training plans and performance analysis using your match data.
• To analyse match footage clips you upload using Google Gemini (AI Video Analysis, Pro only).
• To operate the points system, ProEdge League leaderboard, and referral programme.
• To send you push notifications about your match analysis results and app activity.
• To manage your subscription and process payments.
• To send password reset emails when you request them.
• To respond to support requests.
• To comply with our legal obligations.

4. Legal Basis for Processing (UK GDPR)

• Contract (Article 6(1)(b)): Processing necessary to provide the service you have signed up for.
• Legitimate interests (Article 6(1)(f)): Improving the app, fraud prevention, service security, and operating the leaderboard and points features.
• Consent (Article 6(1)(a)): Analytics tracking on iOS (where required by App Tracking Transparency) and push notifications.
• Legal obligation (Article 6(1)(c)): Compliance with financial and data protection law.

5. AI Processing and Third-Party Services

We use the following AI and third-party services, each acting as a data processor on our behalf:

OpenAI — used for two purposes:

• Voice transcription: When you record a voice reflection, the audio file is sent to OpenAI Whisper for transcription. The audio is not retained after transcription.
• AI insights and training plans: Your match text, ratings, and performance data are sent to OpenAI GPT to generate personalised insights and weekly training plans.

Data sent to OpenAI is not used by OpenAI to train their models by default under our API agreement. See OpenAI's privacy policy.

Google Gemini — used for AI Video Analysis (Pro only):

• When you upload a match clip, it is transmitted to Google's Gemini Files API for processing. Google analyses the clip and returns a structured performance breakdown.
• The clip is permanently deleted from both Google's servers and our own immediately after analysis. We do not retain the video file.
• See Google's privacy policy for details of how Google handles data submitted via the Gemini API.

RevenueCat — subscription and payment processing via the Apple App Store and Google Play, under their own privacy policies.

PostHog — anonymised analytics events to help us understand feature usage and improve the app. PostHog acts as a data processor and does not use your data for third-party advertising.

Resend — transactional email delivery (password reset emails). Only your email address is shared with Resend for this purpose.

App Tracking Transparency (iOS): On iOS, we ask for your permission to use device identifiers for analytics via Apple's App Tracking Transparency framework. If you decline, no tracking occurs and all app features remain fully available.

6. Data Retention

• Your account data and match history are retained for as long as your account is active.
• If you delete your account, all your personal data is permanently erased within 30 days, except where retention is required by law (e.g. financial records may be kept for up to 7 years).
• Voice recordings are processed in real time and are not stored on our servers.
• Video clips uploaded for AI Video Analysis are deleted immediately after the analysis is complete — they are not retained by us or Google beyond that point.
• Annual ProEdge League season archives (top-ranking snapshots) are retained indefinitely as a record of each season's results.
• Push notification tokens are deleted when you delete your account.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data ("right to be forgotten"). You can do this directly in the app via Profile > Delete My Data.
• Right to data portability: Receive your data in a machine-readable format. You can export your data directly in the app via Profile > Export My Data.
• Right to object: Object to processing based on legitimate interests.
• Right to restrict processing: Request we limit how we use your data.
• Right to withdraw consent: Where processing is based on consent (analytics, push notifications), you may withdraw at any time via your device settings.

To exercise any of these rights, use the in-app tools in Profile > Settings or email us at planetvermilion@gmail.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Children's Privacy

ProEdge:Football is intended for users aged 13 and over. Users under 18 must have parental or guardian consent. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us at planetvermilion@gmail.com so we can delete the account and data.

9. International Data Transfers

Some of our third-party processors (including OpenAI, Google, RevenueCat, PostHog, and Resend) are based in the United States. We ensure that any transfer of your data outside the UK/EEA is subject to appropriate safeguards, including standard contractual clauses approved by the relevant authorities.

10. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. However, no system is entirely secure and we cannot guarantee absolute security.

11. Cookies and Local Storage

The app uses session cookies to keep you logged in. We also store your preferences (such as your profile photo) locally on your device. We do not use advertising or tracking cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app. Continued use after the update date constitutes acceptance of the revised policy.

13. Contact & Complaints