Privacy Policy
- We collect what you put into PitchProof (profile, matches, goals, videos) and the minimum technical data needed to run it.
- Your Passport and scout discovery are off until you switch them on. For players aged 13 to 17, a parent or guardian decides.
- Movement sessions record distance and a pitch heatmap. Your location is never stored or uploaded.
- AI providers process your footage only to produce your analysis. They are not allowed to train on it or keep it.
- You can download your data or delete your account at any time from the Privacy Center.
Who is responsible
PitchProof is operated by CML Electronics, Höglerstrasse 55, 8600 Dübendorf, Switzerland ("we"). Privacy contact: PRIVACY_CONTACT_REQUIRED. Data protection officer: No data protection officer has been appointed.. EU representative: LEGAL_CONTACT_REQUIRED.
This policy applies to the PitchProof iOS app, the PitchProof website at pitchproof.online and the guardian approval pages.
What we collect
- Account data: name, email address, sign-in provider (email, Apple or Google), your role (player, scout or coach) and an age band (under 13, 13 to 17, 18 or older). We never ask for or store your date of birth.
- Profile data you enter: club, positions, strong foot, nationality, biography, career history and achievements.
- Football data you enter: match logs, statistics, development goals, notes and coach observations.
- Media you upload: videos, photos and the metadata needed to process them (duration, resolution, file size, codec).
- Analysis results: AI-generated observations, coaching suggestions and highlight plans created from your media.
- Movement sessions: distance, speed, sprints, zones and a heatmap expressed in metres relative to the pitch. See "Movement sessions" below.
- Scouting data: if you are a scout or coach, the players you save, your reports and your trial invitations. If you are a player, reports and invitations that scouts address to you.
- Guardian data (players aged 13 to 17): your parent's or guardian's email address and their consent decisions.
- Device and technical data: push notification token, app version, crash diagnostics and security signals (Firebase App Check).
We do not use advertising SDKs, analytics SDKs or cross-app tracking.
Movement sessions
While you actively record a session, with the app open and "While Using" location permission, your phone reads its position to measure distance and draw a heatmap. Each reading is converted on your device into metres relative to where the session started. The latitude and longitude are discarded in memory and are never written to your device storage, our servers, crash reports or logs. We store only the pitch-relative summary. Because no location is stored, this feature is available to every user, including players under 18.
Why we use your data (legal bases)
- To provide PitchProof as you request it (contract): your account, profile, Passport, match logs, media library, analysis and scouting tools.
- With your consent, or your guardian's consent for players aged 13 to 17: a public Passport, discovery by scouts, scout contact, public media and AI analysis. You can withdraw consent at any time.
- For our legitimate interests: keeping PitchProof secure, preventing abuse, fixing crashes and moderating reported content.
- To meet legal obligations: keeping proof of consent and moderation decisions for as long as the law requires.
Who receives your data
- Google Firebase and Google Cloud (authentication, database, file storage, server functions, hosting).
- OpenRouter and the AI model providers it routes to, for analysis you request. Requests are sent with data collection denied and zero data retention required.
- Sentry, for crash diagnostics. Personal data in crash reports is scrubbed before sending.
- Apple and Expo, to deliver push notifications.
- RevenueCat and Apple, if you buy a subscription.
- An email delivery provider, to send guardian approval emails.
- Other PitchProof users, only as far as your visibility settings allow.
A detailed list of processors, their locations and safeguards for transfers outside Switzerland is maintained in our processor register. LEGAL_REVIEW_REQUIRED: transfer mechanisms per processor.
Youth players
PitchProof is for people aged 13 and older. Players aged 13 to 17 need verified approval from a parent or guardian before youth features become active. The guardian chooses each permission separately and can withdraw it at any time. Minors are shown publicly with first name and last initial only, labelled as a youth player, and never with an exact age. See the Youth Safety Policy and the Guardian Consent Notice.
How long we keep data
We keep your data while your account exists. When you delete your account, we delete your personal data and files. A minimised record of consent and moderation decisions may be kept where the law requires it. Details are in the Data Retention Policy.
Your rights
You can access, correct, export and delete your data, object to processing and withdraw consent. Most of this is available directly in the Privacy Center. For anything else contact PRIVACY_CONTACT_REQUIRED. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC), Switzerland or your local data protection authority.
Security
We protect your data with access rules on every database collection and storage path, server-side validation and encryption in transit and at rest provided by our cloud provider. No system is perfectly secure. See the Security and Disclosure Policy.
Changes
We will tell you about material changes in the app. If a change requires your agreement, we will ask you to accept the new version before you continue.