Privacy Policy

1. Who We Are

FootballInOne ("we", "us", "our") operates the FootballInOne coaching platform, accessible at footballinone.com. The Service is available globally and we are committed to protecting your personal data and handling it responsibly in accordance with applicable data protection and privacy laws in your jurisdiction.

For questions or concerns about this policy or your personal data, contact us at contact.footballinone@gmail.com.

2. Data We Collect

We collect the following categories of personal data:

• Account data — your name and email address, collected when you register or sign in via Auth0.
• Profile data — profile picture or display name, if provided or sourced from a social login provider.
• Subscription and billing data — your chosen plan, billing interval, trial dates, and payment history. Payment card details are processed and held exclusively by Stripe; we do not store them.
• Content data — plays, playbooks, game session records, wrist coach cards, and any other content you create within the app.
• Collaborative data — content shared with other users through collaborative features (e.g. shared playbooks or live game sessions). This content is visible to the users you share it with.
• Technical and log data — IP address, device type, operating system, browser, and application logs collected automatically for security, debugging, and service reliability purposes.
• Cookie and tracking data — session cookies and similar technologies used to keep you signed in and maintain your preferences. See our Cookie Policy for details.

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account.
• To provide, operate, and maintain the FootballInOne service.
• To process subscription payments and manage your billing via Stripe.
• To send transactional communications — e.g. subscription confirmations, renewal reminders, and account-related notices.
• To enable collaborative features when you share content with other users.
• To monitor, diagnose, and resolve technical issues and improve platform performance.
• To protect the security and integrity of the service and its users.
• To comply with our legal and regulatory obligations.

We do not sell your personal data to third parties, use it for targeted advertising, or share it with third parties for their own marketing purposes.

4. Legal Basis for Processing

Depending on your jurisdiction, we are required to have a lawful basis for processing your personal data. We rely on the following bases:

• Performance of a contract — to deliver the service you have subscribed to, including account management and billing.
• Legitimate interests — to maintain security, prevent fraud, improve the platform, and send service-related communications. We balance these interests against your rights and freedoms.
• Legal obligation — where we are required to retain or process data under applicable law (e.g. financial records).
• Consent — for any optional processing activities where we have explicitly requested your consent (e.g. optional marketing communications, if introduced in future). You may withdraw consent at any time.

5. Third-Party Processors

We share data with the following third-party service providers to operate the service. Each is bound by contractual data protection obligations and maintains industry-standard security practices:

• Auth0 (Okta) — authentication and identity management. Auth0 stores your login credentials, session tokens, and account metadata on our behalf.
• Stripe— subscription and payment processing. Stripe stores payment method details, billing history, and invoices. Stripe's own Privacy Policy applies to data held by Stripe.
• Amazon Web Services (AWS) — cloud infrastructure, database hosting, and file storage. Data is stored in AWS data centres within the EU/EEA where possible.

We do not authorise any of our sub-processors to use your data for their own purposes beyond providing services to us.

6. International Data Transfers

FootballInOne is a global service. Your personal data may be stored and processed in any country where we or our service providers operate, including countries outside your own. We take steps to ensure that transfers of personal data are subject to appropriate safeguards — such as contractual protections between us and our providers — to maintain a level of protection consistent with this policy. By using the Service you acknowledge that your data may be transferred and processed internationally.

If you are located in the European Economic Area (EEA) or United Kingdom, such transfers are subject to appropriate mechanisms under applicable law, including Standard Contractual Clauses where required.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Account and content data — retained for the lifetime of your account. Deleted within 30 days of a verified account deletion request.
• Billing and financial records — retained for up to 7 years as required by tax and financial regulations, even after account deletion.
• Application logs — retained for up to 90 days for security and debugging purposes.

8. Minimum Age and Young Users

The Service is primarily designed for football coaches aged 16 and over. However, coaches may share plays, playbooks, and game session access with players on their team, some of whom may be aged 13–15. We therefore permit users aged 13 and over to create an account.

Users under 13 must not use the Service. We do not knowingly collect personal data from anyone under 13. By creating an account, you represent that you are at least 13 years of age. If you are aged 13–15, you should ensure a parent or guardian is aware that you are using this Service.

Coaches who use the Service's collaborative features to share content with team members are responsible for ensuring that no player under the age of 13 is invited to or encouraged to create an account.

We do not independently verify users' ages at sign-up. If we become aware that a user is under 13, we will take steps to delete their account and associated personal data promptly. To report an under-13 user, contact us at contact.footballinone@gmail.com.

Note: some jurisdictions may set a higher minimum age for online services. If the minimum age in your country is higher than 13, you must not use the Service unless you meet that higher requirement.

9. Automated Decision-Making

We do not make decisions about you using solely automated processing that produce legal or similarly significant effects on you. Subscription plan management and billing are handled automatically by Stripe as part of standard payment processing and are not considered profiling or automated decision-making of a significant nature.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Encryption at rest for stored data via AWS.
• Access controls limiting data access to authorised personnel only.
• Secure secrets management for API keys and credentials.
• Regular review of third-party sub-processors' security practices.

No method of transmission over the internet is 100% secure. In the event of a personal data breach, we will notify affected individuals and relevant authorities as required by applicable law in the timeframes prescribed by that law.

11. Your Privacy Rights

Depending on where you are located, you may have certain rights regarding your personal data. These may include:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to certain processing of your data.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time.
• Right to non-discrimination — we will not discriminate against you for exercising any privacy rights available to you.

Regardless of your location, you may always contact us at contact.footballinone@gmail.com to access, correct, or request deletion of your personal data and we will respond within 30 days. If you are in the EU or EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

12. Cookies

We use cookies and similar technologies to keep you signed in and maintain your session. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will notify you by email or via a prominent notice in the app at least 14 days before they take effect. The updated date at the top of this page will always reflect the latest revision. Continued use of the service after changes take effect constitutes acceptance of the updated policy.