⚽

KickStats ("we", "us", "our") is a football tracking and educational platform for young players, accessible at kickstatshub.com. We are committed to protecting the privacy of children and families who use our service. If you have any questions about this policy, contact us at: privacy@kickstatshub.com

KickStats Hub is designed for young football players, typically aged 6–18. Accounts are created and managed by a parent or guardian. We do not knowingly allow children to create accounts without parental involvement. By creating an account, you (the parent/guardian) confirm that you are over 18 and are setting up the account on behalf of your child.

We collect the following information when you register and use KickStats Hub Hub: • Parent/guardian email address • Child's display name and username • Child's date of birth and age • Country of residence • Favourite football team and player (optional) • Playing position and avatar (chosen by the user) • Football activity data: match results, training logs, quiz scores • XP points, level, badges earned • Login timestamps and session data We do NOT collect: home address, phone numbers, photos, or financial information.

We use your data to: • Create and manage your child's player profile • Track football progress, XP, and badges • Power the AI coaching feature (Coach K) • Send account confirmation and important service emails • Improve the KickStats Hub platform We do NOT sell your data to third parties. We do NOT use your data for advertising.

Under the UK GDPR and EU GDPR, we process your data on the following legal bases: • Contractual necessity — to provide the KickStats Hub service you signed up for • Legitimate interests — to improve our platform and ensure security • Consent — for optional features such as marketing emails (you can withdraw at any time) • Legal obligation — where required by law As this service involves children, we take additional care to ensure processing is lawful, fair and transparent.

Your data is stored securely using Supabase, hosted in the EU (Ireland region). We implement the following security measures: • Row Level Security (RLS) — users can only access their own data • Encrypted connections (HTTPS/TLS) for all data in transit • Encrypted data at rest via Supabase's infrastructure • Regular security audits of access policies • Session timeouts and rate limiting We retain your data for as long as your account is active. If you request deletion, we will remove all personal data within 30 days.

You have the following rights regarding your personal data: • Right of Access — request a copy of all data we hold about you • Right to Rectification — correct any inaccurate data • Right to Erasure ("Right to be Forgotten") — delete your account and all associated data • Right to Data Portability — download your data in a readable format • Right to Restrict Processing — limit how we use your data • Right to Object — object to processing based on legitimate interests • Right to Withdraw Consent — for any consent-based processing To exercise any of these rights, use the account settings in the app or email privacy@kickstatshub.com. We will respond within 30 days.

KickStats Hub takes the privacy of children extremely seriously. We comply with the UK Children's Code (Age Appropriate Design Code) and COPPA where applicable. • Accounts require a parent/guardian email • We do not use children's data for profiling or targeted advertising • We do not share children's data with third parties for commercial purposes • Parents can request deletion of their child's data at any time • We apply the highest privacy settings by default

We use the following types of cookies: • Strictly Necessary — required for the app to function (login sessions, security tokens). These cannot be disabled. • Analytics (optional) — help us understand how the app is used. These are only set with your consent. We do not use advertising or tracking cookies. You can manage your cookie preferences via the banner shown on first visit.

We use the following third-party services to operate KickStats Hub: • Supabase — database, authentication, and storage (EU-hosted) • Resend — transactional email delivery • Vercel — website hosting (EU edge network) • Anthropic (Claude API) — AI coaching feature (Coach K). Messages sent to Coach K may be processed by Anthropic. We do not store full conversation history beyond the current session. Each of these providers has their own privacy policy and data processing agreements in place.

• Account data is retained while your account is active • If you delete your account, all personal data is removed within 30 days • Anonymised, aggregated statistics (e.g. total quiz completions) may be retained indefinitely • Audit logs are retained for 12 months for security purposes

We may update this privacy policy from time to time. When we make significant changes, we will notify you by email or via a notice in the app. The date at the top of this page shows when it was last updated. Continued use of KickStats Hub after changes constitutes acceptance of the updated policy.

For any privacy-related questions, data requests, or complaints: Email: privacy@kickstatshub.com Website: kickstatshub.com If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk (UK) or your local data protection authority.