Privacy Policy

1. Who we are

BallerIndex (“we”, “us”) is a football movement-analysis service based in the United Kingdom. Parents, guardians and coaches use our website and app to film young players, and we analyse that footage to measure how they move.

We are responsible for the personal data described here. For any privacy question or request, email legal@ballerindex.com.

2. The short version

• We collect what we need to run your account and analyse the videos you upload — including video of players who may be children.
• A parent or guardian must give consent before any video of a player is uploaded, and can withdraw it at any time.
• No advertising. We do not sell data, show ads, or use advertising or cross-app tracking tools.
• You can delete your account and everything in it yourself, in the app or on the website.

3. What we collect

Your account

• Name, email address, password and role (for example parent or coach), to create and sign in to your account. Passwords are handled by our authentication provider, Supabase; we never see them in plain text.
• A sign-in session token, stored on your device so you stay signed in.

Players

• Player details you enter: name, date of birth, position, team and preferred foot, and which coaches the player is linked to.
• Video of the player, recorded or chosen by you and uploaded for analysis. Players are often children.
• Pose data: body-position measurements our analysis extracts from each video. We use it to compare the player’s movement with a coach’s.
• Results made from the video: scores, overlay videos, PDF reports and BallerCards.
• An optional player photo, used on BallerCards only after you approve it (section 7).
• Consent records: which player, which account gave or withdrew consent, when, and which version of the consent notice was shown.
• Filming-day registrations, if you register a player for a filming day run by a coach or academy, including the filming consent you give when registering.

Your device and how the service runs

• Notification token (app only): an identifier from Google Firebase Cloud Messaging, stored against your account so we can tell you when an analysis is ready.
• Requests to our servers: which drills, analyses and results you open, as part of providing them.
• Error reports from Sentry, sent to Sentry’s servers in the EU. In the app, these contain technical details of the error and which app platform it came from, are not linked to your identity, and do not include screen recordings. On the website, error reports can include your account identifier and IP address, and Sentry records a replay of a sample of browsing sessions (a reconstruction of what was on screen) to help us fix problems.
• Coach interaction data: for coaches taking part in labelling or blind-review rounds, the IP address and browser or device used, and how each judgement was made (how much of a clip was played, replays, playback speed and time on screen), for account security, fraud prevention and label quality.

Queued videos waiting for a connection stay in the app’s private storage on your phone until they upload. If you use fingerprint or face unlock in the app, the check happens on your phone and the result never leaves it.

4. What we do not collect or do

• No advertising, no advertising networks, and no selling or renting of personal data.
• No Meta or TikTok pixels, and no analytics tools such as Mixpanel, Amplitude, Segment, PostHog, Hotjar, FullStory or LogRocket.
• No Google Analytics in the app. On the website, Google Analytics loads only if you accept analytics cookies (section 11).
• No location, contacts or microphone-only recording.
• No payments in the app, and the app contains no Stripe code. Payments taken on the website are processed by Stripe; we do not receive or store full card details.
• Our fonts are served from our own servers, so no request is made to Google Fonts.

5. Why we use it, and our lawful basis

Under UK GDPR we must have a lawful basis for each use of personal data:

We also send transactional emails, such as analysis-complete and photo-approval emails, as part of providing the service.

6. Children and parental consent

Accounts are held by parents, guardians and coaches. The players filmed are often children, so:

• Before any video of a player is uploaded, a parent or guardian must give consent in the app or on the website. We record which player it covers, the account that gave it, when, and which version of the consent notice was shown. Without it, our servers refuse the upload and the analysis.
• Consent can be withdrawn at any time from the Players page, with no reason needed. From that moment no new video of that player can be uploaded or analysed. Results you already have stay in your account until you delete them.
• For players whose videos were uploaded before we started recording consent, we ask for consent the next time you use BallerIndex. Their existing results stay viewable.
• Consent to filming at a filming day is given separately, when you register the player for that event.

7. Player photos

• A photo you upload is stored but not used until you approve it from a link we email to the account holder, confirming you are the player’s parent or guardian. We record when, and which version of the notice was shown.
• The photo is used only on that player’s BallerCard and report. It is never shown on the public card-verification page and never used for advertising.
• Every photo is checked automatically so that only one person appears in it.
• You can switch it off at any time from the player’s page, and it stops being used immediately. Cards and reports already made keep the photo, because they are files already delivered to you.
• To delete the stored photo without deleting your account, email legal@ballerindex.com and we will delete it within 30 days. Deleting your account deletes it straight away.

8. Who we share it with

We do not sell personal data. We use these service providers, who process it on our instructions:

• Supabase — our database and account sign-in.
• Google Cloud — storage of videos, photos and results (Google Cloud Storage), and the servers that run our analysis.
• Google Firebase Cloud Messaging — delivering app notifications.
• Sentry — error monitoring (section 3).
• Resend — sending our emails.
• OpenAI — generating written commentary in performance reports, and transcribing coaches’ voice notes.
• Stripe — payments on the website only.
• Google Analytics — website analytics, only if you accept analytics cookies.

Coaches you are linked with can see the results of your players. A coach or academy running a filming day sees the registrations for that event.

9. How long we keep it

• Your account, players, videos, pose data and results — for as long as your account exists, unless you delete them sooner. Deleting a single analysis removes its videos and PDF report; the underlying analysis data is kept until you delete your account.
• Player photos — while the player’s profile exists, or until you ask us to delete the photo (section 7).
• Consent records — kept after the player or account is deleted, as a safeguarding record that consent was given or withdrawn. What remains holds no name, email, image or video.
• A record that an account was deleted — when, and how many items were removed. No name or email.
• Payment records — 7 years, as our Terms set out.
• Coach interaction data — 12 months from collection.

10. Deleting your account

You can delete your account yourself:

• In the app: Profile → Delete account.
• On the website: choose Delete account in the account menu, or go to ballerindex.com/account/delete.

You will be asked to enter your password again and type a confirmation. We then delete your account and sign-in, every player on it with their photos, every uploaded video with the pose data, scores, reports and BallerCards made from it, filming-day registrations for your players, and your notification settings. Stored files are removed by an automated process that starts straight away and retries until it has finished.

We keep only the consent records and payment records described in section 9.

Coach and staff accounts cannot be deleted this way, because other people’s drills, events and results depend on them. Email legal@ballerindex.com and we will handle it.

11. Cookies and similar storage

On the website and in the app we store your sign-in session on your device; this is essential for the service to work. On the website only, we use Google Analytics if — and only if — you accept analytics cookies in the cookie banner. You can change your choice at any time from the Cookies link. The app uses no analytics cookies.

12. Security

All data is encrypted in transit (HTTPS). Stored videos and photos are private and are only ever served through links that expire. Access to the database is restricted by row-level security, and we carry out regular security reviews.

13. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted — you can do most of this yourself (section 10);
• object to or restrict some processing;
• receive your data in a machine-readable format;
• withdraw consent at any time, without affecting processing that happened before.

To use any of these rights, email legal@ballerindex.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113. We would appreciate the chance to put things right first.

14. Changes to this policy

We will update this page when what we collect or how we use it changes, and email registered users about material changes.

15. Contact

For any privacy question or request: legal@ballerindex.com