Privacy Policy
1. Scope
This policy describes how KickOn processes the personal data needed to operate its football club management platform. It covers public and authenticated journeys, including account management, teams, internal communication, parental consent, player administrative files, events, statistics, reports, exports, notifications, AI assistance, and PWA/offline features.
2. Processed data
Depending on your role and your club's enabled modules, KickOn may process the following categories of data:
- account and identity data: first name, last name, email, hashed password, or OAuth identifier;
- profile and contact data: phone number, photo, preferences, language;
- club and team data: roles, assignments, attendance, availability, call-ups, messages, comments, and club associations;
- sports and administrative data: lineups, match sheets, live match events, statistics, analysis, training reports, player files, and exports;
- data relating to minors and legal guardians when consent workflows are used;
- Assist/AI data: prompts, responses, strictly necessary sports context, Assist memories, and conversation history when these features are used;
- technical data: application logs, error or performance traces, audit logs, session data, PWA/offline state, notification consent, and push tokens;
- billing data when your organization enables subscription or payment features.
3. Purposes of processing
This data is used to:
- create and secure accounts;
- manage membership in a club, team, or club association;
- support sports organization through call-ups, events, availability, and follow-up;
- power Live Match views, reports, statistics, Assist/AI analysis, and exports requested by authorized users;
- deliver internal messages and notifications required for the service;
- manage parental consent and minor-player workflows;
- ensure maintenance, security, auditability, error detection, PWA synchronization, and legal compliance of the platform.
4. Access and data sharing
KickOn does not sell your personal data. Information is accessible to authorized people within your organization, according to their role and the platform's multi-tenant isolation rules. Data may also be processed by technical providers strictly necessary for the service, including:
- Supabase for hosting, database services, authentication, storage, backend functions, embedded AI, and synchronization queues;
- compatible authentication providers when you choose to sign in through a third-party service;
- Sentry for application monitoring, performance traces, and session replay when this monitoring is configured;
- Stripe only if your club enables subscription or payment management;
- browser or operating-system notification services when you opt in to push notifications;
- AI or web-search providers called through backend functions when you use Assist, search, or automated report features.
5. Data about minors
KickOn may process data about minor players when necessary for sports and administrative club management. When required by the workflow, parental consent or legal representative approval must be obtained before certain access rights or processing activities are activated or validated.
6. Security
We apply reasonable technical and organizational measures to protect data, including encrypted communications, access control, tenant isolation, database security policies, sensitive-operation logging, and role-based access safeguards where needed.
7. Retention
Data is kept for as long as necessary to operate the service, manage your account, and comply with legal obligations. An account deletion request can be initiated from the app; where deferred deletion applies, a 30-day retention window may be used before permanent erasure.
8. Your rights
Depending on applicable law, you may request access to your data, correction, deletion, restriction of certain processing, portability, or object to certain uses. KickOn also provides export and account deletion features for certain use cases.
9. Contact
For any privacy-related question or to exercise your rights, you can write to privacy@kickon.dev.
10. Policy updates
This policy may be updated to reflect product evolution, processing changes, or legal obligations. The version published in KickOn is the reference version.
Last updated: May 26, 2026