Privacy Policy

Introduction

Matchday Lab ("we", "us", "our") operates the coaching platform available at matchdaylab.ai. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our service. By using Matchday Lab, you agree to the practices described in this policy.

What we collect

• Account information — your name and email address, collected through Google OAuth when you sign in. We do not store your Google password.
• Team and coaching data — team profiles, season structures, training sessions, debrief notes, and coaching preferences you create within the app.
• Player and roster data — player names, positions, and status information entered by authorized adult coaches on behalf of their players, who may include minors.
• Match and performance data — match scores, attendance records, and player appearance information.
• Usage analytics — page views and feature usage collected through PostHog to help us understand how the product is used.
• Error and diagnostic data — technical error reports collected through Sentry to help us identify and fix issues. Personally identifiable information is scrubbed from these reports before they are stored.

Player and minor data

Matchday Lab is a professional tool designed for adult coaches aged 18 and older. It is not a product directed at children or intended to be used by minors.

Coaches and team administrators enter player information, including the names of players who may be minors, in their professional capacity as authorized adults responsible for those players. We do not collect data directly from minors at any point.

To further protect player privacy, we apply pseudonymization before processing most data through AI services. This means player names are replaced with anonymous identifiers (such as "Player 1", "Player 2") before being sent to third-party AI providers.

How we use your data

• To provide and operate the Matchday Lab coaching service.
• To generate AI-powered session plans, coaching memory summaries, and training insights tailored to your team.
• To process roster and schedule imports you submit.
• To send product updates and notifications. You can opt out of non-essential communications at any time.
• To improve the service through anonymized, aggregated analytics.

We do not sell your data to third parties. Your coaching data belongs to you.

AI processing and third-party services

We use OpenAI's API to power several features including session planning, coaching memory summarization, drill generation, and data imports. When these features are used, relevant context is sent to OpenAI for processing.

For most AI operations, player names are pseudonymized (replaced with "Player 1", "Player 2", etc.) and email addresses and phone numbers are redacted before any data is sent to OpenAI.

For roster imports only, player names are sent to OpenAI because the AI must extract names from raw text you provide. This specific data flow uses OpenAI's Zero Data Retention option, meaning OpenAI does not store the input or output data.

OpenAI does not use data submitted through their API to train their models, as stated in their API data usage policy.

We also use the following third-party services:

• Render — application hosting and database infrastructure.
• PostHog — product analytics.
• Sentry — error monitoring and diagnostics.
• Google — authentication via Google OAuth.

Data storage and security

Your data is stored on Render's infrastructure located in the United States. We protect your data with encryption in transit (TLS) and encryption at rest. Access controls and multi-tenancy isolation ensure that each organization's data is kept separate.

We follow industry-standard security practices to safeguard your information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention and deletion

• We retain your data for as long as you maintain an active account with Matchday Lab.
• You can request deletion of your account and all associated data at any time by contacting us.
• Team and player data is deleted when the associated team is removed from the platform.
• AI-generated summaries and coaching memory data are deleted along with the team data they belong to.
• Database backups containing deleted data are purged within 30 days of a deletion request.

Your rights under CCPA/CPRA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to know — you may request details about what personal information we collect and how it is used.
• Right to delete — you may request that we delete the personal information we hold about you.
• Right to opt out of sale — we do not sell personal information to third parties.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

We do not use sensitive personal information for purposes beyond providing the service. To exercise your rights, contact us at the address listed below.

Your rights under GDPR (EEA/UK)

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation provides you with the following rights:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate personal data.
• Right to erasure — you may request deletion of your personal data ("right to be forgotten").
• Right to data portability — you may request your data in a structured, commonly used format.
• Right to restrict processing — you may request that we limit how we process your data.
• Right to object — you may object to certain types of data processing.

Our lawful basis for processing is legitimate interests (providing coaching tools to professional users) and consent where required by law.

Your data is stored in the United States. For international transfers, we use Standard Contractual Clauses where required to ensure adequate protection of your data.

To exercise your rights, contact us at the address below. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children's privacy

Matchday Lab is not directed at children under the age of 13, or under the age of 16 in jurisdictions where a higher age threshold applies. We do not knowingly collect personal information directly from children.

Player data entered by coaches may include information about minors, but this data is collected from and controlled by the adult coach or team administrator, not from the minors themselves.

If you believe that a child has directly provided us with personal information without appropriate authorization, please contact us at the address below and we will promptly delete that information.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify registered users by email. Your continued use of Matchday Lab after such changes constitutes your acceptance of the updated policy.

Contact

If you have questions about this policy or wish to make a data request, reach us at hello@matchdaylab.ai.

For data access, deletion, or portability requests, please include "Privacy Request" in the subject line so we can route your inquiry promptly.