Player Data Protection and Performance Monitoring Agreement

This Player Data Protection and Performance Monitoring Agreement ("Agreement") explains how TxiD Ltd (trading as "KickStats") ("we", "us", "our") collects, uses, stores, shares, and protects Personal Data and Performance Data in connection with the KickStats Services ("Services"). It also sets out the rights of players and parents/guardians under applicable data protection laws.

By creating a KickStats account, accessing the platform, or submitting data to the Services, you acknowledge and agree to the terms of this Agreement.

1. Purpose of Data Collection

KickStats processes Personal Data and Performance Data for the following legitimate and essential purposes:

• To create, maintain, and update individual player profiles.
• To deliver performance analytics, dashboards, progress tracking and personalised coaching via the AI Coach and related tools.
• To evaluate on-field performance, generate insights and support player development programmes.
• To enhance the reliability, accuracy, and functionality of the KickStats platform.
• To enable long-term trend analysis and development monitoring across seasons.
• To meet safety, compliance, and auditing obligations.

These purposes are necessary for the effective operation of the Services.

2. Scope of Data Collected

KickStats may capture, monitor, and process the following types of data ("Data"):

2.1 Personal Data

• Player information (name, date of birth, age, gender, club/team affiliations).
• Parent/guardian information (name, contact details, relationship to the player).
• Account and login information (email address, usernames, device identifiers, authentication data).

2.2 Performance Data

Performance statistics including but not limited to:

• Goals, assists, shots, passes, turnovers, dribbles attempted
• Tackles, blocks, interceptions, touches
• Saves, penalty saves
• Yellow and red cards
• Technical, tactical, and physical outputs derived from match footage or wearable devices
• Heatmaps, positional tracking data, movement patterns and spatial metrics
• AI-generated insights, ratings or performance breakdowns

KickStats may refine, expand or modify its list of tracked metrics as the Services evolve.

2.3 Sources of Data

• KickStats app and web platform.
• Wearable devices and hardware solutions
• Video and optical tracking systems.
• Manually submitted data from coaches, scouts, analysts or users.
• Uploaded match footage or training recordings.
• Automated AI and machine-learning models applied to video or sensor data.

3. Lawful Basis for Processing

We process Data in accordance with the UK GDPR and rely on the following lawful bases:

• Consent — particularly for processing the personal data of minors and for optional features.
• Legitimate Interests — such as improving services, maintaining platform integrity, safeguarding, and enhancing player development tools.
• Performance of a Contract — where processing is required to provide the Services to you.
• Legal Obligation — where we must retain or disclose certain data for safeguarding, compliance, or regulatory reasons.

Where consent forms the lawful basis, it may be withdrawn at any time.

4. How Data Is Used

KickStats uses Data solely for purposes relevant to player development and the operation of the Services, including:

• Providing real-time and retrospective analytics, dashboards and insights.
• Generating personalised training recommendations via AI-based tools.
• Facilitating club, coach and analyst review of player performance where access is authorised.
• Improving model accuracy, refining performance metrics and developing new features.
• Supporting research projects with recognised academic institutions.
• Ensuring platform security, fraud prevention, and legal compliance.
• Producing anonymised or aggregated datasets for long-term sporting analysis.

KickStats will not use Data for any unrelated purpose without your explicit consent.

5. Automated Processing and AI-Driven Analysis

KickStats uses machine-learning and automated analytics to extract performance insights. These systems:

• Do not make legally significant or consequential decisions about players.
• Are used solely for development and educational insights.
• May personalise recommendations based on historical trends.
• Are subject to human oversight.

You may request a human review of any automated output at any time.

6. Data Sharing and Disclosure

Data is shared only where necessary and in accordance with this Agreement.

6.1 Internal Access

• Authorised KickStats personnel and contracted service providers with a legitimate operational need.
• Authorised analysts supporting your club or organisation where access has been granted.

6.2 External Access

• Professional or licensed football clubs, scouts and coaching staff, but only where you, your parent/guardian, or your club authorises access.
• Recognised academic and sports science institutions conducting approved research.
• Technology vendors involved in hosting, storage, video analysis, AI processing, and platform support.

6.3 Aggregated and Anonymised Data

We may share aggregated or anonymised datasets for:

• Sports science research
• Product development
• Market insights
• Commercial partnerships

No individual player will be identifiable in such outputs.

6.4 Legal and Safeguarding Requirements

KickStats may disclose Data where legally required, including:

• Complying with statutory obligations
• Responding to court orders or regulatory inquiries
• Safeguarding duties relating to child protection or welfare concerns

7. Data Security

KickStats implements robust technical and organisational security measures, including:

• Encryption of data at rest and in transit.
• Strict access controls and authentication protocols.
• Secure cloud hosting environments with regular threat monitoring.
• Routine audits, data integrity checks and incident response protocols.

We continually assess risks and update security measures in line with best practice.

8. International Transfers

Where Data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy regulations
• Standard contractual clauses
• Equivalent recognised protections

These ensure Data is processed securely and lawfully.

9. Data Retention

KickStats retains Data only for as long as necessary for the purposes described in this Agreement or as required by law.

• Active accounts: Data is retained for the duration of the account's active use.
• Closed accounts: Data will be deleted 12 months after account closure unless legal or safeguarding obligations require retention.
• Anonymised data: May be retained indefinitely as it does not identify individuals and is used for long-term research or system development.

10. Your Rights

You have the following rights under data protection law:

• Access — to request a copy of the Data held about you.
• Rectification — to correct incomplete or inaccurate Data.
• Erasure — to request deletion of your Data.
• Restriction — to limit how your Data is processed.
• Objection — to object to processing based on legitimate interests.
• Portability — to receive your Data in a transferable format.
• Withdraw Consent — at any time, without affecting previous lawful processing.

To exercise your rights, contact: teamhq@kickstats.co.uk

11. Parental and Guardian Consent

For players under 18:

• A parent or legal guardian must provide consent for Data processing.
• Parents/guardians may request access, updates, or deletion on behalf of the player.
• Clubs submitting minor player information must confirm they have obtained appropriate consent.

12. Data Accuracy and User Responsibilities

Users, parents and clubs agree to:

• Ensure all submitted data is accurate and kept up to date.
• Promptly notify KickStats of any material changes.
• Ensure data is only uploaded where the user has a lawful and legitimate basis to do so.

13. Updates to This Agreement

KickStats may update this Agreement from time to time to reflect changes in law, technology, or Service functionality. Material updates will be communicated via:

• In-app notifications
• Email
• Website updates

Continued use of the Services constitutes acceptance of updated terms.

14. Consent and Acceptance

By creating an account or selecting "I Agree", you confirm that:

• You have read and understood this Agreement.
• You consent to the collection and processing of Data as described.
• If you are a parent or guardian, you are authorised to provide consent for the player.
• You understand that data processing is necessary for the operation of the Services.