Privacy Policy

eCoach ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, how long we keep it and when we share it while you use eCoach, payments, support, optional integrations, AI tools and related services.

By using the Service, you confirm that you have read this policy. If you do not agree with it, please do not use the Service.

1. Data Controller

eCoach is the data controller for account, product, billing, security, support and platform-operation data. Coaches, clubs, academies, or teams may also act as independent controllers for player, staff, or youth data they choose to enter and manage through the Service. For privacy-related questions, contact us at info@mail.ecoachapp.com.

2. Data We Collect

2.1 Account Information

• Name, email address, phone number, country, sign-in details and identifiers created during registration or sign-in.
• Optional profile details such as club, coaching licences, bio, avatar, language, theme and app preferences.
• Your role on the platform, such as head coach, assistant coach, or player and the teams you join.
• Trusted-device information, verification times and account-security records.

2.2 Coaching and Training Data

• Training ideas, sessions, tactical layouts, notes, schedules and status values that you create.
• Player roster details such as names, numbers, positions, birthdays, preferred foot, status and team records entered by coaches.
• Training logs, attendance records, player evaluations, session plans, exercise assignments and coach observations.
• Attachments, imported files, images, PDFs, shared links, notifications, comments and collaboration records created from your content.
• AI prompts, generated output and selected coaching context when you use AI-assisted features.

2.3 Payment Data

• Subscription status, plan type, billing period, trial or promotion status, payment status and payment records.
• Stripe customer, invoice, payment and subscription identifiers.
• Billing contact details needed to process payment, tax, invoices, receipts, refunds, disputes, or support requests.
• We do not store your full credit card number, CVV, or bank details. Stripe handles payment details directly.

2.4 Third-Party Integrations

• If you connect Strava, we receive the permission details needed to read only the activity data you authorize.
• If you use AI features, your prompt, generated output and the coaching context needed for the request may be processed by our AI provider.
• We never receive or store your Strava password.

2.5 Technical Data

• Device and browser information, language preference, approximate region and basic request information.
• IP addresses, protected device identifiers, sign-in activity, failed verification attempts and security records.
• Cookie and local-storage identifiers needed for login, trusted-device checks, language, theme, layout, guide progress and app preferences.
• Error and service logs needed to operate, protect, fix and abuse-protect the Service.

2.6 Support and Communications

• Support requests, email or chat messages, categories, status, timestamps and replies.
• Screenshots, attachments, account details, billing identifiers, or other details you choose to provide when asking for help.

3. Legal Basis for Processing

• Consent, when you provide optional data, connect optional services, use optional AI features, or agree to non-essential processing where required.
• Contract performance, when we need data to create your account, provide the Service, process subscriptions, support teams and deliver requested features.
• Legitimate interest, when we protect the Service, prevent fraud or abuse, fix errors, improve reliability, keep security records and understand aggregated product usage.
• Legal obligation, when we must keep or disclose data for tax, accounting, consumer, dispute, security, or regulatory reasons.
• Vital, safeguarding, or public-interest grounds only if exceptionally required by applicable law.

4. How We Use Your Data

• Provide, operate, maintain, personalize and secure the Service.
• Confirm your identity, manage your account, apply team roles and verify trusted devices.
• Process subscription payments, invoices, refunds, disputes and billing support through Stripe.
• Enable collaboration between coaches, assistants, staff and players, including notifications and shares.
• Support AI-assisted coaching ideas using the prompts and context you provide.
• Create the files, links and coach-facing reports you request.
• Send essential service emails such as verification, password reset, billing, security, support and important product notices.
• Detect, prevent, investigate and respond to security issues, misuse, fraud, abuse, or policy violations.
• Improve the Service using aggregated, de-identified, or anonymized information where practical.

5. Third-Party Data Processors

We only share data with processors that help us operate the Service under appropriate contractual safeguards.

6. Cookies and Local Storage

eCoach uses essential cookies and local browser storage for login, trusted-device checks, language, theme, layout, guide progress, saved preferences and security controls. These are always on. On our public pages we also use optional analytics and advertising cookies and pixels (Google Analytics, Meta, TikTok, LinkedIn) to measure traffic and our marketing campaigns, but only after you opt in through the cookie banner. You can change or withdraw your choice there at any time. If you block essential storage, parts of the Service may not work correctly.

7. Data Retention

• Active accounts: we keep account, team, coaching and billing records for as long as the account remains active.
• Deleted accounts: after a valid deletion request, we aim to delete or anonymize personal data within 30 days unless we need longer retention for legal, billing, dispute, security, backup, or legitimate business reasons.
• Billing records: invoices, payment events, refund or dispute records and tax/accounting records may be retained for the period required by law.
• Security records: trusted-device records, IP/security logs and security activity records are retained only as long as reasonably needed for security, abuse prevention, accountability and legal defense.
• Backups and provider logs may remain for a limited period before secure rotation or deletion.

8. Your Rights

If you are in the European Economic Area, you may have the following rights under applicable data protection law:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of data when applicable.
• Request restricted processing in specific cases.
• Receive your data in a structured, commonly used, machine-readable format where portability applies.
• Object to certain processing based on legitimate interest.
• Withdraw consent for future processing when consent is the legal basis.
• Complain to your local data-protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at info@mail.ecoachapp.com.

We may need to verify your identity and authority before responding, especially when a request concerns team, player, youth, billing, security, or shared-workspace data.

9. International Data Transfers

Some providers may process data outside the EEA. Where this happens, we rely on approved transfer mechanisms such as Standard Contractual Clauses or other recognized safeguards.

10. Data Security

• Data sent between your browser and our services is encrypted.
• Passwords are not stored as plain text.
• Access controls help make sure people only see data they are allowed to see.
• Trusted-device checks, session controls and security records help detect unauthorized access.
• Payment data is processed by Stripe instead of being stored directly in our systems.
• Sensitive operations are limited to protected systems and authorized personnel.
• No internet service can be guaranteed perfectly secure and you remain responsible for protecting your password, devices, team codes, files and shared links.

11. Children and Youth Data

eCoach is built for coaches and sports staff. We do not knowingly collect personal data directly from children under 16 without appropriate consent. Player data for youth teams is entered and managed by coaches, clubs, or guardians acting through the Service. The person or organization entering youth data remains responsible for providing any required notices, collecting valid consent or another lawful basis, limiting unnecessary sensitive data and handling parent/guardian requests where required.

12. Changes to This Policy

We may update this policy from time to time. When changes are important, we will update the date shown here and may also notify you by email or in the app.