Privacy Notice

Who we are

Mindsight Sport operates Touchline and is the data controller for the personal data described here. Contact: coach@mindsightsport.com.

What we collect and why

• Account data (email address, password hash, display name) — to create and secure your account. Legal basis: performance of our contract with you.
• Content you create (matches, YouTube links, clips, annotations, player records, notes) — to provide the analysis workspace. Legal basis: contract.
• Plan and entitlement records (plan type, status, renewal dates, payment provider identifiers) — to give you the access you paid for. Legal basis: contract.
• Technical and usage data (IP address, device and browser information, error logs) — to keep the service secure and working. Legal basis: our legitimate interest in security and service improvement.
• Support messages — to answer your questions. Legal basis: legitimate interest.

We do not collect or store your card details. Payment data is collected directly by Paddle.

Who we share it with

• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Service providers that host our application and database, and provide authentication and error monitoring, acting on our instructions.
• YouTube/Google, when your browser loads embedded footage; their own privacy terms apply to that playback.
• Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect your data.

How long we keep it

We keep your account and content for as long as your account is open. If you delete your account, your content is deleted immediately and backups age out within 30 days. Records we must keep for tax and accounting reasons are retained for as long as the law requires.

Your rights

You have the right to access, correct, erase, restrict or object to our processing of your personal data, to portability, and to withdraw consent where we rely on it. You can delete your account and all its data yourself from Settings. Email us to exercise any other right and we'll respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office or your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user database rules that stop one account reading another's data.

Cookies

We use essential cookies and browser storage to keep you signed in and to remember your preferences. We do not use advertising cookies. Embedded YouTube players may set their own cookies; you can control these through your browser settings.