Privacy Policy

1. Who we are and how to contact us

This Privacy Policy explains how Coach AI ("Coach", "we", "us", "our") — an unincorporated business based in the United Kingdom — collects, uses, shares and protects personal information when you visit our website or use the Coach platform and its tools (the "Service"). For the purposes of UK and EU data-protection law, Coach is the controller of the personal information described in this policy.

Coach is a sports statistics, analytics and modelling tool. It is not a bookmaker, does not accept or place bets, and does not hold gambling funds.

You can contact us about privacy — including to exercise your rights — at officialcoachai@outlook.com.

2. The information we collect

(a) Information you give us

• Account & profile data — name, email address, password (stored only in hashed form by our authentication provider), and account settings such as region, currency, preferred odds format and the sports you follow.
• Content you create in the tools — the custom parlays and selections you build; the inputs you give to calculators, simulations and the optimiser (such as stakes, bankroll figures, target returns and parameters); bets, results and notes you record (for example in the P&L Ledger); and messages, prompts or queries you submit to AI-powered features.
• Voice input — if you use voice features (e.g. dictating a note), the audio you record, which is sent for transcription (see section 5).
• Support & communications — the contents of, and metadata about, messages you send us by email or through support channels, and any surveys or feedback you provide.

(b) Information we collect automatically

• Usage data — the pages, screens, features and tools you use, the actions you take, search and filter terms, timestamps, and diagnostic and crash/error information.
• Device & connection data — IP address, approximate location derived from it, device type, operating system, browser type and version, language settings, and similar technical identifiers.
• Cookies and similar technologies — see section 7.

(c) Information from third parties

• Payment & subscription data from Stripe — when you subscribe, our payment processor Stripe collects and processes your card details directly. We do not receive or store full card numbers; we receive limited data such as your subscription status, plan, billing country, the last four digits and brand of your card, and payment success/failure information.
• Single sign-on — if you choose to sign in with a third-party identity provider, we receive basic profile information from it (such as your name, email and a user identifier).
• Referrals — if you arrive via a referral or partner code, we record that association.

We do not intentionally collect "special category" data (such as data revealing health, race, religion or political opinions), and you should not submit such data to the Service. We do not collect personal information from anyone we know to be under 18 (see section 10).

3. How and why we use your information (and our legal bases)

We use personal information for the purposes below. Where UK/EU GDPR applies, the legal basis is shown in brackets — "contract" (necessary to provide the Service you have asked for), "legitimate interests" (our or a third party's legitimate interests, where not overridden by your rights), "consent" (where we ask for it), and "legal obligation".

• create, authenticate and manage your account, and provide the Service, its tools and your saved content [contract];
• process subscriptions, payments, renewals, refunds and chargebacks, and send service and transactional messages [contract; legal obligation];
• operate, maintain, secure, troubleshoot, test and improve the Service, our models and our infrastructure, and develop new features [legitimate interests — running and improving our business; contract];
• personalise your experience (e.g. remember your region, currency and odds format) [contract; legitimate interests];
• provide customer support and respond to your enquiries, feedback and complaints [contract; legitimate interests];
• detect, investigate, prevent and address security incidents, fraud, abuse, prohibited use (including the conduct described in our Terms & Conditions) and technical issues, and enforce our terms [legitimate interests — protecting our service, users and others; legal obligation];
• verify age, identity and eligibility where we consider it necessary [legitimate interests; legal obligation];
• comply with applicable laws, regulators, courts and lawful requests, and establish, exercise or defend legal claims [legal obligation; legitimate interests];
• send you product updates or marketing about Coach where you have not opted out (and, where required, only with your consent) — you can opt out at any time via the unsubscribe link or by contacting us [legitimate interests; consent];
• produce aggregated or de-identified statistics and insights that do not identify you, which we may use for any business purpose, including improving our models and the Service [legitimate interests].

If we rely on legitimate interests, you can ask us for more information about the relevant balancing assessment.

4. About the data you put into the tools, and "betting patterns"

The parlays, calculations, bet records and similar content you create are stored against your account so that the Service works and so you can see your own history, ledger and results. We use this content to provide those features to you, to support you, and to keep the Service secure.

We may also analyse usage of the tools in aggregated and de-identified form — for example, which features are used, how models perform, and general patterns across all users — to maintain and improve the Service and our models. When we do this we take steps so the data does not identify you and is not linked back to you. We do not sell your individual betting or activity data, and we do not use it to make decisions that produce legal or similarly significant effects on you (see section 11).

5. AI features and third-party AI processors

Some features of the Service use artificial intelligence and machine learning — for example transcribing voice notes, aggregating or summarising data, and AI-assisted analysis. To provide these features, the content you submit for that purpose (for example your text prompt, query or audio recording, and sometimes related context) may be transmitted to and processed by third-party AI service providers acting as our processors on our instructions — currently this includes Google (Google AI / Gemini) and may include other reputable providers we use from time to time.

We seek to use these services on terms under which the provider does not use the content submitted through their API to train their general-purpose models and only processes it to return a result to us. However, we cannot guarantee how every third party operates, and we do not control their systems. Please do not submit to AI features any information you would not want sent to and processed by such a provider, and in particular do not submit other people's personal information or any sensitive information. Your use of AI features is also subject to our Terms & Conditions, including the disclaimers about AI accuracy and "hallucinations".

6. Who we share information with

We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising. We disclose personal information only as follows:

• Service providers / processors — companies that process personal information on our behalf and on our instructions to help us run the Service, such as: cloud hosting, database and authentication (for example Supabase); payment processing (Stripe); AI and transcription providers (for example Google / Gemini — see section 5); email and communications delivery; and analytics, logging and error-monitoring tools. They are bound by contract to protect the data and use it only for the services they provide to us.
• Professional advisers — lawyers, accountants, auditors and insurers, where reasonably necessary.
• Authorities and others, for legal and safety reasons — courts, regulators (including gambling, data-protection and financial-crime authorities), law-enforcement, sports-integrity bodies, and other parties, where we believe disclosure is required by law or legal process, or is reasonably necessary to comply with a legal obligation, enforce our terms, protect against fraud, money laundering, match-fixing or other harm, or protect the rights, property or safety of Coach, our users or others.
• Corporate transactions — actual or prospective buyers, investors or successors (and their advisers) in connection with a financing, merger, acquisition, reorganisation or sale of assets, subject to appropriate confidentiality protections; any successor will be bound by this policy or one materially similar.
• With your direction or consent — for example if you ask us to integrate with another service.

We do not control, and are not responsible for, how third parties such as bookmakers or other websites you visit (including via links from the Service) handle your information — their privacy practices are governed by their own policies, which you should review.

7. Cookies and similar technologies

We use a limited set of cookies and similar browser-storage technologies (such as local storage). These are mainly strictly necessary — for example to keep you signed in, maintain your session and security, and remember settings such as your region, currency and preferred odds format — and we may also use a small amount of analytics/diagnostic storage to understand and improve how the Service is used. We do not use third-party advertising or cross-site tracking cookies. Where the law requires consent for non-essential cookies, we will ask for it (and you can change your choice). You can also block or delete cookies in your browser settings, but parts of the Service may not work properly if you do.

8. Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• to be informed about how we use it (this policy);
• to access a copy of the information we hold about you;
• to have inaccurate information corrected, and incomplete information completed;
• to have information deleted ("right to erasure" / "right to delete") in certain circumstances;
• to restrict or object to certain processing, including processing based on our legitimate interests, and to object to direct marketing at any time;
• to data portability — to receive certain information in a portable format;
• to withdraw consent at any time where we rely on consent (this does not affect processing already carried out);
• not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects (see section 11);
• (for California and certain other US residents) to know what personal information we collect and how we use and disclose it, to access and delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information — although, as noted, we do not sell or share your personal information — together with the right not to be discriminated against for exercising these rights. You may use an authorised agent to make a request.

To exercise any of these rights, or to close your account, email officialcoachai@outlook.com. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law (generally one month under UK/EU GDPR, with the possibility of an extension for complex requests). There is usually no charge, though we may charge a reasonable fee or decline a request that is manifestly unfounded or excessive. You also have the right to complain to a data-protection authority — in the UK, the Information Commissioner's Office (ico.org.uk) — though we would appreciate the chance to address your concerns first.

9. Keeping your information, and where it is processed

Retention

We keep personal information for as long as we need it for the purposes set out in this policy — in general, for as long as you have an account and for a reasonable period afterwards. For example, we typically keep account and content data while your account is active and for a limited period after closure to allow for re-activation, dispute resolution and back-ups; we keep transaction and billing records for as long as required by tax and accounting law (commonly six years in the UK); and we keep security, fraud and legal-compliance records for as long as needed for those purposes. When we no longer need personal information we delete it or irreversibly anonymise it.

International transfers

We are based in the UK, and our service providers may be located in, or process data in, other countries (including the United States and elsewhere). Where we transfer personal information outside the UK or the EEA to a country that is not covered by an "adequacy" decision, we put in place an appropriate safeguard recognised under data-protection law — such as the UK International Data Transfer Agreement / Addendum or the European Commission's Standard Contractual Clauses — together with additional measures where needed. You can ask us for more information about these safeguards.

10. Children

The Service is intended only for adults who are at least 18 years old (or older where the local legal age for gambling-related activities is higher). It is not directed at children, and we do not knowingly collect personal information from anyone under that age. If you are a parent or guardian and believe a minor has provided us with personal information, please contact us and we will delete it and close any associated account.

11. Automated decision-making and profiling

The Service generates statistics, probabilities and model outputs based on data — including, in some features, data you have entered. These are tools for you to use; they are not decisions we make about you. We do not use your personal information to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We may use limited automated checks for security, fraud-prevention and eligibility purposes; if any such check materially affects you, you can ask us to review it.

12. Security and data breaches

We use technical and organisational measures designed to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage — including encryption in transit, access controls, use of reputable infrastructure providers, and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password confidential and tell us immediately at officialcoachai@outlook.com if you think your account has been compromised. If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and/or the relevant supervisory authority where the law requires.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. We encourage you to review it periodically. Your continued use of the Service after an update takes effect means you accept the revised policy.

14. Contact us

Questions, requests or complaints about this policy or your personal information can be sent to officialcoachai@outlook.com.