Booted privacy notice

Version 1.0 (M11 draft for legal review). Effective date: on first store release. This is the parent- and coach-facing notice; the child-language “About my info” screen in kid mode summarises it for children.

Who we are

Booted is made by Booted Sports Ltd in the United Kingdom. Contact: privacy@bootedsports.com.

Your club decides to use Booted to run its teams. For the records the club keeps about its players (your child), the club is the data controller and we process that data on its behalf. For your own account (sign-in, notification settings, subscriptions) we are the controller.

What we hold

About children (players)

Only what a coach needs to run a team fairly:

• first name, an optional last name (seen by coaches only), a display name (first name and initial), age group, an avatar pattern and, if a parent opts in, a generated 256×256 voxel-art avatar (not a photograph);
• playing positions, a coach’s ability rating and preferences (for example “loves playing in goal”);
• availability answers for training and matches;
• match records: who started, minutes played, goals, assists, results;
• development goals, ratings and notes written by the coach, some of which the coach may mark as visible to parents;
• badges earned, and — only if you opt in — a personal-best score from a mini-game in kid mode.

If a parent chooses to add them, we also hold:

• the child’s date of birth;
• medical notes the parent writes for the coaches (for example allergies, conditions, medication and what to do). These are health information. We save them only after you switch on “Share with the coaches”, and you can change or remove them at any time.

The club never enters these; only a parent linked to the child can. We do not hold a child’s address, phone number or photograph, and we do not create accounts for children.

About you (parent, guardian, coach)

• email address and display name;
• an optional profile photo you choose from your gallery (not a child’s picture). If you add one, people in the same club as you can see it next to your name, the same as your display name. It is not shown in kid mode or to people who do not share a club with you;
• sign-in details (password hash, or your Apple/Google sign-in identity);
• which children you are linked to and which clubs you belong to;
• notification settings and the push token of your phone, if you turn notifications on;
• if you are a parent and choose to add them, a phone number for your child’s coaches (the name to ask for and the number), and optionally one other adult’s name and number. Only add someone who has agreed to it. You can change or remove them at any time;
• your availability answers and read receipts on team announcements;
• for a club’s billing owner, the club’s subscription status (payment card details are held by Apple, Google or Stripe, never by us).

Technical

• error reports from the app (with personal details removed) so we can fix crashes;
• anonymous product usage events, only if you consent and never in kid mode;
• an audit trail of important actions (who invited whom, who changed a role, who exported data), kept for 12 months.

Why, and on what legal basis

Who sees what

• Coaches (head coach or coach) and club admins see that team’s players, including last names, guardian labels and masked email hints, coach-only notes, unpublished match reports, development ratings, and a child’s generated avatar, and any date of birth and medical notes a parent added. They also see any phone numbers a linked parent added. They never see a guardian’s full email address in the app.
• Assistants help run the team day to day. They see the squad by display name (first name and initial), fixtures, plans, attendance, published announcements, and the notes and match reports a coach has marked for parents and published. They do not see last names, guardian contacts, parents’ phone numbers, a child’s date of birth or medical notes, join codes, development ratings, coach-only notes, unpublished or coach-only match reports, fixture-feed links, or generated avatar pictures.
• Club admins see the club’s teams and members, and the coach view of each of the club’s teams.
• Parents and guardians see their own child’s first name, fixtures, minutes, badges, goals, and the notes and ratings the coach marked parent-visible. Never another child’s records, never a ranking.
• Children in kid mode see only their own rows, the team name and colours, and the badge catalogue. No contact details, no messages, no other children beyond first name and initial in a line-up.

Who we share with

We use these providers to run the service; each is bound by a data processing agreement:

We do not sell data or show advertising. Kid mode does not rank children against each other. A coach records an ability level for each child, and separate development ratings. The squad suggestion uses that ability level, who can play, and how much each child has already played. It does not use the development ratings. The coach can change the suggestion before the match.

Where and how it is kept

Data lives in the UK (London) and the EU. On your phone the app keeps an encrypted copy so it works without signal; that copy is deleted when you sign out. Guardian email addresses are encrypted in the database with a separately held key.

How long

Your rights

You can, at any time:

• See and download everything we hold about you and your children: Settings → Download my data. You get a JSON file and a readable PDF.
• Correct your details in Settings; ask the coach to correct your child’s.
• Delete your account: Settings → Delete account. Your child’s club record stays with the club unless you also ask for it to be erased.
• Ask for your child’s record to be erased: Settings → your child → Request erasure. The club actions it; we step in if they do not within 10 working days.
• Object or restrict: email us and we will pause processing of the record while we look at it.
• Withdraw consent for notifications, analytics or game-score uploads in Settings.
• Complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would rather hear from you first.

We answer within one month.

Children

Booted is designed for children to use only in kid mode, on a parent’s phone, without an account. We follow the ICO’s Age Appropriate Design Code: no tracking, no adverts, no nudges to keep playing, a daily game-time limit you set, positive language, and an “About my info” screen a child can read.

Changes

We will tell you in the app and by email before any change that affects what we collect or who we share with. Previous versions are kept in our repository (docs/legal/).