Privacy Policy

Digital Empower is the data controller for personal data processed through Pitch, registered in the Netherlands. If you have questions about this policy or your data, contact us at privacy@getpitch.pro.

• Account data — Name, email address, and authentication credentials when you sign up (managed via Clerk).
• Club & team data — Club name, team details, and organisational structure you create in Pitch.
• Player data — Player names, date of birth, position, registration details, development scores, and match statistics entered by coaching staff.
• Usage data — Pages visited, features used, and session duration — collected via analytics cookies only with your explicit consent.
• Device & technical data — IP address, browser type, and device identifiers collected automatically for security and performance purposes.
• Photos and videos (mobile app) — When you upload a club logo, player photo, or match video, the file is selected from your device's photo library or captured with your device's camera and microphone. We do not access your photo library, camera, or microphone until you explicitly initiate an upload or recording.
• Camera and microphone access (mobile app) — Used only when you choose to record a match video in the app. We do not record in the background, and we discard the camera/microphone session as soon as you stop recording.
• Push notification tokens (mobile app) — A device-specific identifier we use to deliver match and training reminders. Tokens are delivered via Expo Push, which routes through Google Firebase Cloud Messaging (FCM) on Android. You can disable notifications at any time in your device settings.

We process personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — To provide and operate the Pitch Service you have signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR) — To improve reliability, prevent fraud, and ensure platform security. We always balance this against your interests and rights.
• Consent (Art. 6(1)(a) GDPR) — For optional analytics and marketing cookies. You can withdraw consent at any time via the cookie preference centre in the footer.
• Legal obligation (Art. 6(1)(c) GDPR) — To comply with applicable law, including tax and accounting obligations.

Pitch may store data about players who are minors. This data is entered exclusively by authorised coaching staff on behalf of their club or team. We do not knowingly collect personal data directly from children under the age of 16. Clubs and coaches are solely responsible for obtaining any necessary parental or guardian consent under their applicable national law before entering minors' data into Pitch. We process such data solely on the basis of instructions from the relevant club or coach.

We share personal data only with:

• Sub-processors — Neon (database hosting, USA), Clerk (authentication, USA), Vercel (hosting and file storage via Vercel Blob, USA), Mux (video, USA), Anthropic (AI processing, USA), Resend (transactional email — staff invitations, support replies, billing notifications, USA / EU), and Expo / Google Firebase Cloud Messaging (push notification delivery, USA) — each under strict data processing agreements including Standard Contractual Clauses where required.
• Analytics providers — Only if you have explicitly consented to analytics cookies.
• Legal authorities — Where required by binding legal obligation, court order, or to protect our legitimate rights.

We do not sell personal data to any third party. We do not share data for marketing purposes without explicit consent.

Pitch uses artificial intelligence to generate match insights, training programmes, drill suggestions, and player analysis. When you use AI features, relevant match data, player ratings, and team context are sent to our AI provider (Anthropic, USA) for processing. This data is used solely to generate the requested output and is not retained by the AI provider for model training. AI-generated content may be inaccurate, incomplete, or unsuitable for your specific situation. You should always review and verify AI output before applying it to your coaching. We do not guarantee the accuracy of any AI-generated recommendations. For details on liability, see Section 5 of our Terms of Service.

We retain your account data for as long as your account is active. Club and player data is retained for the duration of the active subscription plus 90 days, after which it is permanently deleted. If you request account deletion, we will delete your data within 30 days, except where retention is required by law (e.g. financial records for 7 years under Dutch tax law).

Your data may be processed in the United States by Neon, Clerk, Vercel (including Vercel Blob), Mux, Anthropic, Resend, and Expo / Google Firebase Cloud Messaging. For all transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR. A copy of the applicable SCCs is available on request at privacy@getpitch.pro.

Under GDPR you have the following rights:

• Access (Art. 15) — Request a copy of the personal data we hold about you.
• Rectification (Art. 16) — Correct inaccurate or incomplete personal data.
• Erasure (Art. 17) — Request deletion of your personal data ('right to be forgotten'), subject to legal retention requirements.
• Restriction (Art. 18) — Request that we limit processing of your data in certain circumstances.
• Portability (Art. 20) — Receive your data in a structured, commonly used, machine-readable format.
• Objection (Art. 21) — Object to processing based on legitimate interests.
• Withdraw consent (Art. 7(3)) — Withdraw consent for cookie-based processing at any time, without affecting prior lawful processing.

To exercise any of these rights, email privacy@getpitch.pro. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl) or the supervisory authority in your country of residence.

We use cookies as described in our Cookie Policy. You can manage your preferences at any time using the cookie preference centre (link in the footer on every page).

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit (TLS), access controls, and regular security reviews. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by Art. 33–34 GDPR.

We may update this policy from time to time. For minor changes, we will update the 'last updated' date. For material changes that affect your rights, we will notify you by email or in-app notice at least 14 days before the changes take effect and, where required by law, seek your renewed consent.

Digital Empower
Email: privacy@getpitch.pro