Privacy Policy
What data we collect
When an academy uses Fairpl.ai, we handle three types of data:
Player session data. Video footage of training sessions, plus the analytics our AI derives from it: events (passes, shots, tackles), positional data, pose movement data, and category scores. We also record player name, jersey number, and age group as provided by the academy.
Coach and staff account data. Name, email, role at the academy, login credentials (passwords are hashed, never stored in plain text), and activity logs.
Family portal account data. Name, email, relationship to the player, login credentials, and activity logs.
We do not use facial recognition. Our pose tracking is anonymised movement data. We do not collect medical or sensitive personal information unless the academy explicitly opts in.
Where the data lives
Raw video stays at your facility. Cameras at the academy connect to a secure on-premises edge unit. Raw video is processed there. It does not leave the building.
Encrypted analytics travel to our cloud. Only statistical outputs (scores, events, positions) are transmitted to our cloud, encrypted in transit (TLS 1.3) and at rest (AES-256). Cloud data is hosted in the United Arab Emirates.
We use a small number of trusted third-party services for hosting, authentication, email, and website analytics. A current list is available at fairpl.ai/sub-processors.
Who can see the data
We do not sell your data. We do not share academy or player data with other clubs, scouts, or commercial parties unless you instruct us to.
Inside Fairpl.ai, access to cloud-stored analytics is restricted to engineering and operations staff who need it for support, with multi-factor authentication and full audit logging. No one at Fairpl.ai accesses raw video.
Inside the academy, your administrator controls who sees what. Each parent sees only their own player's data.
We will only share data without your instruction in two cases: a valid legal request from a UAE authority, or a genuine emergency to prevent serious harm to a player. We will notify you of legal requests unless the law prohibits us.
How long we keep it
Raw video: 14 days on the edge unit, then deleted automatically.
Player analytics: for the duration of your contract, plus 12 months.
Family portal clips: while the player is enrolled, plus 12 months archived.
Account data: until deleted or 36 months of inactivity.
Activity logs: 24 months for security and audit.
You can request earlier deletion at any time.
Your rights
Academies have the right to access, correct, export, or delete data we hold for them, and to withdraw at any time. On withdrawal, we export your data to you and delete it from our systems within 30 days.
Parents and adult players have the right to access, correct, or delete their data, restrict what gets shared, and withdraw family portal consent.
For player data on minors, we rely on the academy's parental consent secured at enrolment. We never share player data outside the academy's controlled environment without explicit consent.
To exercise any right, email nahel@fairpl.ai with the subject line "Privacy Request." We respond within 14 days.
Security
All data in transit is encrypted with TLS 1.3. All cloud data is encrypted at rest with AES-256. All staff access requires multi-factor authentication and is logged. Staff with potential access to academy data are subject to background checks. If we discover a breach affecting your data, we will notify you within 72 hours.
