Privacy Policy

1. Controller

The controller responsible for the processing of personal data in connection with iCoachPro is:

2. Scope

This Privacy Policy applies to the public website icoachpro.app, the iCoachPro web app and the iCoachPro mobile apps for iOS and Android.

Depending on how the service is used, account and profile data, team and membership data, appointments, training and match data, messages, media, technical usage data and content voluntarily entered by users may be processed.

3. Website access and hosting

The website and parts of the web infrastructure are provided through Cloudflare.

When the website is accessed, technically necessary data such as the IP address, time of access, requested resource, browser and device information, as well as security and connection data may be processed.

Processing is carried out to provide the website securely and reliably and to prevent misuse on the basis of Art. 6(1)(f) GDPR.

We currently do not use our own advertising or analytics cookies on the public website and do not use Google Analytics.

4. Registration, user accounts and app use

We use Supabase to provide user accounts and core app functions.

The following data in particular may be processed:

• email address,
• user and profile information,
• account and role information,
• team memberships,
• training, match and appointment data,
• attendance and organizational data,
• content entered by the user,
• technical identifiers and security data.

Processing generally takes place for the performance of the user relationship pursuant to Art. 6(1)(b) GDPR and, where necessary, on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR.

5. Teams, communication and media

iCoachPro enables collaboration within teams and clubs. Depending on their role, users may provide messages, images, videos, documents, evaluations, lineups and other content.

This content is processed in order to provide the functions requested by the user.

Users may only provide personal data or media relating to other persons if they are authorized to do so. This applies in particular to data and images relating to minors.

6. Push notifications

We use Google's Firebase Cloud Messaging for push notifications.

Device or installation identifiers, push tokens and technical information may in particular be processed. Push notifications can be disabled in the system settings of the relevant device.

Processing takes place in order to provide the notification function requested by the user.

7. Audio and video calls

iCoachPro uses LiveKit for audio and video calls.

When this functionality is used, audio or video data as well as technically necessary connection and session data are processed and transmitted in real time. The camera and microphone are only used when the user has granted the relevant permission and uses the corresponding function.

8. AI features

Certain iCoachPro functions use the OpenAI API, for example to assist with the creation of training ideas or training plans.

The inputs required for the specific request are transmitted to and processed by OpenAI. Users should not include unnecessary personal data or particularly sensitive data in AI inputs.

Under the terms applicable to the OpenAI API, API inputs and outputs are not used to train OpenAI models by default unless explicit permission has been granted.

AI-generated content may contain errors and must be professionally reviewed by the user.

9. Payments and subscriptions

Depending on the platform, paid subscriptions may be processed through the Apple App Store, Google Play or other expressly offered payment methods.

Payment processing itself is carried out by the respective payment provider. iCoachPro generally does not receive complete payment or credit card details, but only the transaction and status information required to manage the subscription.

The privacy terms of the relevant payment provider also apply to processing carried out by that provider.

10. Support and contact

If you contact us by email, we process the contact details provided and the content of the request solely for the purpose of handling the matter and, where applicable, performing the contractual relationship.

11. Technically necessary browser storage

The web app may use technically necessary browser storage mechanisms, in particular to provide login sessions, security settings or settings requested by the user.

Where such storage is strictly necessary in order to provide a digital service expressly requested by the user, no additional consent is required under Section 25(2) TDDDG.

12. Legal bases

Depending on the processing activity, we rely in particular on:

• Art. 6(1)(b) GDPR for contract performance and provision of the app,
• Art. 6(1)(f) GDPR for security, prevention of misuse and technically necessary operation,
• Art. 6(1)(a) GDPR where consent is required and has been given,
• Art. 6(1)(c) GDPR for compliance with legal obligations.

13. Recipients and international data transfers

Cloudflare, Supabase, Google/Firebase, LiveKit, OpenAI as well as platform and payment providers may in particular be used for the technical provision of the service.

Where data is processed outside the European Economic Area, this is done only in accordance with the legal requirements applicable to international data transfers and, where necessary, using appropriate safeguards.

14. Retention periods

Personal data is stored only for as long as necessary for the relevant purpose or as required by statutory retention obligations.

Account-related data is generally processed for the duration of the user account. Following deletion of an account, data is deleted or anonymized unless statutory retention obligations or legitimate grounds for continued storage apply.

15. Minors

iCoachPro is also used in youth and academy sports.

Particular care must be taken to ensure lawful processing and the required consents or authority to represent minors when personal data relating to minors is involved. Parents or legal guardians, coaches and clubs are required to use minors' data only within the scope of their respective authorization.

16. Rights of data subjects

Subject to the statutory requirements, data subjects have in particular the right to:

• access,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• object to certain processing activities,
• withdraw consent with effect for the future.

Requests may be sent to info@icoachpro.app.

Data subjects also have the right to lodge a complaint with a competent data protection supervisory authority.

17. Security

We use appropriate technical and organizational measures to protect personal data against loss, unauthorized access and other unlawful processing.

18. Changes

This Privacy Policy may be updated if functions, services used or legal requirements change. The current version is available at https://icoachpro.app/en/privacy.