SAJA Player Pathway

This Privacy Policy explains how the SAJA Player Pathway mobile application ("the Platform") collects, uses, and protects information entered by coaches, club administrators, parents, and players across clubs registered on the Platform ("we", "us", "the Platform").

The Platform is intended for use exclusively by members of registered football clubs. Access requires a login credential issued by a club administrator. Each club is an independent Data Controller responsible for the personal data entered by its members.

1. Information We Collect

The App stores information that coaches and administrators enter directly. This includes:

• Player profiles: First name, last name, date of birth, position, age group, and team assignment.
• Guardian contact details: Name of a player's parent or guardian, entered voluntarily by the coach.
• Attendance records: Whether a player attended, confirmed, or declined each training session or match.
• Development goals: Short and long-term skill targets set by coaches for individual players.
• Training and match history: Session dates, venues, training plans delivered, and match results.
• Coach accounts: Name, email address, and role (coach / lead coach / admin) used to log in to the App.

The App does not collect any information automatically or passively. We do not use analytics services, advertising SDKs, or crash-reporting tools that transmit data to third parties.

2. How We Use This Information

All data entered into the Platform is used solely for the internal management of the club whose join code you used to register, specifically to:

• Plan and record training sessions and matches.
• Track player attendance and development over the season.
• Build match lineups and manage squad availability.
• Generate AI-assisted development goal suggestions for individual players (processed via a secure API — see Section 4).
• Provide coaches with performance insights and season summaries.

We do not sell, rent, share, or disclose any data to third parties for marketing, advertising, or commercial purposes.

3. Data Storage

All data is stored in a private, password-protected database hosted on Replit's infrastructure (replit.com). The database is accessible only through the App's backend server, which requires authentication for all data operations.

Data is not stored on the device beyond what is required to keep the user logged in (an authentication token stored in the device's secure local storage).

4. AI Features

The App uses AI language model technology for two specific purposes, described below. In both cases, data is transmitted over HTTPS to a secure API proxy operated by Replit (our hosting provider), which forwards requests to Anthropic's Claude model. No data is stored by Anthropic beyond the duration of a single API request.

4a. AI Home Summary Briefing

Each time a logged-in user opens the home screen of the App, a short personalised briefing is automatically generated using AI. The content of this briefing depends on the user's role:

• Coaches and administrators: Upcoming session and match schedule, last training attendance rate, whether training sessions have plans assigned, and first names of any players whose development goals are missing or have not been updated in over 30 days.
• Parents / guardians: Upcoming schedule for their child's team, whether their child's development goals have been updated in the past 7 days (by first name only), and upcoming membership payment information.
• Players: Their own upcoming schedule, and a summary of their own current goal progress (progress percentages and status labels only — no goal text is transmitted).

The generated summary is cached on the user's device (via secure local storage) for the remainder of the calendar day to minimise repeated API calls. Users may tap the refresh icon on the summary card to generate a fresh briefing at any time. The cache is cleared automatically at midnight each day.

4b. AI Development Goal Recommendations

Coaches may optionally generate personalised development goal recommendations for individual players. When this feature is used, a summary of the player's skill assessments, attendance rate, and current goals is sent to the AI API to generate suggestions. No player names or personal identifiers are included in this request.

This feature is triggered only when a coach explicitly taps "Generate Recommendations" on a player profile. It is never run automatically.

5. Children's Data

The App is used by coaches to manage youth player squads. Player profiles may include the first and last names and dates of birth of children under the age of 13. This data is:

• Entered only by authorised club coaches or administrators.
• Fully accessible to coaches and club administrators for team management purposes.
• Accessible to a player's own parent or guardian through the App, limited to that child's own profile, attendance, and development goals.
• Not accessible to other guardians — sensitive fields such as date of birth and coaching notes are visible only to coaches and administrators, not to other families in the club.
• Not used for any purpose other than internal team management.

Each registered club on the Platform commits to complying with applicable data protection legislation (GDPR / Irish Data Protection Act 2018 or equivalent) regarding the processing of children's personal data. For safeguarding policies, please contact your club administrator.

6. Data Retention

Data is retained for the duration of the active season and for a reasonable period thereafter to allow season-on-season comparison and development tracking. Coaches or club administrators may request deletion of specific player records at any time by contacting the club.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), individuals have the right to:

• Access the personal data held about them.
• Request correction of inaccurate data.
• Request deletion of their data ("right to be forgotten").
• Object to or restrict processing of their data.
• Lodge a complaint with the Data Protection Commission (Ireland): www.dataprotection.ie

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

8. Security

Access to the App requires a username and password. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. We take reasonable technical and organisational steps to protect the data we hold against unauthorised access, loss, or disclosure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the App after a change is posted constitutes acceptance of the revised policy.