Privacy Policy

Zen Footy

Last updated: 21 July 2026

This Privacy Policy explains how Zen Footy collects, uses, and protects personal data when you use our coaching platform. We are committed to handling your data — and the data you enter about your players — responsibly and in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

Zen Footy is operated by Zengus Ventures Ltd, a company registered in Scotland (company number SC824924), registered office 28 Barbieston Road, Dalrymple, Ayr, KA6 6DZ.

We are the “data controller” for coaches' account and service data. For the data a coach enters about their players and contacts, the coach is the controller and Zen Footy acts as a processor on their behalf — this distinction is explained in section 4. We are registered with the Information Commissioner's Office (ICO), registration number C1981116.

If you have any questions about this policy or your data, or you want to make a request about your data, contact us at support@zenfootyapp.com.

2. Who this policy is for

Zen Footy is a tool for football coaches. The people whose data we handle fall into a few groups:

Coaches — the people who create an account and use Zen Footy.
Players and squad members — people a coach adds to their squad. Zen Footy is used for both youth and adult grassroots football, so a coach's squad may include children. Players do not use the app themselves; their information is entered by their coach.
Parents, guardians and other contacts — people a coach adds as contacts for a player, for example to send match availability requests.
Waitlist sign-ups — people who register interest before creating an account.

Because coaches enter information about their players — who may be children — we take particular care over that data. See section 8 (“Children's data”).

3. The personal data we collect

From coaches (account holders)

Account details: your email address and password (your password is stored securely by our authentication provider and is never visible to us in readable form).
Subscription and payment information: your subscription tier and payment status. Card payments are handled entirely by Stripe — we never see or store your card details (see section 6).
Content you create: session plans, match records, notes, bug reports, and other content you enter into the app.
Technical information: when you use the app, our hosting provider processes standard technical data such as your IP address as part of delivering and securing the service.

About players and squad members (entered by coaches)

Player details: name, playing position, and squad number. We do not collect players' dates of birth or any other identifying details.
Attendance and line-up records: which players attended sessions or matches, and their positions.

About parents, guardians and contacts (entered by coaches)

Contact details: name, relationship to the player (player, parent, or guardian), phone number, email address, and any notes the coach adds.
Availability responses: replies to match availability (RSVP) requests, which may include a free-text comment.

From waitlist sign-ups

Name and email address.

4. How we use your data, and our legal basis

Under UK GDPR we must have a lawful basis for using personal data. Here is what we do and why:

To provide the service (creating your account, saving your sessions and squads, running features you use) — legal basis: performance of a contract with you.
To process payments and manage subscriptions — legal basis: performance of a contract.
To send service emails (sign-up confirmation, magic-link sign-in, password resets) — legal basis: performance of a contract.
To respond to support requests and fix bugs you report — legal basis: legitimate interests (running and improving the service).
To protect the service from abuse (for example, transient IP-based rate limiting on our waitlist form to prevent spam) — legal basis: legitimate interests (security). IP addresses used for this are held only briefly in memory and are not stored.
To contact waitlist sign-ups about launch — legal basis: consent (given when you join the waitlist; you can withdraw at any time).

Data coaches enter about players and contacts

For the data a coach enters about their players, parents and contacts, the coach is the data controller — they decide what to record and why, and they are responsible for having a proper lawful basis for doing so (for example, the consent of a parent or guardian where the player is a child).

For that squad and contact data, Zen Footy acts as a data processoron the coach's behalf: we process it only to provide the coaching features the coach uses, and in line with the terms the coach agrees to when they use the service. We do not use players' or contacts' data for our own purposes.

(For a coach's own account data — such as their email, subscription and the content they create — Zen Footy is the data controller, as set out elsewhere in this policy.)

5. Artificial intelligence (AI) features

Some Zen Footy features use AI to help coaches — for example, generating session plans, adapting drills, creating session diagrams, and answering questions in the in-app assistant. These features are powered by Anthropic (see section 6).

We do not send players' personal data to our AI provider.When you use an AI feature, only non-identifying information is sent — such as age group, the number of players, session theme, duration, and the drill or session text itself. Zen Footy never automatically sends a player's name or contact details to the AI.

There are two situations where information could reach the AI only because you choose to include it:

If you type player details into a message in the in-app assistant or a support chat, that text is sent to the AI as part of your message.
If you upload a document (for example, to import a session plan) that happens to contain player details, that document is sent to the AI to process.

To keep players' data private, we recommend not including players' names or personal details in chat messages or uploaded documents unless you need to.

We do not sell your personal data. We share it only with the service providers (“sub-processors”) we rely on to run Zen Footy. Each processes data only as needed to provide their service to us, under their own data protection obligations.

Provider	What it does	Personal data it handles
Supabase	Database, hosting, and authentication emails	All app data (accounts, squads, contacts, content) and account emails
Vercel	Application hosting	Technical data such as IP addresses, as our infrastructure host
Stripe	Payment processing	Your email and a user reference; your card details are entered directly into Stripe and never reach us
Anthropic	AI features	Only the non-identifying inputs described in section 5 (plus anything you choose to type or upload)
Slack	Our internal tool for handling support requests, bug reports, and waitlist notifications	Your email address, and the content of issue reports, support-chat escalations, or waitlist sign-ups

Some of these providers may process data outside the UK. Where they do, appropriate safeguards (such as UK-approved data transfer mechanisms) are in place.

We may also disclose personal data if required by law, or to protect our rights, safety, or property, or those of others.

7. How long we keep your data

We keep personal data only as long as we need it:

Active accounts: we keep your account data for as long as your account is active.
After account closure: when you delete your account, we delete your personal data — including the squad, contact, attendance, and RSVP data you entered — within 30 days, other than records we are legally required to keep.
Financial records: we are required by UK tax law to keep certain transaction records for 6 years. These are kept only for that legal purpose and then deleted.
Waitlist sign-ups: kept until launch or until you ask to be removed, whichever is sooner.

8. Children's data

Zen Footy is used by coaches of both youth and adult teams. Where a coach adds children to their squad, we may process children's personal data — specifically a child's name, playing position and squad number, their attendance and line-up records, and the contact details of their parent or guardian.

We take particular care with this:

We minimise what is collected. We do not collect children's dates of birth or any special category data. Player records hold only a name and basic football details.
Children do not use the app. All player information is entered by the coach; children have no accounts and do not interact with Zen Footy directly.
Player data is never automatically sent to AI features (see section 5).
Coaches are responsible for consent. A coach who adds a child's data must have an appropriate lawful basis for doing so — normally the consent of the child's parent or guardian. We rely on coaches to obtain that consent.

If you are a parent or guardian and you want to know what data a coach holds about your child in Zen Footy, please contact the coach in the first instance, as they control that data. You can also contact us at support@zenfootyapp.com and we will help where we can.

9. Your rights

Under UK data protection law you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (“right to erasure”), subject to records we must keep by law.
Restrict or object to certain processing.
Data portability — receive your data in a usable format.
Withdraw consent where we rely on consent (such as waitlist emails).

To exercise any of these, contact support@zenfootyapp.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the ICO at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.

10. How we protect your data

We take reasonable technical and organisational measures to keep your data secure, including access controls that ensure coaches can only access their own data, encrypted connections, and secure, reputable infrastructure providers. No system is completely secure, but we work to protect your data and to respond appropriately if anything goes wrong.

11. Changes to this policy

We may update this policy from time to time. When we make significant changes, we will update the “last updated” date at the top and, where appropriate, let you know within the app.

12. Contact us

For any question or request about your data:

Zengus Ventures Ltd

28 Barbieston Road, Dalrymple, Ayr, KA6 6DZ

support@zenfootyapp.com

ICO registration: C1981116