Version avg-v2 · August 2026Processing of children’s dataBy agreeing, you as a parent or guardian consent to FUTR processing personal data of your child(ren). This lets the coach organise the team and develop players better.Who is responsibleThe controller is the provider of FUTR, the service at Website. Contact: privacy@fu-tr.com.PurposesWe process the data only to: • communicate within the team (chat, in-app notifications and email); • plan training, matches and other team activities; • record attendance at those activities; • support player development (observations, personal development plan and team analysis); • organise the team (tasks, volunteering, line-up and match report); • give authorised club staff read-only insight into development coverage and planning (they cannot edit coach content). We do not sell data and we do not use it for third-party advertising.Which dataDepending on what you or the staff enter: • team identity: first name, last name, optional man/woman, optional shirt number and positions, birthday (month and day); • optional: date of birth, photo, address, emergency contact and medical notes; • development: coach observations, characteristics and the development plan; • attendance, planning and team chat; • a player account (email) if you create one. Sensitive child data (such as date of birth, address, emergency contact and medical notes) is stored encrypted.Where we store dataData is stored in the database, authentication and file storage of Supabase (PostgreSQL), hosted in the European Union (Ireland, AWS region eu-west-1). The application runs on Vercel. Child personal data is encrypted (AES-256-GCM) and the sensitive schema is not readable through the ordinary API.Who can see the dataOnly people on your child’s team: the coach and team manager, linked parent(s) or guardian(s), and your child (their own data). Authorised club board members (e.g. technical committee) may view development summaries and planning read-only for teams in their club — they cannot change observations or the development plan. Platform admins cannot read child personal data through the ordinary app. There are no public profiles.ProcessorsWe use: • Supabase — database, sign-in, file storage and realtime chat (EU hosting); • Vercel — application hosting; • Resend — transactional email (invites, attendance reminders); • OpenRouter (optional) — rewriting coach notes; names are pseudonymised and the coach must approve the suggestion first. The optional AI rewrite may involve a processor outside the EEA. It only runs when a coach chooses it.Legal basisConsent (GDPR Article 6(1)(a)), given by the parent or guardian for children under 16 (Dutch UAVG). Medical notes are special-category data and are processed only under this explicit consent (Article 9(2)(a)). Without this consent the coach cannot record observations or a development plan.How long we keep dataWe keep the data while your child is on the team (including the team line across seasons), and afterwards as long as needed for that development record. You may withdraw consent; new observations are then blocked. For access, correction or erasure, email privacy@fu-tr.com.Your rightsYou have the right to access, rectification, erasure, restriction, data portability, objection, and to withdraw consent. Withdrawal does not affect processing that was lawful before. You may lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or your local supervisory authority.Contactprivacy@fu-tr.com · Website