Privacy policy
Last updated: 2026-11-11
The short version
- To run a team, Astuten needs a name you’ll recognise for each player and a shirt number. It never asks for photos, birthdates, addresses or phone numbers.
- We don’t sell personal information, show ads, or share data with advertisers.
- Delete a team or your account and the data is permanently erased after 30 days.
- Questions or requests: support@astuten.com.
1. Who we are
Astuten is operated by Astuten.io Ltd, a New Zealand company based in Wellington. This policy covers the Astuten app (iOS, Android and web at astuten.io) and the website astuten.com.
Privacy contact: support@astuten.com.
2. What we collect
| What | Details | Where it comes from |
|---|---|---|
| Your account | Name, email address, and how you sign in (email and password, Google, or Apple). We never see your Google or Apple password. | You |
| Teams and players | Team name; for each player, the name the coach types, a shirt number and preferred positions. | The coach |
| Matches | Lineups, substitutions, minutes and positions played, goals and cards. | The coach, during matches |
| Team membership | Who has joined a team and their role (coach, assistant, player or parent). | Invite codes |
| Usage and crash data | Which screens and features are used, crash reports, device model, operating system, app version, approximate country, and an app-install identifier. Collected through Google’s Firebase Analytics and Crashlytics. Advertising identifiers are switched off. | Your device |
| Server logs | IP address and request details, kept by our hosting provider for security and troubleshooting. | Your device |
| Support | The emails you send us. | You |
| Website | Page views counted without cookies and without identifying you. | Your browser |
What we don’t collect: photos, dates of birth, addresses, phone numbers, location, contacts, health information, or payment card details. The app has no ads and collects no advertising identifiers. Usage and crash data is about the person holding the device, never about the players on a team.
3. Players and children
Many teams on Astuten are children’s teams, so this part matters most.
- Coaches enter players. A first name, nickname or initial is enough. We store whatever the coach types, so we ask coaches not to enter full names or anything else that isn’t needed.
- Players don’t need an account. A player is a line in the coach’s team, not a user.
- Accounts are for people aged 16 and over. A younger player’s parent or guardian can join the team instead and follow the same stats. If we learn that someone under 16 has created an account, we delete it.
- Parents and guardians can ask us what a team holds about their child, and ask for it to be corrected or removed, by emailing support@astuten.com. We’ll work with the coach to respond.
- We never use players’ information for marketing or profiling.
4. Why we use it
We use personal information only to:
- run the service: sign you in, sync your teams across devices, and share a team with the people you invite;
- send service emails, such as verifying your address or resetting a password;
- keep the service secure and fix faults;
- answer support requests;
- understand how the app is used and where it crashes, so we can improve it.
For people in the EU and UK, our legal bases are performing our contract with you (running your account) and our legitimate interests (running teams for coaches, security, improving the app).
5. Who we share it with
We don’t sell personal information and we don’t share it for advertising. We use a small number of providers to run the service:
| Provider | What for | Where |
|---|---|---|
| Google (Firebase Authentication, Cloud Firestore, Hosting) | Sign-in, service emails, database, hosting | United States |
| Google (Firebase Analytics, Crashlytics) | Usage statistics and crash reports | United States |
| Apple and Google | Sign-in, if you choose it | Global |
| Cloudflare | Website hosting and cookie-free analytics | Global |
Within a team, the coach, assistants, and any players or parents who have joined can see the team’s players and stats.
We may disclose information if the law requires it. If Astuten is ever sold or merged, this policy continues to apply to your data, and we’ll tell you before anything changes.
6. Where it’s stored
Data is stored on Google Cloud servers in the United States [Firestore region nam5]. That means information is transferred outside New Zealand, the UK and the EU. Google commits to data-protection safeguards in its terms [Data Processing Addendum, standard contractual clauses and the EU–US Data Privacy Framework].
7. How long we keep it
| Data | Kept for |
|---|---|
| Teams, players and matches | Until the coach deletes them |
| A deleted team | Restorable for 30 days, then permanently erased |
| A deleted account | Sign-in removed at once; remaining data permanently erased within 30 days |
| Support emails | [2 years] |
| Server logs | [Per our hosting provider, up to 30 days] |
| Usage data | [2 months] |
| Crash reports | [90 days] |
You can delete a team or your account in the app (Account → Delete account), or see astuten.com/delete-account.
8. Your rights
Wherever you live, you can ask us to:
- give you a copy of the personal information we hold about you;
- correct it;
- delete it;
- export it in a common format;
- stop using it, or withdraw a consent you gave.
Email support@astuten.com from the address on your account. We’ll reply within 20 working days. We won’t treat you differently for making a request.
If you’re unhappy with our answer, you can complain to the New Zealand Privacy Commissioner (privacy.org.nz), the UK Information Commissioner’s Office, or your local data-protection authority in the EU.
9. Security
Data is encrypted in transit and at rest. Access rules limit each team to its own members, and only the founder can access production systems. No system is perfectly secure; if a breach is likely to cause serious harm, we’ll notify the people affected and the relevant regulator.
10. Cookies
astuten.com sets no cookies and uses no tracking. The web app uses your browser’s local storage only to keep you signed in and to make the app work.
11. Changes to this policy
If we make a material change, we’ll tell you in the app or by email before it takes effect. The date at the top shows the latest version.
12. Contact
Astuten.io Ltd · Wellington, New Zealand · support@astuten.com