This policy explains what information FirstTouch collects, why, and how it's handled. It is written in plain language, not legal boilerplate — if anything is unclear, contact us using the details at the bottom.
FirstTouch is a youth soccer coaching app, and many of the players using it are children. To keep that safe, every account is created and controlled by an adult — a parent or legal guardian, or a player who is 18 or older signing up for themselves. That adult authenticates with FirstTouch and adds one or more "player" profiles (their kids, or themselves) under their account. Each time a player profile is created — at signup, or later via "Add player" — the adult creating it must actively check a consent box confirming they are that player's parent/guardian (or the 18+ player themselves) and agree to this policy and our Terms of Service. That checkbox, and the time it was checked, is recorded against the player's profile.
Account, player, coach-note, and booking data is stored in a Supabase-hosted Postgres database with row-level security — the database itself enforces that an account can only ever read or write the players, clips, notes, and bookings it owns. Video files are stored separately in Cloudflare R2 and are never public: every upload and playback goes through a short-lived, signed URL that's generated only after verifying your session and that the file belongs to your account.
We don't sell your data. A small number of service providers process it on our behalf, strictly to run the app:
A human coach only sees a clip or its data if you explicitly send that clip to them from within the app. We don't run advertising trackers or sell or share any player's information for behavioral advertising.
Movement analysis and coaching feedback generated by AI is based on a single-camera, low-resolution estimate — it's meant as a helpful starting point, not a certified assessment. It is not medical, injury, or professional training advice, and shouldn't be treated as a replacement for guidance from a qualified human coach or medical professional.
Because FirstTouch is used by children under 13, we handle player data in line with the Children's Online Privacy Protection Act (COPPA). As the parent/guardian who created a player's profile, you can at any time: review the personal information we've collected about your child, request that we delete it, and refuse to let us collect any further information from or about your child — simply by emailing us (see below) or stopping use of the app. We only collect what's needed to run the features you've used (analysis, coach notes, bookings), we don't condition access to core features on collecting more than that, and we don't yet have a self-serve delete button in the app itself, so these requests are handled manually — we'll confirm once it's done.
If you registered your own account as an 18-or-older player, the same practical rights apply to you directly — on general data-privacy grounds rather than COPPA, which only covers children under 13. You can at any time: review the personal information we've collected about you, request that we delete it, and stop any further collection — simply by emailing us (see below) or closing your account. As above, we only collect what's needed to run the features you've used, we don't condition access to core features on collecting more than that, and these requests are handled manually until a self-serve option exists.
We use industry-standard measures — encrypted connections, access-scoped credentials, and database-level row security — to protect your data. No system is perfectly secure, and we can't guarantee absolute protection against every possible threat.
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Questions, data requests, or concerns: [email protected]