This Privacy Policy describes how uni8 ("we", "us", "our", or the "App") collects, uses, stores, and shares information when you use our mobile application and related services (the "Services"). uni8 is a mobile application designed for sports academies in Kuwait and the Gulf Cooperation Council (GCC) region, enabling academy managers to track player development and parents/players to view progress.
By creating an account or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.
1. Who We Are
uni8 is operated by the uni8 team based in Kuwait.
Contact: ahmadalshammari2002@gmail.com
For any privacy-related questions, requests, or complaints, please contact us at the email above.
2. Information We Collect
We collect the following categories of information:
2.1 Information You Provide Directly
Account Information (all users):
- Full name
- Email address
- Password (stored in hashed form by our authentication provider; we never see your plain-text password)
- Phone number (optional)
- Account role (Academy Manager or Parent/Player)
- Profile photo (optional)
Academy Information (Academy Managers only):
- Academy name
- Sport type
- Academy logo (optional)
- Subscription tier
- Team names, age groups, and sport types
Player Information (entered by Academy Managers):
- Player full name
- Date of birth
- Position
- Player photo (optional)
- Skill data, evaluation scores, training points
- Attendance records (present, absent, excused)
- Session notes
- Linked parent/player account (after invitation is claimed)
Invitation Data:
- Email addresses used to invite parents/players
- Invitation tokens and status
2.2 Information Collected Automatically
- Device Information: device model, operating system and version, device language, time zone, and unique device identifiers necessary to deliver push notifications.
- Push Notification Tokens: issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) via Expo Notifications.
- Log and Usage Data: anonymized records of feature usage, crashes, errors, and performance metrics to help us improve the App.
- Approximate Location: inferred from your IP address only (we do not collect precise GPS location).
2.3 Information We Do Not Collect
We do not collect:
- Precise GPS or background location
- Contacts, calendar, SMS, or call logs
- Health, biometric, or financial data
- Browsing history outside the App
- Microphone or camera input (except when you explicitly take/upload a profile or player photo)
3. How We Use Information
We use the information we collect to:
- Create and manage your account and authenticate you.
- Provide the core features of the Services (academy management, team rosters, player profiles, training and evaluation sessions, attendance tracking, skill progression).
- Allow Academy Managers to invite parents/players and link them to player records.
- Send transactional and account-related push notifications (e.g., invitation accepted, new session logged).
- Enforce subscription-tier limits (number of teams and players).
- Diagnose problems, prevent fraud, and improve performance and reliability.
- Communicate with you about updates, security alerts, and support requests.
- Comply with legal obligations and enforce our Terms of Service.
We do not use your information for advertising, do not sell your information, and do not share it with data brokers.
4. Legal Basis for Processing (Where Applicable)
Where required by law (such as under GDPR for users in the European Economic Area), we rely on the following legal bases:
- Performance of a contract — to provide the Services you requested.
- Legitimate interests — to secure, maintain, and improve the Services.
- Consent — for optional features such as push notifications, profile photos, and (where required) the processing of children's data by their parent/guardian.
- Legal obligation — to comply with applicable laws.
5. Children's Privacy
Many players in sports academies are under the age of 18, including children under 13.
- Direct accounts for children under 13 are not permitted. If a child under 13 wishes to view their progress, a parent or legal guardian must create the account and supervise its use.
- Player records about minors are entered by Academy Managers, who represent that they have obtained verifiable consent from the parent or legal guardian of each minor player before entering personal data into the App.
- Parental Rights: parents and legal guardians may, at any time, request access to, correction of, or deletion of their child's information by contacting us at ahmadalshammari2002@gmail.com or by asking the Academy Manager to delete the player record.
- We do not knowingly collect personal data from children for any purpose other than the legitimate operation of the Services as described above. We do not use children's data for marketing, profiling, or behavioral advertising.
If you believe a child's data has been collected without proper parental consent, please contact us immediately and we will remove it.
6. How We Share Information
We share information only as described below.
6.1 Within Your Academy
- Academy Managers can view all player, team, attendance, and skill data within their own academy.
- Parents/players can view only the data of the player they are linked to, in read-only mode.
6.2 Service Providers ("Sub-Processors")
We use the following third-party service providers to operate the Services. They process data only on our behalf and under contractual confidentiality obligations:
| Provider | Purpose | Data Processed | Region |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, realtime sync | All account, academy, team, player, session, and skill data | United States / European Union |
| Expo (650 Industries, Inc.) | Push notification delivery, app updates | Push tokens, device identifiers | United States |
| Apple Inc. | App distribution, push notifications (APNs) | Push tokens, device identifiers | Global |
| Google LLC | App distribution, push notifications (FCM) | Push tokens, device identifiers | Global |
We do not share data with advertising networks, analytics brokers, or social media platforms.
6.3 Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or where necessary to protect our rights, your safety, or the safety of others.
6.4 Business Transfers
If uni8 is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
7. International Data Transfers
Our service providers may process and store data outside your country of residence (including in the United States and European Union). Where personal data is transferred internationally, we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your information is protected at a level consistent with this Privacy Policy and applicable law.
8. Data Retention
- Active accounts: we retain your data for as long as your account is active.
- Closed accounts: when you delete your account, we delete or anonymize your personal data within 30 days, except where we are required by law to retain it (e.g., billing records).
- Backups: residual copies in encrypted backups may persist for up to 90 days before being overwritten.
- Player records: when an Academy Manager deletes a player, the player's profile, attendance, and skill data are permanently deleted within 30 days.
- Invitation tokens: unclaimed invitations expire and are purged after 90 days.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — request deletion of your account and personal data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — request a machine-readable export of your data.
- Objection — object to processing based on legitimate interests.
- Withdraw Consent — withdraw consent at any time where processing is based on consent.
- Lodge a Complaint — file a complaint with your local data-protection authority.
To exercise any of these rights, email ahmadalshammari2002@gmail.com from the email address associated with your account. We will respond within 30 days. We will not discriminate against you for exercising your rights.
9.1 Account Deletion
You may delete your account at any time from within the App (Settings → Account → Delete Account) or by emailing ahmadalshammari2002@gmail.com. Deleting your account will permanently remove your personal information, subject to the retention exceptions above.
10. Security
We take the security of your information seriously and use industry-standard practices, including:
- Encryption in transit (HTTPS / TLS).
- Encryption at rest for the database and file storage.
- Row-Level Security (RLS) policies in our database, ensuring you can only access data you are authorized to see.
- Hashed and salted password storage via our authentication provider.
- Regular security reviews and prompt patching of vulnerabilities.
No system is 100% secure. If we become aware of a personal-data breach affecting you, we will notify you and the relevant authorities as required by law.
11. Push Notifications
If you enable push notifications, we use Expo Notifications, APNs, and/or FCM to deliver them. You can disable push notifications at any time from your device settings. Disabling notifications will not affect the core functionality of the App.
12. Permissions Used by the App
The App may request the following device permissions on first use:
- Camera / Photo Library — to take or upload profile photos and player photos. Optional.
- Notifications — to send you account-related alerts. Optional.
- Network access — required to sync data with our servers.
You may revoke any optional permission at any time from your device settings.
13. Third-Party Links
The App may contain links to third-party websites (e.g., this Privacy Policy and the Terms of Service hosted on the web). We are not responsible for the content or privacy practices of those websites. We encourage you to review their privacy policies.
14. Do Not Track
The App does not respond to "Do Not Track" browser signals because the App is not a web browser. We do not track users across third-party sites or services.
15. California Residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising.
- Non-discrimination for exercising your rights.
To exercise these rights, contact ahmadalshammari2002@gmail.com.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the App and update the "Last Updated" date at the top of this policy. Continued use of the Services after the update constitutes acceptance of the revised policy.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
uni8
Email: ahmadalshammari2002@gmail.com
We aim to respond to all enquiries within 30 days.