Privacy Policy

Controller

EFOone SARL-S, RCS B311795, L-7790 Bissen, Luxembourg, contact@efoone.com.

Data and age state

We process account, role, team, declared date of birth, explicit age-status state (unknown, declared adult/minor, verified adult/minor), football-development records, match/training metadata, payment metadata, support messages, cookie/storage preferences and security logs. Self-declared DOB never creates verified age status. A club account represents an organisation; an identified authorised adult representative operates the account after separate representative-email verification. Representative DOB/contact data is private.

Minors and guardian approval

Players under 18 can hold an EFOone account once a parent or guardian has approved it: the guardian email is verified separately, consent is recorded and the guardian can withdraw it or delete the child account at any time. Under-18 coach, scout, agent and club-representative self-registration is unavailable. Guardian consent never creates public visibility: minor public profiles, rankings, awards, scouting and agent discovery remain prohibited, and minor media stays private to the child, the guardian and authorised coaches.

Public visibility and scouting

Only opted-in, verified-adult profiles may appear publicly. Public club pages must not rank players and must not expose DOB, owner IDs, internal team IDs or private metadata. Scout and agent surfaces exclude minors and unknown-age accounts at database-query level.

AI and your text

Pending counsel review

EFOone’s active production AI provider is OpenAI gpt-5.4 through Emergent’s managed LLM service. For written reports and other text features, external AI receives anonymised allowlisted text and metadata only: no minor data, no direct player identifiers, no guardian or contact data and no free-text identifiers.

Video analysis (your choice, not switched on yet)

Pending counsel review

When video analysis is switched on, still frames taken from a video you upload may be sent to OpenAI to be analysed, together with the match or session context you typed. Only still frames are sent: never the audio, never the original file, and never a name, a date of birth or a contact detail. Frames are sent for one analysis, are not used to train any model, and are not kept by EFOone once the report is written; OpenAI keeps them only for its own short abuse-monitoring window. Only the adult who owns the footage can ask for an analysis: a player for their own video, a parent or guardian for a linked child, and a coach for team footage. A video showing a player under 18 can only be analysed where the club has recorded filming consent for that footage and the guardian has separately opted in to video analysis for that child; a player under 18 can never upload a video or start an analysis. You can refuse video analysis, or withdraw it later, in Settings: withdrawal stops any further analysis and, on request, deletes the reports already written. As at 12 October 2026 the feature is off and no video frame has ever been sent to any AI provider.

Infrastructure and providers

Production infrastructure uses Google Cloud, MongoDB Atlas, Amazon Web Services and Cloudflare. Compute and MongoDB Atlas are recorded by Emergent Support as Central US/Iowa. Managed object storage is branded Tigris and uses AWS S3 infrastructure with US processing; standard storage has no fixed regional pinning and EFOone files use a per-application namespace. Relevant provider categories include Google Cloud, AWS, Cloudflare, MongoDB Atlas, OpenAI, Anthropic, Google, Stripe, Sentry and New Relic. Our infrastructure provider’s data processing agreement and published subprocessor list apply to this processing.

Retention periods

Operational application/infrastructure logs: approximately 24–48 hours. Usage/analytics data: up to 24 months. EFOone access/audit/security records: 180 days unless a longer legal, fraud-prevention or dispute-preservation period applies. Cookies/local storage support authentication, preferences, analytics and security.

Media deletion

You can upload, replace and delete your own videos and images inside the app, one file at a time, and a deleted file is removed from your library and from any highlight that used it. Account deletion removes all media held for the account. Questions or deletion evidence requests go to contact@efoone.com, answered within seven business days. Object storage keeps no separate backup or version retention after removal.

Rights and transfers

You can export your data, correct it, restrict processing and delete your account yourself in Settings: deletion is confirmed with your password, scheduled seven days later and cancellable during those seven days, after which account data is erased. A guardian can do the same for a linked child account. You may also request access, correction, deletion, export, objection, restriction or withdrawal by writing to contact@efoone.com, and may complain to the Luxembourg CNPD. Emergent Support states its DPA includes European Commission SCC Modules Two and Three where applicable for US, EU and India processing.