Privacy Policy
1. Who we are
The Talent ID service is operated by Talent ID LLC (name pending registration), established in Ukraine. The person accountable for privacy (and, for Quebec, the person in charge of the protection of personal information): privacy@talent-id.org. The service and these documents are available in English and in French.
2. What information we collect
Adult users: name, email, mobile phone, role, organization, settings, sign-in logs; if you sign in with Google — the name and email from your Google account (we never receive your Google password); a log of account use (which sections were opened — without their content).
Children (players): name, date of birth, team group, anthropometrics (height, weight), test results, coach ratings, medical clearance and check-up dates, well-being (a daily check-in, including whether something hurts), recommendations from the coach or the academy physician (without diagnoses), psychological test results (only with separate parental consent), attendance and training load, readings from the club's sports devices (distance, speed, heart rate during practice), tags on practice and game videos (only with separate parental consent). A child's information is entered by the club or the parents; parents of a child who is not on a club roster may keep a short profile themselves (year and quarter of birth, city, height, weight, 30 m sprint, preferred foot).
We do not collect: medical records, diagnoses, photos of children in profiles, or biometric information for identification.
Technical: IP address, device type, cookies (see the Cookie Policy).
3. Purposes and legal bases
Providing the service under a contract with an academy, club or school; consent of a parent — for children's information and for each separate profile disclosure; security and abuse prevention; legal obligations — accounting and lawful requests from authorities. We collect only what is needed for these purposes and rely on meaningful, express consent for children's and health-related information. Applicable laws: the Personal Information Protection and Electronic Documents Act (PIPEDA); in Quebec — the Act respecting the protection of personal information in the private sector as amended by Law 25; in Alberta and British Columbia — their Personal Information Protection Acts (PIPA); as the operator is established outside Canada, also the Law of Ukraine «On Personal Data Protection» (No. 2297-VI).
4. Children's information
Children do not have their own accounts. A child's information is processed only with the consent of a parent (legal guardian). The Office of the Privacy Commissioner of Canada considers that, except in exceptional circumstances, meaningful consent for children under 13 must be given by a parent; in Quebec, information about a minor under 14 may be collected only with the consent of the person having parental authority or the tutor. Talent ID applies a stricter rule: all consents for a child's information are given by the parent, whatever the child's age. Parents can see the child's information in their account and correct it, download a full copy at any time («My data») or withdraw consent. We do not use children's information for advertising and do not build advertising profiles. Selection decisions are made by the coach — the service only shows calculations; no decision about a child is based exclusively on automated processing.
5. Who we share information with
Coaches and management of your organization — within their role. Other clubs and academies — only with separate parental consent for each specific request. The soccer federation or provincial/territorial association — if your academy has connected the data exchange and registered the child: only full name, date of birth, academy and team group, position, city and registration number (in return, official game reports are added to the profile); tests, health, family and contacts are not shared. Your academy's own systems via the open API (Elite package) — only if the academy's management has created an access key: full name, date of birth, team group, position, measurements and attendance of that academy's players, read-only (health, well-being, family and contacts are not shared); the key can be revoked at any time, every request is logged (30 days). Anyone you yourself send a link to the child's development passport (created by parents only, valid for 7 days, can be revoked): full name, year of birth and age, position, academy and team group, medical clearance status, attendance over 90 days, games and latest measurements — without contacts and without other children's information. A scout or club the academy sends a link to a playlist of video clips (only with the separate parental consent «Clips for scouts and clubs», up to 30 days, parents are notified, can be revoked): full name, year of birth, position and clips featuring the child; a clip plays from the game recording in the academy's video service, so the recipient can technically watch the whole recording. Advertisers — nothing except the number of parents (fewer than 20 is not shown). Service providers under contract, who must protect the information to a comparable level: hosting and database in the EU (Ireland, Supabase); content delivery, the «human, not a bot» check and storage of game files in the EU (Cloudflare); an email service; an SMS service for the phone verification code; Google — only if you choose to sign in with Google; a server that detects moments in game videos (Modal, USA) — it receives a game recording only for the time of the analysis and does not keep it; payment services — card data never reaches us. Authorities — only where required or permitted by law.
6. Retention
Account — while it is active, and 30 days after a deletion request. Player information — while the child is at the club and up to 3 years after leaving, for the development history, unless the parents ask to delete it earlier. Original game recordings — 30 days (tags and clips — while the child is at the club). Website error log — 30 days. Account usage log and visit statistics — 13 months. Security logs — 12 months. Payment records — for the periods required by tax law. Information is then destroyed or anonymized.
7. Your rights
Access to your information and a copy (in Quebec, also in a structured, commonly used technological format), correction, withdrawal of consent at any time (subject to legal or contractual restrictions), deletion, and — in Quebec — de-indexation and cessation of dissemination. We reply to requests within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca); in Quebec — to the Commission d'accès à l'information (www.cai.gouv.qc.ca); in Alberta — to the Office of the Information and Privacy Commissioner of Alberta; in British Columbia — to the Office of the Information and Privacy Commissioner for British Columbia. You can also complain to the Ukrainian Parliament Commissioner for Human Rights. Most actions are available in your profile: «Language, theme and data».
8. Security
Encryption in transit and at rest, access separation at database level, two-factor sign-in with an authenticator app (available to everyone, recommended for academy management), review of new sign-ups by an administrator, access logs, daily backups, a security review before launch. We keep a record of breaches of security safeguards and notify the Privacy Commissioner of Canada (and, in Quebec, the Commission d'accès à l'information) and affected individuals where a breach creates a real risk of significant harm (in Quebec, a risk of serious injury).
9. International transfers
Talent ID's database is hosted in the European Union (Ireland) and the operator is established in Ukraine, so your information is processed outside Canada and may be accessible to the courts and authorities of those jurisdictions. Transfers between the EU, Ukraine and other countries (including to the video analysis server in the USA and during Google sign-in) are made only with contractual safeguards (EU Standard Contractual Clauses). For information about people in Quebec, we assess before any communication outside Quebec whether the information will receive adequate protection, as required by the Quebec private-sector Act.
10. Changes
We will announce material changes by email and in the service at least 14 days in advance.