CoachMe

Privacy Policy

Last updated: 17 April 2026

1. What data we collect

  • Account information: Your email address and name when you sign in via Google OAuth or email/password.
  • FPL team data: Your Fantasy Premier League team ID and squad data, fetched from the public FPL API with your permission.
  • Push notification subscription: Browser push endpoint stored to deliver deadline reminders and alerts (if you opt in).
  • Usage data: Pages visited, features used, and interaction patterns to improve the service.
  • Waitlist email: If you sign up for the waitlist before creating an account, we store your email address.

2. How we use your data

  • Provide personalised FPL predictions, captain picks, and transfer recommendations.
  • Sync and display your FPL squad within the app.
  • Send notifications about upcoming deadlines and gameweek summaries (if you opt in).
  • Improve our prediction models and overall service quality.

3. Third-party services

We use the following third-party services to operate CoachMe:

  • Supabase: Authentication and database hosting.
  • Vercel: Web application hosting and analytics.
  • Google: OAuth sign-in. We receive your email and name; we do not access any other Google data.
  • Stripe: Payment processing for paid subscriptions (when applicable).
  • Upstash: Redis caching for performance optimisation.

4. Data storage & security

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security policies. All data is encrypted in transit via TLS. We do not sell or share your personal data with third parties for marketing purposes.

5. Cookies

We use essential cookies only for authentication (Supabase auth session cookies). We also use Vercel Analytics for anonymous, privacy-friendly usage statistics. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Data retention

  • Account data: Retained until you delete your account.
  • Waitlist emails: Retained until you unsubscribe or we remove them after onboarding.
  • Notification logs: Automatically deleted after 90 days.
  • Player change history: Automatically deleted after 30 days.

7. Your rights

You have the right to:

  • Request a copy of the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and all associated data.
  • Request your data in a machine-readable format.
  • Withdraw consent for data processing at any time.

To exercise any of these rights, contact us at sigurdbla@gmail.com.

8. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this privacy policy, please contact us at sigurdbla@gmail.com.