Privacy notice

Who is responsible for your data

Two organisations are responsible for different parts of your data under UK GDPR, and each is a controller for its own part.

Your club

Controls the training and availability data it holds about you, such as GPS training load, session ratings of perceived exertion, availability and practitioner decisions. Opti-U processes this data for your club, under a written agreement and on your club's instructions. Your club's own privacy notice explains how and why it collects it.

Opti-U Ltd

Controls the data from your wearable, what you enter in the athlete app, your account, and the twin built from them. You decide whether any of your wearable data reaches your club.

What we collect

Your account

Your name, email address, date of birth, club, squad, playing position, language, time zone, a password stored only as a protected hash, and when you last signed in.

Data from your club

Training load from GPS and other tracking systems, session ratings of perceived exertion, match and training minutes, availability, and practitioner decisions such as a training restriction. Diagnoses and clinical notes stay in your club's medical systems. The platform holds only a pointer that a restriction exists.

Physiological data from your wearable, if you connect it

When you connect your wearable account and authorise Opti-U with the wearable maker, we receive your readings from the maker's servers through its API. Depending on the device, these include sleep, heart rate, heart rate variability, resting heart rate, stress, respiration, blood oxygen, and activities and training outside club sessions, with the device each reading came from. When you first connect, we may also receive your recent past readings.

What you enter in the app

Your daily check-ins, such as sleep quality, soreness, fatigue, mood and stress, and any notes you write.

What the twin works out

Your personal baselines, trends, readiness and forecasts, such as injury, illness, physical burnout and performance dip risk, each with a stated range, and a record of how accurate past forecasts were.

Technical information

The app's version and platform, the internet address your requests come from, and our servers' records of each request you make.

• We do not collect your precise location, contacts, photos, microphone or camera, and we do not use advertising identifiers.

Why we use it, and on what basis

• To run the athlete app and your account, and to show you your own twin: because it is necessary for our contract with you (UK GDPR Article 6(1)(b)).
• Data from your wearable and your check-ins is health data, which is special category data. We use it only with your explicit consent (Articles 6(1)(a) and 9(2)(a)), which you give when you connect a wearable or start check-ins. You can withdraw it at any time.
• Data from your club: we process it on your club's behalf to build and update your twin for your club's practitioners. Your club sets out its lawful basis, which for training and availability data is usually its employment relationship with you, documented in an Appropriate Policy Document and assessed in a data protection impact assessment before any data flows.
• To share your wearable data with your club, only if you switch that on: a separate explicit consent (Article 9(2)(a)), off by default.
• To keep the service secure and send account and service emails: our legitimate interests in running a safe, working service (Article 6(1)(f)).
• Research: only with a separate explicit consent from you, described under research below.

What your club can see

• Your club's practitioners see the twin built from your club's data, inside access tiers. Each discipline sees only its own tier: medical staff cannot see psychology records, psychology staff cannot see medical records, and club leadership sees counts rather than names.
• Your wearable data and anything the twin works out from it reach your club only if you switch on sharing in the app. Sharing is off by default, and you can switch it off at any time. When you do, your club stops seeing new data straight away.
• Declining to share looks the same to your club as having too little data, so no one can tell that you said no.
• Every time someone at your club opens your record, it is logged in a tamper-evident audit trail, and you can see in the app who looked and when.

How the forecasts are used

The twin's forecasts are statistical estimates with a stated range. They are tested against your club's own outcomes before your club relies on them. They support qualified practitioners, who make every decision about your training, selection and care. No decision with a legal or similarly significant effect on you is made by automated means alone. The twin does not diagnose injury or illness.

Language models

• Plain-language explanations and your daily plan are written with the help of a language model. All calculations are done by Opti-U's own statistical models.
• The language model receives the twin's outputs, such as a trend, a change against your own baseline or a forecast with its range, and the check-in answers it needs. It never receives your raw physiological data. Your name, email address and account ID are removed before anything is sent.
• The language models we use are hosted in the European Union, under terms that bar the provider from using this data to train its models. We are building our own small language models, hosted on Opti-U's platform, to replace third-party ones.

Research

Universities may evaluate the platform independently. Your data is used for research only if you give a separate explicit consent, only under a data-sharing agreement with your club and the research institution, and only in a form the agreement allows, such as pseudonymised or aggregated data. Declining has no effect on your use of the app or on how your club treats you. Where a wearable maker's terms do not allow research use of its data, that data is not used.

Who receives your data

• Google Cloud, which hosts the Opti-U platform and its database in London.
• Our language-model provider, hosted in the European Union, which receives only what is described under language models.
• Postmark, which sends account and service emails.
• Your club, as described under what your club can see.
• Research institutions, only with your consent and under a data-sharing agreement.
• Your wearable maker already holds your readings under its own terms. Connecting does not send it any data from Opti-U.
• We do not sell your data, use it for advertising or share it with data brokers.

Transfers outside the UK

The Opti-U platform is hosted in London. The language-model provider is in the European Union, which the UK recognises as giving adequate protection. [The location of our email provider and the safeguard for it: to be confirmed.]

Moving club

Your twin moves to a new club only if you authorise it. Training data your old club owns moves only under an agreement between the two clubs, and clinical records pass only through normal medical channels. When you leave a club, its staff lose access to your record in the app.

How long we keep it

• Your account, your check-ins and your wearable data: while your account is open. [Deletion periods after an account closes: to be confirmed.]
• Data from your club: for as long as your club's agreement with Opti-U sets, then deleted or returned to your club.
• If you disconnect your wearable, we stop receiving new readings straight away. Readings we already hold stay until you ask us to delete them or your account closes.
• Audit records of who opened your record: [period: to be confirmed].
• Our servers' request logs: 30 days. Backups expire on their own schedule.

Your choices and rights as a player

You have the rights set out under your rights below, and you can withdraw any consent at any time, without affecting what was done before.

To stop wearable data straight away, use Disconnect in the app or withdraw Opti-U's access in your account with the wearable maker. To switch off sharing with your club, use the sharing setting in the app. For data your club controls, you can also contact your club.

The athlete app is for players aged 18 and over. [Academy players under 18: to be confirmed.]