Privacy notice
Last updated 13 September 2026
Who we are
Kyanga Ball is a football coaching tool operated from the United Kingdom. The data controller is Kyanga Ball Ltd, a company registered in England and Wales under number 17440144, with its registered office at 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE. Contact us at privacy@kyangaball.com.
What we collect
When you create an account: your name, email address, the club or team you gave, and the role you selected. You give us these directly.
Where you came from when you signed up: the campaign tags in the link you followed (for example that it was our Instagram link) and the name of the website that sent you — the site name only, never the page. It is read from the link itself; nothing is stored on your device to do it. We use it to know which of our posts and adverts bring coaches, and for nothing else.
What you create in the app: the sessions, drills and clips you make, and which club they belong to.
If you send the club enquiry form on our website: your name, email address, the club, how many coaches and which age groups, your country and your message. We use it only to reply to you, and delete it after 12 months. With it we keep a one-way hash of the internet address it came from, used only to stop the form being flooded — never the address itself.
Technical records needed to run the service: sign-in timestamps, and server logs containing IP address and browser type, kept for security and debugging.
How you use the app: for each day you use it, which parts you opened — the studio, the library, exporting, sharing and so on — how many times, and when you were first and last active that day. Not what you drew or typed. We record this ourselves; no third-party analytics service sees it.
We do not use advertising trackers and we do not sell or share your information with anyone for their own marketing.
Why we are allowed to hold it
To provide the service you asked for — this is contractual necessity under UK GDPR Article 6(1)(b). Without your email and password there is no account.
To keep the service secure and working, and to enforce plan limits — legitimate interests under Article 6(1)(f).
To understand which parts of the app are used and which are not, so we can improve it, and to choose which help or tips to send you — for example, how to share a clip you exported but never sent. This is legitimate interests under Article 6(1)(f). Tips that are marketing still only go to people who asked for updates. You can object to this use at any time by emailing us.
To send you service email: address confirmation, password resets, sign-in links you request, receipts, a reminder before a plan renews, and a warning if a payment fails. These keep your account working, they are not marketing, and you cannot opt out of them while you hold an account.
To send you optional updates — new drills in the library, new features — but only if you asked for them. That is a separate, unticked choice when you create your account, we record what you chose and when, and every one of those messages unsubscribes in one click. Saying no changes nothing about the service you get.
We do not sell your details, we do not share them for anyone else's marketing, and we do not run advertising trackers.
Player information
Kyanga Ball uses position codes and shirt numbers by default. Player names are optional and off unless you turn them on.
If you do enter player names, you are responsible for having a lawful basis to do so — particularly for children. We strongly recommend using numbers or initials for anyone under 18. We do not require player names for any feature.
People who watch your clips
When you share a clip as a link, it plays on a page we host, and we count how many devices opened it and how many watched it through. That is what lets you see whether a session landed.
We do not store a viewer's email address, IP address or browser details. A viewer is a random identifier created in their own browser, which distinguishes one device from another.
If the coach has named players on the board, the page asks the viewer which of them they are, so the coach can see who watched and who answered the question. Choosing is optional — "Not on this list" watches without picking — and the choice is linked only to that random identifier and to the player name the coach typed. We never ask a viewer for their own details.
Because many viewers are players, and some are children, coaches should use first names, initials or shirt numbers for under-18s, as the Player information section says.
Anyone holding the link can watch. Treat a share link the way you would treat the clip itself, and do not post one publicly if the content is private to your club.
Deleting a clip deletes its view records with it.
Where it is held
Your account and sessions are stored in a Supabase Postgres database hosted in London (eu-west-2). Exported clips are stored in Amazon S3, also in London. Email is sent through Amazon SES.
These providers process data on our instructions under written terms. Some of them are US companies; transfers outside the UK rely on the UK International Data Transfer Addendum.
How long we keep it
Your account and its content for as long as the account is open, and for 30 days after you delete it so an accidental deletion can be reversed. After that it is removed permanently.
View counts on a shared clip for as long as the clip exists. Delete the clip and they go with it.
Server logs for 30 days. Daily usage records for 13 months, then deleted. Records we must keep for tax or accounting for 6 years, once there are payments to record.
Your rights
You can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You can delete your account and everything in it from your account settings at any time.
Email privacy@kyangaball.com and we will respond within one month.
If you think we have handled your information badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
Cookies and storage
We store your sign-in session and an autosaved draft of your current board in your browser. Both are strictly necessary to provide the service, so no consent banner is required.
We use no analytics or advertising cookies. The usage records described above are written to our own database from your signed-in session; nothing is stored on your device to do it.
Children
Accounts are for coaches and staff aged 16 or over. We do not knowingly create accounts for children. If you believe a child has an account, tell us and we will remove it.
Changes
If we change this notice materially we will email account holders before it takes effect. The date at the top always shows the current version.