Who we are

KICKPATH is operated by Noahsure Group LTD, a company registered in England & Wales, which is the data controller for the personal data described here. Registered office: 1 Canada Square, Canary Wharf, London, E14 5AA. Contact us at admin@noahsure.co.uk.

What we collect

Account data — name, email address and either a hashed password or the basic profile information Google shares when you sign in with Google.
Athlete profile data — date of birth, position, playing level, club or team, country, goals, training logs and drills you save.
Coaching content — the messages you send to the AI coach and the plans generated for you.
Payment data — handled by Stripe. We never see or store your card number; we keep your subscription status, plan and renewal dates.
Technical data — IP address, device and browser information used for security, abuse prevention and service reliability.

Why we use it and our lawful bases

Contract — creating your account, generating plans, running your membership and processing payments.
Legitimate interests — keeping the service secure, preventing fake or automated signups, and improving the product.
Consent — any optional communications you opt into. You can withdraw consent at any time.
Legal obligation — retaining transaction records for tax and accounting.

Who we share it with

We use trusted processors to run the service: our cloud database and authentication provider, Stripe for payments, and an AI provider that generates coaching responses. They process data on our instructions only. We never sell your data.

How long we keep it

Account and profile data are kept while your account is open and deleted within 30 days of you deleting your account. Payment and invoice records are retained for six years to meet UK tax law. Contact messages are kept for two years.

Your rights

Under UK GDPR you may access, correct, delete, restrict or object to our processing of your data, and request a portable copy. You can delete your account and all associated profile data yourself from the Account tab in your dashboard, or email admin@noahsure.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Age requirement

KICKPATH is for users aged 16 and over. We ask for a date of birth at signup and block accounts below that age. If an existing profile indicates the account holder is under 16, we suspend self-service access and flag the account for manual review rather than deleting the record immediately, so that we can verify the position and respond to the account holder, parent or guardian. Confirmed under-16 accounts are closed and the data deleted. Parents, guardians, coaches and academies are welcome to use KICKPATH themselves and apply the guidance with the young players they support.

Cookies and similar technologies

We group storage into three categories. Necessary is always on and covers your sign-in session (our cloud authentication provider), security and anti-abuse protection, and Stripe's checkout and fraud-prevention cookies — without these the site cannot sign you in or take a payment. Analytics (Google Analytics 4) and Advertising (Google Ads) are optional, off by default, and load only after you accept them. Google Consent Mode v2 signals are set to denied before any Google tag can run.

Your choice is stored in your browser for 180 days, after which we ask again. You can change or withdraw it at any time through Privacy choices in the site footer. We never send your name, email, date of birth, health, nutrition, training or AI Coach content to analytics or advertising tools.

AI Coach, health and nutrition data

Messages you send to the AI Coach, and the plans generated for you, are processed by our AI provider solely to produce your response and are stored against your account so you can revisit them. Optional health-adjacent fields — height, weight, injuries, ethnicity and nationality (used to select representative drill imagery) — are supplied by you, used only to personalise drills, plans and nutrition guidance, and are never used for advertising or shared with advertisers. You can edit or clear these fields, or delete your account, from the Account tab.

Security and international transfers

Data is encrypted in transit and at rest, and access is restricted to what is needed to run the service. Where a processor stores data outside the UK, transfers are covered by UK adequacy regulations or standard contractual clauses.

Changes

If we make a material change to this policy we will update the date above and notify account holders by email.

Privacy Policy