Privacy Policy

1. Controller and contact

IPROWL Coach is operated by Luis Hysaj in Albania. For questions, privacy requests, or to exercise your rights, contact luis.hysajj@gmail.com.

2. Data we process

We process only the data needed to operate the platform.

• Account data: first name, last name, email, and a hashed password.
• When Google Login is used: Google identifier, name, email, and profile picture provided by Google with your approval.
• Sports data entered by the coach: teams, players, dates of birth, nationalities, positions, ratings, reports, matches, and training sessions.
• Uploaded materials: photos, logos, videos, and video-analysis links.
• Technical and security data: IP address, login time, errors, and server logs.

3. Purposes and legal bases

We process data to provide requested features, authentication, security, support, backups, and technical improvements. Processing relies on providing the service, legitimate security and operational interests, consent where required, and legal obligations.

4. Players and minors

A coach entering player data must have the necessary authority, legal basis, and, where required, consent from the player, parent, or guardian. Do not enter unnecessary health or sensitive information.

5. Providers and transfers

We use Contabo for hosting, MongoDB Atlas for the database, and Google for Google Login. These providers may process data in other countries under their applicable legal terms and safeguards.

6. Data sharing

We do not sell personal data or use it for advertising. Data is shared only with necessary providers, when legally required, or to protect security and rights.

7. Retention and deletion

Data is retained while the account is active or as needed for the purposes above. After deletion, backup copies may remain for up to 7 days before being overwritten. Some logs may be retained longer for security or legal obligations.

8. Security

We use HTTPS, hashed passwords, HttpOnly/Secure cookies, ownership controls, rate limiting, and backups. No online system can guarantee absolute security; report suspected incidents immediately.

9. Cookies

We use an essential secure-session cookie and local storage for language preference. We do not use advertising cookies. Google may use its own technologies when you choose Google Login.

10. Your rights

Under Albanian Law no. 124/2024 on personal data protection and, where applicable, the GDPR, you may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent. You may also complain to Albania’s Information and Data Protection Commissioner.

11. Changes

We may update this policy when the service or applicable law changes. The updated version will be published here with its revision date.