Privacy Policy

Different Gravy is operated by Decade10 Limited, a UK product studio. We are the data controller for account, security, billing and support data that we decide how to use. For team, player, parent-response and match data entered into the Service, the club or other organisation using the Service is normally the data controller and Decade10 Limited is its data processor.

Contact us about privacy at hello@rhocholdings.com.

Decade10 Limited is registered in England and Wales, company number 10535114. Registered office: 15 Cae Garw, Llantwit Fardre, Pontypridd, Wales, CF38 2TQ.

• Account data: your name, email address and sign-in credentials, used to create and secure your account.
• Organisation and team data: club names, team colours, badges and settings entered by your club.
• Player data: names, squad numbers, preferred positions, match availability, optional photographs, match records (appearances, goals, assists, ratings), and training records — availability, attendance and optional 1–5 effort scores entered by coaches.
• Parent responses: match and training availability, and an optional short note on match answers, submitted through a private player link, together with the child, team and match or training session the response relates to and the time it was submitted or changed. Parents do not need an account, and we do not ask for a parent's name, email address or telephone number through this feature.
• Coach training attendance: whether coaches assigned to a team said they could attend a training session and whether they turned up, as recorded by the club.
• Help questions and voice memos: the questions you type into the in-app Help assistant, and voice memos you record in Help to dictate a question. Typed questions are sent to an AI service so it can answer them; voice memos are sent to an AI service so they can be turned into text, and the recording itself is not stored after transcription. Help chats are kept on your own device, not on our servers.
• Help answer reports: when you tap "Report this answer" in Help, we store the question and answer reported so we can review the assistant's behaviour.
• Push notification tokens: if you switch on notifications, we store a device token provided by Firebase Cloud Messaging (a Google service) so we can send matchday reminders and alerts to your device.
• Billing data: if you buy Pro on our website, Stripe processes the payment, handles tax on it, and collects your payment details and billing address under its own privacy notice. We receive your email address, plan, subscription status and renewal dates — never your full card details.
• Usage data: basic technical information such as device type and pages visited, used to keep the Service reliable and secure.

Different Gravy is used by youth football teams, so player data often relates to children. The Service is designed for adults (coaches and club officials) — not for children to create accounts themselves. The club decides why and how its player data is used and is responsible for providing an age-appropriate privacy notice, choosing and documenting an appropriate lawful basis, keeping the information accurate and limited, and obtaining consent where consent is the lawful basis. Parental consent is not automatically the only lawful basis, so each club must make and document its own decision.

We process this data only on the club's documented instructions, including the actions its authorised coaches take in the Service, unless the law requires otherwise. We never use children's data for advertising, profiling, data brokerage or our own unrelated purposes.

Children have data protection rights in their own information. A parent or guardian may act for a child where appropriate, but a child who has sufficient understanding may exercise those rights directly. Requests about team or player records should normally go to the club first; we will help the club respond.

We use personal data for the purposes below. Where we decide how data is used, UK GDPR requires a lawful basis for each purpose:

• Creating and running your account and the Service, including essential service emails such as account confirmation, password reset and invitations — performance of our contract with you.
• Selling and managing Pro subscriptions — performance of our contract with you. Keeping payment and tax records — legal obligation.
• Keeping the Service secure, preventing misuse and fixing faults, including basic usage data — our legitimate interests in running a safe, reliable service.
• Answering Help questions and transcribing Help voice memos with AI services, at your request — performance of our contract with you. Questions and recordings are sent to those services only to give that answer or transcription.
• Reviewing Help answers you report — our legitimate interests in keeping the assistant accurate and safe.
• Sending matchday reminders and alerts by push notification — your consent, given when you switch them on. You can switch them off at any time in Team settings or in your phone's settings.
• Improving the Service using aggregated or anonymised information — our legitimate interests.

For team, player, parent-response, match and training data, we act for the club as its processor, and the club decides the lawful basis (see section 3).

We do not sell personal data, we do not use it for third-party advertising, and we do not make decisions about anyone based solely on automated processing.

Coaches can create read-only links showing a matchday squad. Anyone with the link can view that page until it is revoked or expires. These pages show only the team badge, limited fixture details, formation and player names and numbers — never notes, statistics or other teams' data. Under-18 teams default to first name and surname initial; the meet time remains visible, but the full venue address is hidden. Share links carefully.

Coaches may send a private link for a named player so a parent or guardian can mark them In or Out for upcoming matches and training sessions, adding a short note to match answers. The link shows only that player's name, team name and relevant fixture and training details, including meet times and venues. It does not show other players, squads, statistics or internal notes. Coaches can disable and replace a link at any time.

The answer and note are stored against that child and match. They can be seen by the parent or guardian using that private link and by authorised coaches or club officials with access to the team. They are not shown on public squad links or to other parents. If a selected player changes to Out, assigned coaches may also receive an alert naming the player and explaining the change. Parents should avoid putting medical details or other sensitive information in the optional note.

Parents can change their answer until the match or session starts, or until the club closes responses. The club is responsible for deciding why it collects this information, telling parents how it will be used, limiting access to appropriate people, and dealing with correction or deletion requests. A parent should normally contact the club about a response or note; we will assist the club where required.

When we process team, player, parent-response and match data for a club, the data processing terms in our Terms & Conditions govern that work. They require us to follow documented instructions, keep the data confidential and secure, control our subprocessors, help with rights requests and data protection obligations, notify the club of relevant personal-data breaches without undue delay, and return or delete data when the service ends as the club directs, subject to legal retention duties.

The club remains responsible for deciding who may access its records, reviewing coach permissions and shared links, responding to children and parents, and telling us when information should be corrected, exported or deleted.

Data is hosted on secure cloud infrastructure with encryption in transit and access controls enforced at the database level. Each organisation's data is isolated so members can only see the clubs they belong to. We use a small number of trusted subprocessors who process data under written terms and only to provide their services to us:

• Cloud hosting, authentication and email delivery — to run the Service, sign you in and send account emails.
• AI services — Help questions are sent to an AI provider to generate answers, and Help voice memos are sent to an AI provider to transcribe them. These services may be provided through Google or other vetted AI providers, and are not used to train public AI models.
• Firebase Cloud Messaging (Google) — to deliver push notifications to your device when you switch them on.
• Payments — Stripe processes Pro payments on our website, handles tax on them and handles payment details under its own privacy notice.

We remain responsible for their processing and use appropriate safeguards where personal data is transferred outside the UK.

We keep account and team data for as long as the account or organisation remains active. Historical appearance records are kept so season statistics stay accurate; players who leave a club are archived rather than automatically deleted. Clubs can decide how long parent availability answers and notes are needed and can request their correction or deletion. Clubs can request export or deletion of their organisation data at any time. When the service ends, we delete or return controller data as instructed, subject to limited backups and any legal obligation requiring us to retain it. Billing and tax records are kept for as long as the law requires.

Under UK GDPR you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Coaches can delete their own account at any time in Team settings under Account — this permanently removes the sign-in and personal details, keeps clubs that have other coaches (ownership passes to another coach), and removes any club where they were the only member along with its players, fixtures and links. For anything else, email hello@rhocholdings.com. For player data held for a club, please contact the club in the first instance because it controls that information. If you contact us, we will securely pass the request to the relevant club and assist it as required.

How to delete your account:

1. Sign in to the app or website with your email address.
2. Open Team settings and scroll to the Account section.
3. Tap "Delete account" and confirm in the pop-up. This is permanent and cannot be undone.
4. Your sign-in, personal details, team assignments, coach alerts, push notification tokens and help answer reports are removed straight away. Clubs that have other coaches are kept (ownership passes to another coach); a club where you are the only member is removed along with its players, fixtures and links. Limited backups may retain data briefly before being overwritten.
5. Any Pro subscription is cancelled straight away, with no further charges.
6. If you cannot sign in, email hello@rhocholdings.com from your account email address and we will delete the account for you.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use only the storage the Service needs to work: keeping you signed in, remembering your selected club and team, and keeping your Help chats on your device. We do not use advertising or third-party tracking cookies.

We may update this policy from time to time. Material changes will be highlighted in the app or by email where practical. Continued use after changes take effect constitutes acceptance.