Privacy Policy — OptimalScout
Last updated: 28 May 2026
This Privacy Policy explains how OptimalScout (“we”, “us”, the “Controller”) collects and processes personal data through the OptimalScout mobile application (the “App”), in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD).
1. Data Controller
- Controller: OptimalScout
- Address: Spain
- Contact for privacy / data protection requests: info@optimalscout.com
- Data Protection Officer: DPO OptimalScout — dpo@optimalscout.com
2. Who this policy covers
OptimalScout is a football scouting and match-analysis tool used by scouts, coaches and clubs. We process two categories of personal data:
- (A) Users — the people who create an account and use the App.
- (B) Scouted individuals — football players (and, where relevant, other match participants) whose performance is observed and recorded by Users. Some of these players may be minors.
3. Personal data we process
A. Account / User data
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Name, email address | You / Apple or Google sign-in (via Clerk) | Create and manage your account; authenticate you | Performance of a contract — Art. 6(1)(b) |
| User ID, authentication metadata | Generated on sign-up (Clerk) | Secure access and data sync | Performance of a contract — Art. 6(1)(b) |
| Scouting content you create | You | Provide the service; sync across your devices | Performance of a contract — Art. 6(1)(b) |
B. Scouted player data
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Player name, shirt number, position, team, federation/player IDs | Public federation match reports (actas) from FCF / EFF / FFCV, or entered by the User | Identify the player within a scouting report | Legitimate interest in talent identification — Art. 6(1)(f) |
| Performance assessments: overall and potential ratings, skill attributes, preferred foot, free-text notes (profiling) | Created by the User | Record and analyse a player’s sporting performance | Legitimate interest — Art. 6(1)(f) |
| Photographs | Captured by the User | Illustrate the scouting report | Legitimate interest — Art. 6(1)(f) |
| Match events (goals, shots, substitutions, etc.) linked to a player | Recorded by the User | Match analysis and statistics | Legitimate interest — Art. 6(1)(f) |
Where we rely on legitimate interest, we have weighed our interest in football talent identification against the rights and freedoms of the individuals concerned. You may object to this processing at any time (see Section 9).
Source of player data (Article 14 GDPR)
Player data is generally not obtained directly from the player. It comes from (i) publicly published federation match reports and (ii) observations recorded by the User during matches.
4. Profiling
The App allows Users to record subjective performance assessments and potential ratings about players. This constitutes profiling under the GDPR. These assessments are the opinion of the scout, are used only for sporting evaluation, and are not used for automated decision-making that produces legal or similarly significant effects. Affected individuals have the right to object (Section 9).
5. Minors
The App may be used to scout players who are minors (youth football). We are committed to protecting children’s data:
- We collect only the minimum data necessary for sporting evaluation.
- We do not knowingly publish or make children’s data public.
- Where we rely on legitimate interests (Art. 6(1)(f) GDPR) for scouting minors, we limit data to what is necessary for sporting evaluation, apply access controls, and do not make children’s data public.
If you are a parent or legal guardian and believe a minor’s data has been recorded, contact us at info@optimalscout.com to exercise the rights in Section 9, including erasure.
6. Recipients and processors
We share data only with service providers acting as our data processors under Art. 28 GDPR:
- Clerk (authentication) — account identity and login.
- Supabase (database and file storage) — stores your account’s scouting data and photographs.
We do not sell personal data, and we do not use it for advertising.
7. International transfers
- Clerk processes data in the United States. Transfers are protected by the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses.
- Supabase data is stored in EU North (Stockholm) – eu-north-1. Where data is stored outside the European Economic Area, transfers are protected by Standard Contractual Clauses.
8. Retention
- Account data: kept while your account is active and deleted within 30 days of account closure.
- Scouting and player data: kept for as long as necessary for the scouting purpose, or until you delete it or a data subject exercises their right to erasure.
- Backups are overwritten on a rolling basis.
9. Your rights
Under the GDPR you have the right to: access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and to object to processing based on legitimate interest (including profiling). Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any right, contact info@optimalscout.com. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority:
- Spain: Agencia Española de Protección de Datos (AEPD) — https://www.aepd.es
- Catalonia: Autoritat Catalana de Protecció de Dades (APDCAT) — https://apdcat.gencat.cat
10. Security
We apply industry-standard measures — encryption in transit, access controls and authenticated synchronisation — to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified within the App or by email. The “Last updated” date reflects the most recent version.
12. Contact
OptimalScout — Spain — info@optimalscout.com