1.Who we are
The P.L.A.W application is operated by &Go, s.r.o., Vnútorná okružná 178/27, 945 01 Komárno, Slovak Republic, Company ID 46571388. You can write to us at support@plawsports.com.
We have not appointed a Data Protection Officer — at our size the law does not require one. Data protection questions are handled directly through the contact above.
2.First things first: we act in two different roles
This distinction drives everything else, so we say it up front.
Your data is ours to decide about. Your email, name, password and subscription status are what we need so that you can sign in and so that the service works. Here we are the controller, and this page is about what we do with it.
Your players' data is yours to decide about. Whom you add, what you note about them and how long you keep it in the app — those are your decisions. We are only the tool that stores them. This means we do nothing of our own with player data: no statistics outside your account, no model training, we never sell it and never use it for advertising. We do with it only what you ask us to.
(If you work for a club, federation or academy, that organisation decides about the players' data, not you — the data belongs to it. This does not affect your own account.)
3.What we process about you
At registration and sign-in: email, name, password (stored only as an unreadable hash — not even we can see it), your role, and a promo code if you used one.
While you use the app: subscription and trial status, how many players you may keep active, and your drill codes.
If you fill in billing details: company name, company address, company ID and tax ID. They appear on your invoices.
Automatically on every visit: IP address, browser type and the time of the request. This serves operation and abuse detection.
What we do not process at all: your payment details never pass through our systems (the payment provider handles them), we do not collect location data, and the app contains no advertising or tracking tool.
4.Why we need it and on what basis
| What for | Why we may | |---|---| | Running your account and signing you in | performance of the service contract | | Subscription, trial period, promo codes | performance of the contract | | Billing details on your invoices | performance of the contract | | Operation, security, abuse detection | our legitimate interest in keeping the service running and free of abuse | | Answering your questions | performance of the contract | | Invoices and accounting records | legal obligation |
We do not ask you for consent — it is not the legal basis for any of the above. This also means there is nothing to withdraw; if you no longer want the service, you end it.
5.Where the data is stored
The database is in Frankfurt, Germany — inside the European Union. The same applies to backups and to the servers the application runs on.
These providers help us, each with access only to what they need:
- Supabase — database and sign-in (Frankfurt, EU)
- Vercel — running the application (Frankfurt, EU)
- Resend — sending registration and password-reset emails
- Stripe — payments and invoices. If you fill in billing details, we pass them to Stripe so that they appear on your invoice. The invoice itself is issued by Link, a Stripe company that sells the subscription on our behalf.
Vercel, Resend and Stripe are US companies, so part of the processing may take place outside the EU; we have in place with them the standard contractual clauses designated by the European Union for that purpose.
We pass the data to no one beyond these providers and we do not sell it.
6.How long we keep it
| What | How long | |---|---| | Your account and its contents | as long as you have it — deleting the account removes everything | | An account not signed into for 24 months | we send a warning and then delete it | | An individual practice | at most 4 years from the date of the practice | | A player's records as a whole | one year after their last practice — we warn you in advance and offer a download | | Invoices and accounting records | 10 years (required by law) | | Billing details | until you clear them or delete your account — invoices already issued keep them for 10 years, as the law requires | | Operational logs | short-term, per our providers' settings |
Two rules apply to practice records, and whichever comes first wins:
- An individual practice lives for at most 4 years. Older entries are removed even for a player you still work with. We do not warn you about this separately — it would mean an alert about every ageing session — but you can ask us for a copy of your records at any time.
- A player's records disappear one year after their last practice. The clock runs from the last recorded session, so a player's return resets it. Before we delete them we send you a warning with the option to download them.
We do this because data about children should not be kept longer than it is needed for.
7.What is your responsibility
This is the part most applications never tell a coach — and they should.
Your players' data is in your hands. Three things follow from that:
1. Parents should know that you keep a record. We have prepared a ready-made text for you to hand over — you will find it at plaw.click/parent-notice. Nothing is signed; it is information. Hand it over within one month of adding the child at the latest, and if you give a parent an access code, then no later than that.
2. Health data belongs in the app only with the parent's consent. Injuries, illnesses and heart-rate data from a sports watch are a special category with a stricter regime. This includes a note such as "his knee was hurting" — do not write such things into free text without consent. The consent is part of the parent notice as a separate, optional paragraph.
3. Sharing is your decision. The access code for a parent and the link with a second coach are your decisions, and the app carries them out without further checks. Before you issue a code, make sure the parent expects it.
When a parent asks you something, you are not on your own. If they request access to what you hold about the child, a correction or deletion, write to us and we will help you handle it — including where the app itself does not allow it (for example in a practice that is already closed).
8.Your rights
You can ask us at any time for:
- access — what we hold about you,
- rectification of an incorrect entry,
- erasure of your account and its contents,
- restriction of processing,
- portability — your data in a readable format,
- to object to processing we base on legitimate interest.
Just write to support@plawsports.com. We will respond within one month at the latest, free of charge.
If you are not satisfied with how we handled it, you may contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
9.Cookies
The application uses only strictly necessary cookies: sign-in, the selected player, the time zone and the language of the public site.
We have no advertising or tracking scripts. On the public website only — not in the application after you sign in — we count visits with Vercel Web Analytics (which page was viewed, where the visitor came from, the country and the type of device), on the basis of our legitimate interest in improving the website. It uses no cookies, does not store IP addresses and keeps no profile of anyone. That is why we do not ask you for cookie consent and show no cookie banner — there is nothing to consent to.
10.Changes to this policy
If anything material changes — a new provider is added or the retention periods change — we will tell you by email or in the app. Quietly rewriting the page is not enough, and we do not do it.
This policy is effective from 1 October 2026. Last updated 20 October 2026: billing details added (§3, §4, §6) and Stripe added as a provider (§5). Earlier update 7 October 2026: website visit counting added to §9.