1. Introduction

ReplayIQ ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rugby referee training platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use our services, and information from third parties.

2.1 Personal Information

When you create an account with us, we collect the following personal information:

• First Name: Required for account creation and personalisation of your training experience
• Surname: Required for account creation and identification purposes
• Email Address: Used for account authentication, communication, and password recovery
• Profile Picture: Optional - used to personalise your account interface

2.2 Usage Data

We automatically collect certain information when you access and use our platform:

• Training module completion and assessment results
• Time spent on different training activities
• Decision patterns and accuracy in incident review scenarios
• Video interaction data (play, pause, rewind actions)
• Platform usage frequency and session duration

2.3 Technical Data

We collect technical information including IP address, browser type and version, operating system, device information, and referral source to ensure platform security and optimal performance.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our training platform
• To personalise your training experience and track your progress
• To provide assessment results and performance analytics
• To communicate with you about your account and platform updates
• To ensure platform security and prevent unauthorised access
• To improve our services and develop new training content
• To comply with legal obligations and enforce our terms of service

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of our contract with you to provide training services
• Legitimate Interests: Our legitimate business interests in improving services, security, and platform functionality
• Legal Compliance: Processing necessary to comply with legal obligations to which we are subject
• Consent: Where you have given clear consent for specific processing activities

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this privacy policy. We may share your information in the following circumstances:

5.1 Third-Party Service Providers

• Video Hosting Services: We use api.video for secure video hosting and delivery of training content
• Analytics Services: We may use analytics services to understand platform usage and improve user experience
• Cloud Infrastructure: Our platform is hosted on secure cloud infrastructure providers

6. Data Retention

We retain your personal information for as long as necessary to provide our services and for legitimate business purposes, including maintaining your training history and progress. When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal compliance.

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backup and disaster recovery procedures
• Staff training on data protection and security best practices

8. Your Rights

Under data protection law, you have several rights regarding your personal information:

• Right of Access: You can request a copy of the personal data we hold about you
• Right of Rectification: You can request correction of inaccurate or incomplete personal data
• Right of Erasure: You can request deletion of your personal data in certain circumstances
• Right of Data Portability: You can request transfer of your data to another service provider
• Right of Objection: You can object to processing of your personal data for legitimate interests
• Right of Restriction: You can request restriction of processing in certain circumstances

9. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us provide and improve our services.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including authentication and security
• Functional Cookies: Remember your preferences and settings to enhance your experience
• Analytical Cookies: Help us understand how you use our platform to improve our services

10. International Data Transfers

Your personal data may be transferred to and processed in countries other than your own. We ensure that such transfers are subject to appropriate safeguards, including adequacy decisions or standard contractual clauses approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at:

Data Protection Officer, admin@replayiq.app

12.1 Download Your Personal Data

You can download a copy of your personal data that we hold about you. This includes your profile information and training history.

Please log in to download your personal data.