Privacy Policy

Who this policy covers

This policy explains how Level 8 handles personal data across two things:

• This website — where you can join our waitlist or request a demo.
• The Level 8 apps — the player app for iPhone and Android and the practitioner web app, used by sports clubs and their players.

Level 8 accounts are created by clubs for their players and staff. There is no public sign-up in the app.

Roles: your club and Level 8

For data in the apps, your club decides what is recorded about you and why — it is the data controller. Level 8 provides the software and processes that data on the club's instructions, as its processor. If you want your data corrected or removed, your club can act on it directly, and you can also ask us and we will act on the club's behalf.

For waitlist and demo requests made on this website, Level 8 is the controller.

Information we collect — this website

When you join our waitlist or request our investor deck or a demo, we collect your email address and, where you provide them, your name, club, and role. You provide this voluntarily.

We also measure how the website is used with Cloudflare Web Analytics. It counts page views, referrers, and countries in aggregate. It sets no cookies and does not track you across sites, so no consent banner is required.

Information we collect — the Level 8 apps

What appears in your profile is set by your club. Depending on what your club records, this can include:

• Identity and contact — name, email address, and the account identifier issued by our login provider.
• Player profile — date of birth or age group, nationality, playing position, jersey number, dominant foot, and a profile photo.
• Health and fitness data — physical measurements such as height and weight, and your answers to the wellness, readiness, and pain check-ins your club sends you. A check-in can ask you to mark where it hurts on a body map, so these answers can include pain and injury reports. A pain report that is still open is shown to you again on a later check-in, so you can say how it has changed.
• Voice comments — where a check-in asks for a comment, you can record a voice message of up to five minutes instead of typing it. The app uses your microphone only while you record, and your device asks for your permission the first time. The recording is stored with that answer on our own storage in the European Union, and it is played back by the staff at your club who are cleared to see that question. It is not turned into text, and no other company processes it. You can delete or replace a recording from the check-in. When you delete it, we remove the file from our storage.
• Training data — the sessions, schedules, and programmes your club assigns to you.
• Technical and diagnostic data — if the app crashes or hits an error, we receive a technical report (error message, screen, device type, app version) to fix it. These reports are not linked to your identity.
• App usage data — we record which screens you open and which controls you tap, so we can see which parts of the app are used and where players get stuck. These records carry no name, no email address, and no account identifier. Our analytics provider, PostHog, is described under Who can see your data below.
• Push notification data — if you allow notifications, we record your device's push token, its platform (iPhone or Android), and its language. The push token is the address your device is reached at. We release it when you sign out.

How we use this information

Website data is used to:

• Send you updates about Level8's launch and product development
• Provide access to requested materials such as our investor deck
• Communicate important announcements related to our service

App data is used only to:

• Show you your own schedule, sessions, profile, and measurements
• Deliver the wellness check-ins your club sends and return your answers to its staff
• Store the voice comment you record on a check-in and play it back to the staff at your club who are cleared to see that question
• Send you a notification when a check-in is waiting for you
• Let your club's practitioners support and plan your training
• Keep the app secure, working, and free of faults
• Count which screens are opened and which controls are tapped, so we can find where players get stuck and improve the app

We do not use your data for advertising or profiling unrelated to your training, we do not track you across other apps or websites, and we do not sell your personal information.

Who can see your data

Data in the app is visible to the practitioners and staff at your own club who are involved in your training, and to Level 8 staff only where needed to operate or support the service. It is not visible to other clubs or other clubs' players, and we do not share it with third parties for their own purposes.

We rely on a small number of service providers to run the platform — cloud hosting, our login provider, and error reporting — who process data on our instructions and are bound to protect it. We name the two that receive data from the player app:

• Google (Firebase Cloud Messaging) — delivers our notifications to your device. Its purpose is to remind you that a check-in is waiting. Google receives two things: your device's push token, and the text of the notification. The text names the check-in — for example, "Daily wellness is ready — tap to answer". Google does not receive your name, your answers, your measurements, or your training data. On an iPhone, Google passes the notification to Apple's push service for the last step of delivery.
• PostHog — measures how the app is used. Its purpose is to show us which screens and features players open and where they get stuck, so we can improve the app. PostHog receives the address of each screen you open with the identifiers removed, for example /sessions/:id, a fixed label for each control you tap, a signal when you tap the same spot repeatedly, the app version, your device type and operating system, your device time zone, an anonymous identifier for your installation of the app, and your club identifier. Your country and continent are worked out from your connection when the data arrives. PostHog is set to discard your IP address and to store nothing more precise than your country. PostHog does not receive your name, your email address, your account identifier, your check-in answers, your voice comments, or any of the text shown on your screen, and it makes no recording of your screen. We never tell PostHog who you are, so it holds no profile of you. The data is held in PostHog's European Union region and kept for a limited period. Because there is no profile, there is nothing for us to delete about you as a person, and the anonymous identifier is replaced with a new one every time you sign out, so two players who share a device are not linked to each other. We collect none of this for the shared demo team. This data is not used for advertising, and it is not used to track you across other apps or websites.

If you turn notifications off in your device settings, Google receives nothing further. The app continues to work, and your check-ins still appear when you open it.

If your club turns it on, a staff member can also connect an AI assistant to Level 8. See Connected AI assistants below.

Connected AI assistants

A staff member at your club can connect an AI assistant, such as Claude or ChatGPT, to Level 8, so they can ask questions about training in plain language. The assistant then reads some of your data from Level 8. Nothing is sent until two things have happened: a team administrator has turned on assistant access for the team, and the staff member has approved the connection in Level 8, choosing which teams it covers.

The assistant can read only what that staff member can already see in Level 8, and only for the teams they chose. Today that is:

• your name as shown in the app, your playing position, your groups, and whether your account is active
• the training sessions and matches you took part in: the date and start time, the type of session, and how many days it was from a match
• your training load for those sessions: minutes, your effort ratings (RPE) and the load worked out from them, and the GPS measurements your club records, such as distance and speed

The assistant does not receive your wellness or pain check-in answers, your voice comments, medical information, your contact details, your date of birth, your profile photo, or free text written about you or your sessions, such as notes or session titles.

The assistant belongs to a company other than Level 8, and the staff member uses it under their own account with that company. Your club decides whether its staff may use assistants and which ones. That company is not a service provider of Level 8, and its own terms and privacy policy apply to what it receives. It may be located outside the European Union.

Level 8 records every request an assistant makes with a valid connection: which connection made it, what it asked for, and which team it concerned. We provide these records to your club on request. The staff member can disconnect the assistant at any time, and a team administrator can turn off assistant access for the whole team; either takes effect on the assistant's next request. Data an assistant has already received stays with that assistant's company: Level 8 cannot recall it. To have it deleted, ask your club, which can ask the staff member to delete the conversation or ask the assistant's company directly.

Players under 18

Level 8 is used by youth clubs, so many players are minors. Their accounts are created and administered by the club, which is responsible for obtaining the consent or other legal basis required to record and process their data, and for involving parents and guardians as required locally. The app is not directed at children for consumer download, carries no advertising, and shares no data with third parties for marketing.

Notifications to a player's phone carry the same wording for every player. They name the check-in that is waiting and nothing else — no health answers, no measurements, and no other player's information. A parent or guardian can turn notifications off in the device settings at any time.

The app usage data described above never identifies a child. It carries no name, no email address, no account identifier, and no check-in answers, and we never ask our analytics provider to build a profile of a player. If a child records a voice comment on a check-in, it is heard only by the staff at their club who are cleared to see that question. It is not turned into text, and no other company processes it. A child, a parent, or a guardian can delete the recording from the check-in at any time.

A connected AI assistant receives a child's name and training data only if the club has turned on assistant access for the team and a staff member has approved the connection, as described under Connected AI assistants. It does not receive a child's check-in answers, voice comments, medical information, or contact details. The club decides whether to use assistants with players' data and is responsible for the legal basis, including informing parents and guardians where local law requires it.

Parents and guardians can review, correct, or request deletion of a child's data through the club, or by contacting us at hello@level-8.io.

Data storage, security, and retention

Data is transmitted over encrypted connections (HTTPS) and stored on secured infrastructure in the European Union. On your device, login credentials are held in the platform's secure storage (iOS Keychain or the Android Keystore).

We keep account and training data for as long as your club maintains your account, and delete it on a verified deletion request. We may retain limited records where the law requires it.

Your rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate information
• Request deletion of your personal information — in the app this is under Profile → Settings → Delete account
• Object to or restrict certain processing, and request a copy of your data
• Unsubscribe from our communications at any time

We action verified deletion requests within 30 days and confirm by email. You may also complain to your local data protection authority.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date above.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at hello@level-8.io. For help using the app, see our support page.