Last updated: 23 June 2026
1. About this policy
CP Academy ("we", "us", "our") provides the CP Performance app, a subscription service that helps young footballers develop through coaching content, programmes and personal tools. This policy explains what personal information we collect, how we use it, and the rights you have. It is written for our users in the United Kingdom and the European Economic Area.
We are the data controller for your personal information. Our details are: CP Academy, [insert your registered business name and address]. Contact: [insert your contact email, for example support@cpperformance.app].
If you are a parent or guardian, this policy also explains how we handle the information of a child in your care.
2. Who can use CP Performance
The app is intended for players, parents or guardians, and coaches in the United Kingdom and the European Economic Area. A child aged 13 or over may create their own account and give their own consent. For a child under 13, a parent or guardian must give verified consent before the child can use the app. Some sensitive content, such as our wellbeing pillar, has extra protections and may require parental consent.
3. The information we collect
We collect the following kinds of personal information:
(a) Account information: your email address, a securely stored password, and sign in records.
(b) Profile information: your name or display name, your role as a player, parent or coach, your age band, and a profile photo if you choose to add one.
(c) Player details: football information you add to your player card, such as position and preferred foot.
(d) Personalisation answers: the choices you make during onboarding so we can tailor the content.
(e) Your private content: journal entries, reflections and notes you write in the app. These are private to you.
(f) Activity and progress: the lessons and programmes you view and complete.
(g) Family account information: invite codes that link a parent and a child. A linked parent can see a summary of a child's progress only. A parent cannot see a child's private reflections or journal.
(h) Support messages: the messages you send us through in app support.
(i) Payment information: your subscription status and the references needed to manage it. Card payments are handled by Stripe. We do not see or store your full card details.
(j) Technical information: device and app information, and log data that helps us keep the service secure and reliable.
4. How we use your information and our legal bases
We use your information to:
(a) provide the app and your subscription. Our legal basis is performance of a contract with you.
(b) create and secure your account and prevent misuse. Our legal basis is our legitimate interests in running a safe service, and our legal obligations.
(c) personalise the content and track your progress. Our legal basis is performance of a contract, and consent where required.
(d) handle parental consent and protect children. Our legal basis is our legal obligations and the protection of children.
(e) respond to your support requests. Our legal basis is performance of a contract and our legitimate interests.
(f) send you service messages, such as confirmations and important notices. Our legal basis is performance of a contract.
(g) send you marketing only if you have asked for it. Our legal basis is your consent, which you can withdraw at any time.
(h) improve and maintain the service and fix problems. Our legal basis is our legitimate interests.
(i) where our wellbeing content or your private reflections involve information about health or wellbeing, we treat this with extra care. We rely on your explicit consent for this kind of information, and for a child under 13 we rely on a parent or guardian's explicit consent. You can withdraw this consent at any time, and your private reflections are never shared with other users.
Where we rely on consent and the user is a child under 13, we obtain that consent from a parent or guardian.
We do not make decisions about you using only automated means that would have a legal or similarly significant effect on you.
5. How we share your information
We do not sell your personal information. We share it only with trusted providers who help us run the service, and only as needed. These include:
(a) Supabase, which hosts our database, accounts and stored files.
(b) Stripe, which processes subscription payments.
(c) Cloudflare, which delivers video and content and helps protect the service.
(d) Resend, which sends our service emails.
(e) diagnostic and analytics providers that help us understand reliability and fix errors, where enabled.
We may also share information if the law requires it, to protect the safety of people, or as part of a sale or reorganisation of our business.
6. Storing information outside the United Kingdom and the European Economic Area
Some of our providers may process information in countries outside the United Kingdom and the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as approved contract terms or an adequacy decision, so that your information stays protected. You can ask us for more information about these safeguards, or a copy of them, by contacting us using the details in section 1.
7. How long we keep your information
We keep your personal information for as long as your account is active, and for a reasonable period afterwards so we can meet legal, accounting and security needs. When information is no longer needed, we delete it or make it anonymous. You can ask us to delete your account at any time from within the app.
As a guide, we keep account and profile information for as long as your account is open, and then delete or make it anonymous within a reasonable period after closure, normally no later than twelve months, unless we must keep certain records for longer. We keep billing and tax records for the period required by law, normally six years. We keep support messages for as long as needed to handle your query and a short period afterwards. We delete a child's information sooner where we no longer need it.
8. Children's privacy
Protecting children is very important to us. We follow the United Kingdom Age Appropriate Design Code. We collect the minimum information needed, we keep high privacy settings on by default, and we do not show behavioural advertising to children. A child under 13 needs verified parental consent before using the app. We take reasonable steps to confirm that the person giving consent for a child under 13 is genuinely their parent or guardian. A parent or guardian can review, or ask us to delete, a child's information at any time.
9. Your rights
Under data protection law you have the right to:
(a) ask for a copy of the personal information we hold about you.
(b) ask us to correct information that is wrong or incomplete.
(c) ask us to delete your information.
(d) ask us to limit how we use your information.
(e) object to certain uses of your information.
(f) ask us to transfer your information to another provider.
(g) withdraw your consent at any time, where we rely on consent.
To use any of these rights, please contact us using the details in section 1. You will not usually have to pay, and we will respond within the time limits set by law.
10. Complaints
If you are unhappy with how we handle your information, we hope you will contact us first so we can try to put things right, although you do not have to. You have the right to complain to the Information Commissioner's Office at any time. You can reach the ICO at ico.org.uk, by their telephone helpline, or by post to their published address. If you live in the European Economic Area, you can instead complain to the data protection authority in your country.
11. Keeping your information secure
We use technical and organisational measures to protect your information, including encryption in transit, access controls and secure hosting. No service can be completely secure, but we work hard to protect your information and to respond quickly if a problem occurs. If a security problem affects your personal information and is likely to put your rights at risk, we will tell the relevant regulator, and we will tell you, where the law requires us to.
12. Storage on your device
The app stores some information on your device so you can stay signed in and so content works when you are offline. Our website may use a small number of essential cookies needed to provide the page. We do not use these for advertising.
13. Changes to this policy
We may update this policy from time to time. If we make an important change, we will let you know in the app or by email. The date at the top shows when it was last updated.
14. Contact us
If you have any questions about this policy or your information, please contact CP Academy at hello@cpperformance.app.