1. Who handles your information
Groute is a football team management service at groutesport.com. Contact the Groute operator at groutesport@gmail.com for privacy questions, account requests or complaints.
Groute controls the use of information needed to run accounts, secure the service and provide support. Your club decides which player and team records to enter, who can access them and what to publish. Groute handles those records to provide the club's management tools. Your club is responsible for its own use of that information and for giving players, and parents or guardians where appropriate, its privacy information.
2. Information we receive
- Account details: name, email address, account identifier, verification status, club roles, profile image if provided, and sign-in and security records. Passwords are stored as one-way hashes.
- Club records: club and team names, player names, dates of birth or junior status, shirt numbers, positions, squad membership and availability.
- Football records: fixtures, opponents, locations, line-ups, appearances, minutes played, match events, results, statistics, coach notes and match reports.
- Support and technical information: messages you send us, IP address, browser and device information, request times, errors and performance measurements used to operate and protect the service.
Information comes from you, authorised club staff, files that staff import, your use of the service, and Google if you choose Google sign-in. Club records may concern people who do not have a Groute account. Do not put medical records, safeguarding reports, identity documents or other sensitive information in player names, notes or reports.
3. Why we use it
We use account information to provide sign-in, account recovery, invitations and the features you request. Our basis for this use is performance of our agreement with you. Essential account fields are required to provide an account; a profile image is optional.
We use limited security, support and technical records for our legitimate interests in preventing misuse, resolving faults and keeping the service reliable. We consider the effect on people when using this basis. We may keep or disclose information where a legal obligation requires it. Where a feature requires consent, we will ask separately; accepting terms is not consent to unrelated marketing.
Your club must identify its own lawful basis for player and team records and explain that basis to the people concerned. We use those records to deliver its requested features. We do not sell personal information or use Google account data for targeted advertising.
4. Google sign-in
If you select Google sign-in, Google provides an account identifier, email address and basic profile information, such as your name and profile image. We use this to authenticate you, maintain your Groute account and display your profile. We do not request access to Gmail, Google Drive, contacts or calendars. Groute does not receive your Google password.
You can remove Groute's access in your Google Account settings. This can stop Google sign-in; it does not by itself delete Groute or club records. Contact us for account deletion. Google handles its own account and consent services under its Privacy Policy.
5. Optional AI match reports
When an authorised staff member requests an AI draft, Groute sends the selected match facts and coach notes to Google Gemini. Facts can include team and opponent names, score, match events, appearances and player display names. The returned draft and notes are stored with the match. Signing in with Google does not itself send your club records to Gemini.
Use only information that your club is authorised to share. Do not include contact details, dates of birth, guardian details, health information or safeguarding information in the notes. Check names and other personal details before generation and review the draft before sharing it. An AI draft can contain mistakes. Groute does not use it to make decisions with legal or similarly significant effects on people.
Google's Gemini API terms explain its processing. They apply paid-service data handling to UK, EEA and Swiss use, including unpaid quota: prompts and responses are not used to improve Google products, but may be logged for safety and legal purposes. Elsewhere, unpaid-service content may be used for improvement and reviewed by people. Google may process data internationally. These rules are separate from Google sign-in.
6. Who can see information
Authorised people in your club can access records according to their roles. Groute administrators may access information when needed to provide support, manage access or investigate a fault or abuse. If club staff publish or share a public match or line-up link, people with that link may view the published information. Staff must check the club's junior-player privacy settings and the actual published page before sharing.
Service providers handle information needed to supply their services. These include Supabase for the existing database and authentication, Vercel for existing hosting and performance measurements, and Cloudflare for the replacement hosting, database and private image storage during the migration. Resend supplies account email delivery for the replacement service. Google supplies optional sign-in and AI generation. Email providers receive the recipient address and message content needed for delivery.
Providers may process information outside the UK, including in Europe and the United States. Where UK transfer rules apply, transfers must use an applicable adequacy arrangement or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your records. A database region does not mean every provider operation takes place in that region.
We may disclose necessary information to meet a lawful request, protect people or investigate misuse. Access must be limited to the purpose of the disclosure.
7. Children, cookies and device storage
The current service is for coaches, managers and administrators aged 18 or over. A club may keep records about junior players. The club must have authority to do so, inform the relevant people and apply suitable access and publication controls. Junior-player records do not create an account for a child.
Groute uses cookies or browser storage for sign-in, security, theme and selected team or profile preferences. Offline match recording can store pending events on your device until they are sent to the service. Use a trusted device and sign out on shared devices. Clearing browser storage can remove unsent events and preferences.
The existing Vercel-hosted service uses Vercel Speed Insights to measure page performance. Groute does not run advertising cookies or session replay in the application. Google and other providers have their own notices when you visit their services.
8. Retention and security
We retain account information while it is needed to provide and secure the account. Club records can include past seasons, so their useful life may extend beyond one season or a person's departure. Retention decisions consider the club's active use, correction or deletion requests, security needs, unresolved disputes and legal duties. Ask your club or Groute about removal of records that are no longer needed.
Deletion of an account and deletion of a club's football records are separate requests. We may need to retain limited information where there is a valid reason, or remove an association with a person rather than erase an entire match. Protected backups may retain historical copies until they are replaced or removed; restored data must remain subject to accepted deletion requests.
We use access controls, secure connections and protected credentials. No online service can guarantee complete security. Tell us promptly if you think an account or record has been accessed without permission.
9. Your rights and contact
Depending on the circumstances, you can ask to access, correct, erase or restrict use of your information, or receive a portable copy. If we rely on consent, you can withdraw it without affecting earlier lawful use. You have a right to object to processing based on legitimate interests. These rights can have legal limits.
Email groutesport@gmail.com with your request. We may need to verify your identity. For club-supplied records, contact the club as well so it can address its use of the information. We will explain any valid reason that prevents a requested action. You can complain to the UK Information Commissioner's Office or your local data protection authority.
We will update this page when our practices change. The date at the top identifies this version. For a material change that affects current users, we will also provide an appropriate notice in the service or by email.