AIM.io Privacy Policy

Last Updated: 1/07/2026

Who We Are and Our Role


This Privacy Notice is issued by AIMREL OPERATING COMPANY LTD, a private limited company incorporated and registered in Cyprus with company number HE 493752 whose registered office is at Strovolou 140, Strovolos, 2042, Nicosia, Cyprus and any affiliated AIM entities involved in providing the Services (together, "AIM", "we", "us" or "our").


AIM provides a technology platform including a mobile application and website that enables football players, coaches, academies, clubs and other users to record training activities, upload videos, receive performance analytics, generate coaching insights and access related football development tools and services (the "Services").


The way in which AIM processes personal data depends on how the Services are used.


For the purposes of this Privacy Notice, Account, Academy, Aggregated Data, Derived Data, Minor, Outputs, Services and User Content have the meanings given in the Terms and Conditions. If there is any inconsistency between this Privacy Notice and the Terms and Conditions regarding the processing of personal data, this Privacy Notice shall prevail.


Direct Consumer Use


Where you create and use an account directly with AIM, AIM acts as the controller of your personal data. This means AIM determines how and why your personal data is processed in connection with:


(a) account registration and administration;

(b) subscriptions and payments;

(c) customer support;

(d) parental consent processes;

(e) notifications and communications;

(f) operation and security of the Services; and

(g) other activities described in this Privacy Notice.


Academy, Club and Organisational Use


Where the Services are used through a football academy, club, school or other organisation (an "Academy"), that Academy will generally act as the controller of personal data processed in connection with its use of the Services, including player registrations, training programmes, coaching activities and Academy-managed content.


In these circumstances, AIM generally acts as a processor on behalf of the Academy and processes personal data in accordance with the Academy's instructions and the agreement between AIM and the Academy.


If you use the Services through an Academy and have questions about how your personal data is used in connection with Academy activities, you should also refer to the Academy's own privacy information and policies.


Processing Carried Out by AIM as an Independent Controller


Regardless of whether you use the Services directly or through an Academy, AIM may process certain personal data as an independent controller where necessary to:


(a) operate, maintain and secure the Services;

(b) authenticate users and manage accounts;

(c) prevent fraud, abuse and unauthorised access;

(d) comply with legal and regulatory obligations;

(e) investigate safeguarding, security or compliance issues;

(f) generate aggregated, anonymised or de-identified analytics;

(g) monitor, evaluate and improve the performance, reliability and functionality of the Services; and

(h) exercise or defend legal rights and claims.


Contacting AIM


If you have any questions about this Privacy Notice or how AIM processes personal data, you may contact us using the contact details provided in the "Contact Us" section of this Privacy Notice.



What Personal Data We Collect


Depending on how you use the Services, we may collect and process the following categories of personal data. The categories of personal data described in this section are referred to throughout this Privacy Notice as outlined in the table below.


Identity Data


This may include:


(a) your name;

(b) username;

(c) date of birth;

(d) age;

(e) profile information; and

(f) information used to verify your identity or eligibility to use the Services.


Contact Data


This may include:


(a) email address;

(b) telephone number;

(c) parent or guardian contact information;

(d) Academy contact information; and

(e) communication preferences.


Account Data


This may include:


(a) account registration information;

(b) login credentials;

(c) authentication information;

(d) subscription information; and

(e) account settings and preferences.


Video, Image and Audio Data


This may include:


(a) training videos uploaded through the Services;

(b) photographs and images;

(c) audio recordings where audio functionality is used; and

(d) associated metadata relating to uploaded content.


Performance and Training Data


This may include:


(a) performance metrics;

(b) training statistics;

(c) exercise results;

(d) coaching assessments;

(e) player development information;

(f) AI-generated analytics; and

(g) Outputs generated through the Services.


User Content


This includes information, content, videos, images, comments, messages or other materials uploaded, shared, submitted or generated by users through the Services.


Parent and Guardian Data


Where a user is a Minor, we may collect:


(a) parent or guardian names;

(b) email addresses;

(c) consent records;

(d) verification information; and

(e) communications relating to parental consent or safeguarding matters.


Academy Data


Where the Services are used through an Academy, we may collect information relating to:


(a) Academy administrators;

(b) coaches;

(c) team membership;

(d) player registrations;

(e) Academy-managed training activities; and

(f) Academy account administration.


Communications Data


This may include:


(a) support requests;

(b) customer service communications;

(c) survey responses;

(d) feedback submissions; and

(e) other communications between you and AIM.


Device and Technical Data


This may include:


(a) device identifiers;

(b) operating system information;

(c) browser information;

(d) application version information;

(e) IP address;

(f) network information;

(g) crash reports;

(h) diagnostic information; and

(i) security logs.


Usage Data


This may include information about how you use the Services, including:


(a) features used;

(b) pages viewed;

(c) interactions with the Services;

(d) session activity;

(e) training activity;

(f) engagement metrics; and

(g) usage analytics.


Location Data


Where enabled by you, we may collect location information associated with your use of the Services.


Cookie and Tracking Data


We may collect information through cookies, software development kits (SDKs), analytics technologies and similar tracking technologies. Further information about cookies and tracking technologies is provided in the "Cookies, Analytics and Tracking Technologies" section of this Privacy Notice.


Derived, Aggregated and Analytical Information

We may generate Derived, Aggregated and Analytical Information from information collected through the Services.


Some of this information may constitute personal data but generally does not directly identify you and may be used to support analytics, benchmarking, security, research, service improvement and platform development activities.


Scouting and Profile Data


Where scouting or talent discovery features are used, we may collect information relating to player profiles, scouting preferences, talent identification activities, visibility settings and interactions with participating academies, clubs, coaches or scouts.



How We Collect Personal Data


We collect personal data from a variety of sources depending on how you use the Services.


Information You Provide Directly


We collect personal data that you provide directly to us when you:


(a) create an Account;

(b) complete your profile;

(c) subscribe to a paid service;

(d) upload videos, images or other User Content;

(e) communicate with us;

(f) participate in surveys, competitions or promotions;

(g) submit support requests; or

(h) otherwise interact with the Services.


Information Generated Through Your Use of the Services


When you use the Services, we automatically generate and collect information relating to your activities, including:


(a) training sessions;

(b) performance metrics;

(c) Outputs;

(d) usage information;

(e) account activity;

(f) coaching interactions; and

(g) analytics relating to your use of the Services.


Information Collected Through Device Permissions


Where you grant permission, the Services may collect information from your device, including:


(a) camera access;

(b) microphone access;

(c) photo or media libraries;

(d) contacts;

(e) location information;

(f) notifications; and

(g) other device functionality required for particular features.


You can manage many of these permissions through your device settings.


Information From Parents and Guardians


Where a user is a Minor, we may collect personal data directly from parents or guardians in connection with:


(a) parental consent processes;

(b) account verification;

(c) safeguarding matters;

(d) support requests; and

(e) communications relating to the Services.


Information From Academies and Organisations


Where the Services are used through an Academy, club, school or other organisation, we may receive personal data from that organisation, including:


(a) player registrations;

(b) team information;

(c) training programme information;

(d) Academy account administration information; and

(e) information required to provide the Services.


Information Collected Automatically


We may automatically collect Device and Technical Data, Usage Data and Cookie and Tracking Data through:


(a) cookies;

(b) software development kits (SDKs);

(c) analytics technologies;

(d) application logs;

(e) security monitoring systems; and

(f) similar technologies used to operate and improve the Services.


Information From Third Parties


We may receive personal data from third parties including:


(a) app store providers;

(b) payment providers;

(c) analytics providers;

(d) authentication providers;

(e) cloud and infrastructure providers;

(f) Academy partners; and

(g) other service providers used in connection with the Services.


We only collect personal data from third parties where we have a lawful basis to do so and where such collection is consistent with this Privacy Notice and applicable law.



Subscriptions & In-App Purchases

When you subscribe to a paid plan through the App Store, we collect and process certain transaction-related information to manage your subscription and provide access to premium features. This section explains what data we handle and how.


Information We Collect

When you make a purchase or restore a previous purchase, we receive the following information from Apple:

(a) Transaction ID and original transaction ID;

(b) Product identifier (the plan you subscribed to);

(c) Purchase date and expiration date;

(d) Subscription status (active, expired, cancelled, or in billing retry); and

(e) Renewal information and billing period.

We do not collect, store, or have access to your credit card number, bank account details, Apple ID password, or any other payment credentials. All payment processing is handled entirely by Apple through the App Store.

How We Use This Information

We use your transaction data to:

(a) Verify your purchase with Apple's App Store servers;

(b) Activate and manage your subscription tier and associated features;

(c) Track subscription renewals, expirations, and cancellations;

(d) Restore your subscription if you reinstall the app or switch devices; and

(e) Provide customer support related to your subscription.

Third-Party Payment Processing

All payments are processed by Apple Inc. through the App Store. Your purchase is subject to Apple's Terms of Service and Apple's Privacy Policy. We receive only the transaction metadata listed above — Apple does not share your financial or payment instrument details with us.

Data Retention

We retain your subscription and transaction records for as long as your account is active and for a reasonable period thereafter, in order to comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, your subscription records will be removed in accordance with our standard data retention practices.

Managing Your Subscription

You can manage or cancel your subscription at any time through your device Settings > Apple ID > Subscriptions. Cancellation takes effect at the end of the current billing period. We do not process refunds directly — refund requests should be made through Apple Support.

How We Use Personal Data

We only process personal data where we have a lawful basis to do so under applicable data protection laws.

The lawful basis we rely on depends on the purpose for which the personal data is processed.

Purpose

Categories of Personal Data

Lawful Basis

Creating and managing Accounts

Identity Data, Contact Data, Account Data

Performance of a contract

Providing the Services

Identity Data, Account Data, User Content, Performance and Training Data

Performance of a contract

Generating coaching feedback, analytics and Outputs

Video, Image and Audio Data, Performance and Training Data, User Content

Performance of a contract

Processing parental consent and safeguarding matters

Parent and Guardian Data, Identity Data, Account Data

Legal obligation, legitimate interests and, where applicable, consent

Providing customer support and responding to enquiries

Contact Data, Account Data, Communications Data

Performance of a contract and legitimate interests

Processing subscriptions and payments

Identity Data, Contact Data, Account Data, payment-related information

Performance of a contract

Operating, maintaining and securing the Services

Device and Technical Data, Usage Data, Account Data

Legitimate interests

Analysing User Content to generate Outputs, coaching insights, performance metrics and other functionality requested through the Services

Identity Date, Video, Image and Audio Data
Performance and Training Data and User Content

Performance of a contract

Developing, training and improving future versions of AIM's artificial intelligence-enabled functionality using identifiable User Content

Identity Date, Video, Image and Audio Data
Performance and Training Data and User Content

legitimate interests and, where applicable, consent.

Preventing fraud, abuse and unauthorised access

Account Data, Device and Technical Data, Usage Data

Legitimate interests

Monitoring compliance with our Terms, Community Guidelines and safeguarding requirements

Account Data, User Content, Usage Data

Legitimate interests

Communicating service updates, security notices and administrative messages

Contact Data, Account Data

Performance of a contract and legal obligation

Sending marketing communications where permitted

Contact Data

Consent or legitimate interests, depending on applicable law

Improving, testing, monitoring and developing the Services

Usage Data, Device and Technical Data, Aggregated Data, Derived Data

Consent, Legitimate interests

Producing analytics, benchmarking and service insights

Aggregated Data, Derived Data, Usage Data

Legitimate interests

Complying with legal, regulatory and law enforcement requirements

Any relevant category of personal data

Legal obligation

Establishing, exercising or defending legal claims

Any relevant category of personal data

Legitimate interests and legal obligation where applicable

Operating scouting and talent discovery features

Identity Data, Performance and Training Data, User Content, Scouting and Profile Data

Consent, contract and legitimate interests depending on the feature

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Where we rely on legitimate interests, we consider and balance any potential impact on individuals before carrying out the relevant processing activities.

Where we rely on contractual necessity, we may be unable to provide some or all of the Services if the relevant personal data is not provided.


Groups, Teams, Leaderboards and Scouting Features


Where users choose to participate in groups, teams, Academy environments, leaderboards, competitions, scouting programmes or other collaborative features, certain personal data may be visible to other authorised participants, coaches, Academy personnel, team managers, scouts or participating organisations depending on the functionality, settings and permissions associated with the relevant feature.


The information shared may include:


(a) Identity Data;

(b) User Content;

(c) Performance and Training Data;

(d) Outputs;

(e) rankings and statistics;

(f) profile information; and

(g) other information relevant to the feature.


Where a user is a Minor, additional parental, guardian or Academy permissions may apply before certain information can be shared through scouting, recruitment or talent discovery functionality.


Users remain responsible for reviewing and managing any visibility settings made available through the Services.


Artificial Intelligence and Automated Analysis


The Services use artificial intelligence-enabled functionality, computer vision systems, statistical models and other automated technologies to analyse training activities and generate coaching-related Outputs.


When you upload videos, images or other User Content through the Services, AIM may process that information to:


(a) identify and track movement patterns;

(b) analyse training activities and performance;

(c) generate coaching insights, analytics and recommendations;

(d) produce performance metrics and progress information;

(e) support Academy and coaching functionality; and

(f) provide, operate and improve the Services.


As part of this process, AIM may generate Outputs, Derived Data and Aggregated Data from User Content and other information collected through the Services.


Derived Data may include technical, statistical, movement-related, behavioural or performance-related characteristics generated through operation of the Services.


Aggregated Data may include anonymised or de-identified analytics, benchmarks, trends, usage information and service insights that do not directly identify individual users.


Automated analysis forms an important part of how the Services operate. However:


(a) Outputs may not always be accurate, complete or suitable for a particular purpose;

(b) Outputs may vary depending on data quality, recording quality, user inputs and other factors;

(c) Outputs should not be treated as professional coaching, medical, safeguarding or athletic advice; and

(d) human judgement should always be applied when evaluating Outputs and recommendations generated through the Services.


Improving Artificial Intelligence-Enabled Functionality


The processing of User Content necessary to analyse training activities, generate Outputs, produce coaching insights and otherwise provide the Services forms part of the Services requested by you, is necessary to provide those Services, and is carried out in accordance with the lawful bases described in this Privacy Notice.


Where AIM seeks to use identifiable User Content for the purpose of developing, training or improving future versions of its artificial intelligence-enabled functionality beyond what is necessary to provide the Services to you, AIM will only do so where permitted by applicable law and, where required, subject to any additional consent obtained from you or, in the case of a Minor, the Minor's parent or legal guardian.


This does not limit AIM's ability to use Derived Data, Aggregated Data or anonymised or de-identified information to monitor, evaluate, test, improve and develop the Services and related technologies where permitted by applicable law.


AIM may use Aggregated Data, Derived Data, Usage Data and Device and Technical Data to:


(a) monitor and evaluate service performance;

(b) improve the accuracy, reliability and functionality of the Services;

(c) develop and optimise analytics systems and artificial intelligence-enabled functionality;

(d) improve user experience;

(e) conduct testing, quality assurance and research activities; and

(f) maintain the security, stability and effectiveness of the Services.


Where possible and appropriate, AIM seeks to use aggregated, anonymised or de-identified information for service improvement activities.


AIM does not use personal data in a manner inconsistent with this Privacy Notice or applicable law.


Device Permissions


The Services may request access to certain features, functionality or information available on your device in order to provide specific features of the Services.


You can generally manage or withdraw these permissions through your device settings at any time. However, disabling certain permissions may prevent some features of the Services from functioning correctly.


Camera

The Services may request access to your device camera to allow you to:


(a) record training sessions;

(b) upload videos and images;

(c) generate coaching analytics and Outputs; and

(d) use video-based functionality available through the Services.


If camera access is disabled, certain video recording and analysis features may not be available.


Microphone


The Services may request access to your device microphone where audio recording functionality is used in connection with training sessions, video recording or related features.


If microphone access is disabled, audio recording features may not function.


Photos and Media Libraries


The Services may request access to photos, videos and media libraries stored on your device so that you can:


(a) upload User Content;

(b) select existing videos and images; and

(c) use media-based functionality available through the Services.


Contacts


Where available, the Services may request access to your contacts in order to:


(a) invite friends, teammates or other users;

(b) support team or group functionality; or

(c) facilitate sharing and collaboration features.


Access to contacts is optional and is only used in connection with the relevant functionality.


Notifications


The Services may request permission to send push notifications relating to:


(a) training reminders;

(b) account activity;

(c) coaching updates;

(d) service announcements;

(e) safeguarding or security notifications; and

(f) other information relating to the Services.


You can manage notification preferences through your device settings or account settings where available.


Location Information


Where enabled by you, the Services may collect location information in order to:


(a) support location-based functionality;

(b) provide relevant content;

(c) enable training session tagging; or

(d) support other features made available through the Services.


Location access is optional and can be disabled through your device settings.


Other Device Permissions


From time to time, the Services may request access to additional device features where reasonably necessary to provide specific functionality. AIM will explain the purpose of any such request at the time the permission is requested.


AIM only requests permissions that are reasonably required to provide, operate, secure or improve the Services and does not access device functionality without the permissions granted by you or otherwise permitted by applicable law.





Cookies, Analytics and Tracking Technologies


The Services use cookies, software development kits (SDKs), device identifiers, analytics technologies and similar tracking technologies to collect information about how users interact with the Services.


These technologies help us to:


(a) provide and operate the Services;

(b) authenticate users and maintain account sessions;

(c) remember preferences and settings;

(d) maintain security and prevent fraud;

(e) diagnose errors and technical issues;

(f) monitor performance and reliability;

(g) analyse how the Services are used;

(h) improve functionality and user experience; and

(i) measure the effectiveness of features, communications and updates.


The information collected through cookies and similar technologies may include:


(a) Device and Technical Data;

(b) Usage Data;

(c) account and session identifiers;

(d) application performance information;

(e) crash reports and diagnostic information;

(f) device information; and

(g) analytics information.


Some cookies and tracking technologies are strictly necessary for the operation, security and functionality of the Services. These technologies cannot generally be disabled without affecting the operation of the Services.


Other cookies and tracking technologies may be used for analytics, performance monitoring, personalisation or similar purposes. Where required by applicable law, we will request your consent before using such technologies.


We may use third-party analytics, infrastructure, communications, hosting, monitoring and support providers in connection with the Services. These providers may receive information collected through cookies, SDKs or similar technologies solely for the purposes described in this Privacy Notice and under appropriate contractual safeguards.


You can manage certain cookie and tracking preferences through:


(a) the consent tools made available within the Services;

(b) your browser settings;

(c) your device settings; or

(d) other controls provided by the relevant platform provider.


Restricting or disabling certain cookies, SDKs or tracking technologies may affect the availability, functionality or performance of some features of the Services.


For information about the third-party service providers we use and the categories of information they receive, please see the "How We Share Personal Data" section of this Privacy Notice.


How We Share Personal Data


We do not sell personal data. We only share personal data where necessary to provide the Services, comply with legal obligations, protect users, support Academy functionality or otherwise operate our business in accordance with this Privacy Notice and applicable law.


Service Providers


We may share personal data with trusted service providers that assist us in operating, maintaining, supporting and improving the Services.


These may include:


(a) cloud hosting providers;

(b) infrastructure providers;

(c) data storage providers;

(d) communications providers;

(e) customer support providers;

(f) payment providers;

(g) analytics providers;

(h) security and fraud prevention providers;

(i) authentication providers; and

(j) other technology service providers used in connection with the Services.


These providers are only permitted to process personal data on our behalf and in accordance with our instructions and contractual requirements.


Academies, Clubs and Organisations


Where the Services are used through an Academy, club, school or other organisation, personal data may be shared with authorised Academy personnel and we may also share personal data for the purposes of scouting including:


(a) coaches;

(b) administrators;

(c) safeguarding personnel;

(d) team managers; and

(e) other authorised representatives.


The information shared may include User Content, training information, Outputs, performance data, account information and other information relevant to the Academy's use of the Services.


Parents and Guardians


Where a user is a Minor, personal data may be shared with parents or guardians in connection with:


(a) parental consent processes;

(b) account administration;

(c) safeguarding matters;

(d) progress tracking; and

(e) other features of the Services that involve parental participation

Other Users


Where you choose to participate in team, coaching, group, leaderboard, social or collaborative features, certain information may be visible to other authorised users depending on the relevant settings and functionality of the Services.


Professional Advisers


We may share personal data with our professional advisers, including lawyers, accountants, auditors, insurers and other advisers where reasonably necessary to obtain professional advice, protect our interests or comply with legal obligations.


Legal and Regulatory Disclosures


We may disclose personal data where reasonably necessary to:


(a) comply with applicable law;

(b) comply with court orders or legal processes;

(c) respond to requests from regulators or competent authorities;

(d) protect the rights, safety or security of users, AIM or third parties;

(e) investigate fraud, abuse, safeguarding concerns or unlawful activity; or

(f) establish, exercise or defend legal rights or claims.


Corporate Transactions


If AIM is involved in a merger, acquisition, investment, financing, reorganisation, sale of assets or similar corporate transaction, personal data may be disclosed to relevant parties involved in that transaction, subject to appropriate confidentiality and security protections.


Aggregated and De-Identified Information


We may share Aggregated Data, Derived Data, benchmarking information, analytics and other de-identified information that does not directly identify individuals for operational, research, development, analytics, reporting or business purposes.


International Transfers


Some recipients of personal data may be located outside your country of residence. Further information about international transfers is provided in the "International Transfers" section of this Privacy Notice.


Scouting and Talent Discovery Features


Where users choose to participate in scouting, talent discovery or recruitment-related functionality, personal data, User Content, Outputs, performance information and profile information may be shared with participating academies, clubs, coaches, scouts or other authorised organisations in accordance with the user's settings, permissions and preferences.


Where a user is a Minor, additional parental, guardian or Academy permissions may apply.




International Transfers


The Services are operated using cloud-based infrastructure, technology providers and service providers that may be located in, or process personal data from, multiple countries. As a result, personal data may be transferred to, accessed from or processed in countries outside your country of residence and as the Services rely on internationally distributed technology infrastructure, restricting international transfers may affect the availability or functionality of certain features of the Services.


Where personal data is transferred internationally, AIM takes appropriate steps to ensure that personal data remains protected and that such transfers are carried out in accordance with applicable data protection laws.


Depending on the circumstances, these safeguards may include:


(a) transfers to countries that have been recognised as providing an adequate level of data protection;

(b) standard contractual clauses or equivalent approved transfer mechanisms;

(c) contractual and organisational safeguards imposed on service providers and group companies; and

(d) other lawful transfer mechanisms permitted under applicable law.


You may contact us at any time if you would like further information regarding the safeguards used in connection with international transfers of personal data.



Children's Privacy


AIM is committed to protecting the privacy, safety and wellbeing of children and young people who use the Services.


The Services may be used by Minors where permitted by applicable law and in accordance with the requirements described in this Privacy Notice and our Terms and Conditions.


Parental Consent


Where required by applicable law, AIM will obtain parental or guardian consent before allowing a Minor to access or use certain features of the Services.


As part of this process, AIM may:


(a) request a parent or guardian's contact information;

(b) provide information about the Services and this Privacy Notice;

(c) request and record parental or guardian consent;

(d) verify consent through reasonable verification measures; and

(e) maintain records relating to parental consent and account administration.


Minor Accounts may remain restricted, suspended or inactive until the required parental or guardian consent process has been completed.


Academy and Organisational Use


Where a Minor uses the Services through an Academy, club, school or other organisation, that organisation may also be responsible for obtaining and maintaining parental permissions, consents, notices or approvals required under applicable law.


In such circumstances, AIM may rely on information, permissions and instructions provided by the relevant organisation, while also operating its own parental consent, safeguarding or verification processes where appropriate.


Information We Collect About Minors


The categories of personal data collected about Minors are generally the same as those described elsewhere in this Privacy Notice and may include:


(a) Identity Data;

(b) Contact Data;

(c) Account Data;

(d) Video, Image and Audio Data;

(e) Performance and Training Data;

(f) User Content;

(g) Device and Technical Data; and

(h) Usage Data.


Parental Rights


Subject to applicable law and any Academy controller relationship, parents and guardians may have rights to:


(a) access personal data relating to their child;

(b) request correction of inaccurate information;

(c) request deletion of personal data;

(d) withdraw consent where consent is the lawful basis for processing;

(e) object to certain processing activities; and

(f) raise questions or concerns regarding their child's use of the Services.


Where personal data is processed on behalf of an Academy or other organisation acting as controller, certain requests may need to be directed to that organisation.


Safeguarding


AIM may process personal data relating to Minors where reasonably necessary to:


(a) support safeguarding activities;

(b) investigate safety concerns;

(c) prevent misuse of the Services;

(d) comply with legal obligations; or

(e) protect users, AIM or third parties.


If we become aware that personal data has been collected or processed in a manner inconsistent with applicable law, parental consent requirements or safeguarding obligations, we may take appropriate action, including restricting or removing access to the Services.


Where scouting or talent discovery functionality is made available to Minors, AIM may require additional parental, guardian or Academy permissions before certain information can be shared with participating organisations.


Data Retention


We retain personal data only for as long as reasonably necessary to:


(a) provide the Services;

(b) fulfil the purposes described in this Privacy Notice;

(c) comply with legal, regulatory, safeguarding and contractual obligations;

(d) resolve disputes;

(e) enforce our rights and agreements; and

(f) maintain the security, integrity and operation of the Services.


The length of time we retain personal data depends on the nature of the information, the purposes for which it is processed and any applicable legal or operational requirements.


Account Data


We generally retain Account Data for as long as your account remains active and for a reasonable period afterwards where necessary for legal, operational, security or compliance purposes.


User Content and Training Data


Videos, images, User Content, training records, performance information and related data may be retained while your account remains active so that you can access historical training information, Outputs and progress tracking features.


You may be able to delete certain User Content through the Services. Where User Content is deleted, it will generally be removed from active systems within a reasonable period, subject to:


(a) legal obligations;

(b) safeguarding requirements;

(c) security requirements;

(d) backup and disaster recovery processes; and

(e) Academy controller instructions where applicable.


Academy-Managed Data


Where the Services are used through an Academy, club, school or other organisation acting as controller, retention and deletion of personal data may be governed by that organisation's instructions and applicable agreements between AIM and the organisation.


Aggregated and Derived Data


Aggregated Data, Derived Data, benchmarking information, analytics and de-identified information may be retained for longer periods where such information no longer directly identifies an individual and may lawfully be used for operational, research, development, security, reporting or service improvement purposes.


Backups and Security Records


Certain information may remain within backup systems, security logs, audit records and disaster recovery systems for limited periods after deletion from active systems.


Account Deletion


You may request deletion of your account and personal data in accordance with the rights described in this Privacy Notice and any functionality made available through the Services.


Deleting your account will generally result in the deletion or de-identification of personal data processed by AIM as controller, subject to the exceptions described in this Privacy Notice and applicable law.



Where personal data is processed on behalf of an Academy or other organisation acting as controller, requests relating to Academy-managed data may need to be directed to that organisation.


When personal data is no longer required, we will delete, anonymise or securely dispose of it in accordance with our retention practices and applicable law.




Your Rights


Subject to applicable law, you may have certain rights in relation to your personal data.


These rights may include:


Right of Access


You may request confirmation of whether we process personal data about you and request access to that personal data together with information about how it is used.


Right to Correction


You may request that inaccurate or incomplete personal data be corrected or updated.


Right to Deletion


You may request deletion of personal data in certain circumstances, including where the personal data is no longer required for the purposes for which it was collected or where consent has been withdrawn and no other lawful basis applies.


Right to Restrict Processing


You may request that we restrict processing of personal data in certain circumstances, including while the accuracy of information is being verified or where an objection to processing is being considered.


Right to Object


Where we process personal data based on legitimate interests, you may object to that processing in certain circumstances.


You may also object to the use of your personal data for direct marketing purposes at any time.


Right to Data Portability


Where applicable, you may request a copy of certain personal data in a structured, commonly used and machine-readable format and request that it be transferred to another provider where technically feasible.


Right to Withdraw Consent


Where we rely on consent as the lawful basis for processing, you may withdraw your consent at any time.


Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.


Rights Relating to Children


Parents and guardians may have additional rights in relation to personal data processed about Minors, including rights relating to parental consent, access requests and deletion requests, subject to applicable law.


Academy-Managed Data


Where personal data is processed through an Academy, club, school or other organisation acting as controller, certain requests may need to be directed to that organisation.


Where AIM acts as processor on behalf of an Academy, we will assist the relevant organisation in responding to requests in accordance with applicable law and our contractual obligations.


Exercising Your Rights


You may exercise your rights by contacting AIM using the details provided in the "Contact Us" section of this Privacy Notice.


We may request additional information to verify your identity before responding to a request.


Complaints


If you believe that your personal data has been processed in a manner that does not comply with applicable law, we encourage you to contact us first so that we have an opportunity to address your concerns.


You may also have the right to lodge a complaint with a competent supervisory authority or data protection regulator.




Data Security


AIM takes the security of personal data seriously and implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful forms of processing.


These measures may include:


(a) access controls;

(b) authentication procedures;

(c) encryption and secure transmission technologies;

(d) network and infrastructure security controls;

(e) monitoring and logging systems;

(f) backup and recovery procedures; and

(g) security policies and staff training.


Access to personal data is restricted to individuals, service providers and authorised personnel who require access for legitimate business purposes and who are subject to appropriate confidentiality obligations.


While AIM takes reasonable steps to protect personal data, no internet transmission, electronic storage system or technology platform can be guaranteed to be completely secure. As a result, AIM cannot guarantee the absolute security of personal data.


Users are responsible for maintaining the confidentiality of their login credentials and for taking reasonable steps to protect devices, networks and accounts used to access the Services.


If AIM becomes aware of a personal data breach that requires notification under applicable law, AIM will take appropriate action and provide any required notifications.



Changes to this Privacy Notice


AIM may update this Privacy Notice from time to time to reflect changes in:


(a) the Services;

(b) applicable law;

(c) regulatory requirements;

(d) technology;

(e) business operations; or

(f) our personal data processing activities.


When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Notice.


Where changes are material, AIM may provide additional notice through:


(a) the Services;

(b) email;

(c) push notifications; or

(d) other reasonable communication methods.


We encourage you to review this Privacy Notice periodically to remain informed about how personal data is processed and protected.


Where required by applicable law, AIM will obtain any additional consent required before carrying out new processing activities.


Contact Us


If you have any questions about this Privacy Notice, the Services or how AIM processes personal data, you can contact us using the details below.


AIMREL OPERATING COMPANY LTD

Strovolou 140, Strovolos, 2042, Nicosia, Cyprus

Email: Support@aim.io

Website: aim.io


If you wish to exercise any of your privacy rights, make a complaint, withdraw consent, submit a safeguarding concern or ask a question about how personal data is processed, please contact us using the details above.


Where required by applicable law, AIM may provide additional contact information, regulatory information or representative details through the Services or on its website.