Privacy Policy

KASI ATHLETE AI™ is operated by [Company legal name], at [Registered address]. The organisation responsible for personal data is [Data controller]. Applicable privacy laws and processing grounds: [Applicable laws and lawful bases].

The service holds athlete profile and contact details, sporting information, social handles and self-reported metrics, content drafts and uploaded media, consent records, and service usage information. Metrics are entered manually; they are not guaranteed to be independently verified.

Exact data categories, required fields and usage-log scope: [Data collection schedule].

Information supports athlete onboarding, profile management, readiness assessments, 90-day plans, content work, AI suggestions and performance learning. It also supports consent records, account administration and service security. Processing purposes and lawful grounds: [Purpose and lawful-basis schedule].

Athletes can view their own information. Assigned managers and KASI administrators can access information within their authorised responsibilities. Other assigned staff access depends on their role and permissions. Approved access scope and any additional recipients: [Access and recipient schedule].

Service providers involved in hosting, storage and AI processing: [Service provider list and contractual safeguards].

When an AI feature is requested, relevant profile and content information is sent to the third-party provider OpenAI through KASI's servers. Private provider keys and prompts are not exposed in the browser. AI does not publish content automatically.

Data sent for each feature, provider retention, training settings and international-transfer safeguards: [AI processing terms and provider settings].

Data and media are stored in [Storage region]. Processing may also occur in [Provider processing regions]. Retention periods, backup retention and deletion arrangements: [Retention period and deletion schedule].

You may request access, correction, export or deletion by contacting [Data protection contact email]. Available rights, identity checks, response timelines and any lawful exceptions must be confirmed in [Rights request procedure]. This draft does not promise immediate deletion of records that must lawfully be retained.

The current pilot requires participants to confirm they are 18 or older. It is not a registration service for minors. If a minor's information is submitted, contact [Data protection contact email]. Any future access for minors requires [Age eligibility policy and guardian-consent process] approved before use.

Only upload media you own or have permission to use, including permission from people shown. Athlete content remains the athlete's content, subject to applicable third-party rights. Image permissions, likeness use, withdrawal requests and the operating licence are subject to [Media rights and licence terms].

The service uses account access controls and restricted media access to help protect information. No online service can promise absolute security. Security commitments and incident notifications: [Security measures and breach notification procedure].

Material changes will be communicated through [Policy change notification process]. Contact [Company legal name] at [Registered address] or [Data protection contact email]. Complaint and regulator details: [Complaint process and supervisory authority].