Privacy Policy
Last updated 10 November 2026
The short version. We collect what you put into the app to run it for you. Some of it is health information, like check-ins and injuries, so we only use it with your permission and keep it to you. Your name and email are never sent to the service that writes your plans. Coaches only see what you choose to share. We never sell your data or show you adverts. You can ask for a copy of your data, and delete it, at any time.
1. Who we are
NXT4 PRO Player is run by NXT4 PRO LTD ("we", "us"), registered in England and Wales, company number 16796879, registered office 16–18 Hall Street, Southport, England, PR9 0SE. We are the controller of your personal data and are registered with the Information Commissioner's Office (ICO), registration number ZC177318. Contact us about privacy at privacy@nxt4pro.com.
2. What we collect
Your account
- Name, email address and password (we only ever store a scrambled fingerprint of your password)
- Date of birth, to check you are 16 or over and to suit plans to your age
Your football profile
- Height, weight, stronger foot, positions, the areas you want to improve, your own goal and the gym kit you can use
- Anything you tell us we should adapt for, such as a condition, disability or past operation
- A profile photo, if you add one
- The club you play for, and a picture of its badge if you add one
What you record
- Daily check-ins: sleep, energy, mood, muscle soreness, water and any pain or niggle
- Injuries: where, what happened, pain level, warning signs and whether a professional has seen it
- Matches and sessions: minutes, goals, assists and GPS vest or tracker figures such as distance, speed, sprints, accelerations and heart rate
- The gym sessions, recovery plans and meal plans made for you
- Your body goal (maintain, build, or for adults only, lose), target weight and weekly weigh-ins
- Your team's fixtures and results, whether you played in each game, and the fixtures web page link if you give us one
- Food diary entries, daily steps, food likes and dislikes, allergies, diet type, and (only if you switch on calories and macros) the sex you choose to estimate your energy needs
Payments
- Your plan, its status and renewal date, and the reference Stripe gives you. Card details are handled by Stripe, never by us.
Coach connections
- Which coach or academy you connect to, what you choose to share, and when they last looked
Technical
- Daily usage counts (to apply fair-use limits) and basic server logs that help us keep the app secure and fix problems
3. Health information
Check-ins, injuries, weigh-ins and anything you tell us about conditions or additional needs is health information, a special category of personal data. We only use it because you give us your explicit consent, which you do when you create your account and each time you choose to record it. We only use it to run the app for you. You can delete any of it at any time. Without it, some features (such as recovery plans) cannot work.
4. How and why we use your data
- To provide the app you have signed up for (performance of our contract with you): your account, profile, photo, club, check-ins, log, fixtures, personal bests, food diary, steps, body goals, plans and coach connections.
- With your explicit consent: health information, as above.
- To take payment and keep records (contract and legal obligation): subscriptions and the financial records the law requires us to keep.
- To keep the app safe and working (legitimate interests): age checks, security, fair-use limits and fixing problems.
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that have legal or similarly significant effects using automated means alone.
5. How your plans are written
Gym sessions and recovery plans are written by OpenAI's text service. To write a plan, we send OpenAI only what the plan needs: your age, positions, stronger foot, height and weight, goals, available kit, recent check-ins, active injuries and what you have told us to adapt for. For meal plans we also send your diet type, allergies, and foods you like and dislike. We never send your name or email address. Under OpenAI's business terms, this information is not used to train their models and is kept by them for a limited time only for security and abuse monitoring. OpenAI processes data in the United States (see section 7).
If you upload a screenshot from your GPS vest app, we send the image to OpenAI only to read the numbers from it. The image is not stored by us, and you check the numbers before they are saved.
If you bring in fixtures, we send OpenAI the fixture list so it can pick out your club's games: either the text of the web page you link, a screenshot you upload, or text you paste, together with your club's name. When you give us a link, our server opens that public web page once each time you ask. It says who it is, follows the website's rules about automatic visits, and never gets round a website that blocks it. Screenshots are not stored. You check the games before any are saved.
Your profile photo and club badge are shrunk on your phone and saved with your profile. Only you can see them. They are never sent to OpenAI or shared with coaches.
When you search for a food or scan a barcode, your phone asks Open Food Facts, a free food database, for that food directly. Only the search words or barcode are sent, never your name or account details.
To show exercise demonstration videos, we search YouTube using the exercise name only. When you play a video, it is shown through YouTube's privacy-enhanced mode.
6. Who we share your data with
- Google (Firebase): hosts the app, the database and our server code. Your app data is stored in London. Sign-in is handled by Google's Firebase Authentication service.
- OpenAI: writes your plans, as described in section 5.
- Stripe: takes and manages your payments, and handles tax on sales.
- Websites you link for fixtures: when you ask, our server visits the page you gave us. The website sees a visit from our server, not your name or account details.
- A coach or academy you connect: only what you choose to share, only while you are connected. They are responsible for how they use it.
- Authorities: only where the law requires it, or where we believe someone is at serious risk of harm.
Each company that processes data for us is bound by a contract to keep it secure and only use it on our instructions.
7. Data outside the UK
Your app data is stored in the UK. Some of our providers, including OpenAI, Stripe and Google's sign-in service, may process data in the United States or elsewhere. Where they do, the transfer is protected by the UK's approved safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK's International Data Transfer Addendum.
8. How long we keep it
- Your account and everything in it: until you delete your account. When you do, it is removed from our live systems straight away and your subscription is cancelled.
- Payment records: kept by us and Stripe for 6 years after the end of the financial year, because the law requires it.
- Backups: to protect against data loss, we keep a daily backup of the database for 7 days and can restore it to any point in the last 7 days. When you delete your account, your data is removed from the live app straight away and is gone from all backups within 7 days.
- Server logs: kept for up to 30 days, unless needed to investigate a security problem.
9. Security
Data is encrypted in transit and at rest. Database rules mean each player can only ever reach their own data, and your plans and subscription status can only be changed by our servers. Coach access goes through a signed, read-only connection that you can switch off at any time. You can turn on two-step sign-in where it is available.
10. Under-18s
The app is for people aged 16 and over. Players aged 16 and 17 can use it and give consent themselves under UK data protection law. We encourage younger players to involve a parent or carer in their training. If we learn that someone under 16 has an account, we will delete it.
11. Cookies and storage
We do not use advertising or tracking cookies, and the app has no analytics. Your browser stores what it needs to keep you signed in. Stripe uses its own cookies on its payment page to prevent fraud.
12. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a copy to take elsewhere, and withdraw consent at any time. You can edit and delete most things yourself in the app, and delete your whole account from My profile. For anything else, email privacy@nxt4pro.com and we will reply within one month.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113.
13. Changes
If we make an important change to this policy, we will tell you by email or in the app before it takes effect.
14. Contact
Privacy: privacy@nxt4pro.com
Support: support@nxt4pro.com