Privacy Policy - CaptainX Academy

1. Scope of This Policy

This Privacy Policy applies to all users of CaptainX Academy, including but not limited to:

• Academy owners and administrators
• Coaches and trainers
• Athletes and players
• Parents or legal guardians
• Scouts, partners, and authorised representatives

This Policy applies regardless of whether access is via web, mobile application, or any other digital interface operated by CaptainX.

2. Applicable Laws and Regulatory Framework

CaptainX processes personal data in compliance with:

• Saudi Personal Data Protection Law (PDPL)
• PDPL Implementing Regulations issued by the Saudi Data & AI Authority (SDAIA)
• Relevant regulations issued by Saudi authorities
• Applicable Shariah principles and cultural norms

Where users are located outside Saudi Arabia, CaptainX will also take reasonable steps to comply with applicable cross-border data protection requirements.

3. Information We Collect

We may collect the following categories of personal data:

a. Personal Identification Information

• Full name
• Nationality
• Date of birth
• Gender (where required for academy structuring and compliance)
• Contact details such as email address and phone number

b. Account and Academy Information

• Username and login credentials
• Academy affiliation and role
• Subscription details and service usage
• Communication records

c. Athlete and Training Data

• Attendance records and schedules
• Training plans and performance metrics
• Skill assessments, progress reports, and match statistics

d. Health and Biometric Data

• Physical metrics such as height and weight
• Injury-related information provided voluntarily
• Fitness and performance-related data

Such data is collected only with explicit consent and strictly for sports training, safety, and performance improvement purposes.

e. Children's Data

• Information relating to athletes under the age of 18
• Parent or guardian contact and consent records

f. Technical and Usage Data

• IP address
• Device type and operating system
• Browser type and usage logs

g. Cookies and Tracking Technologies

• Session cookies and analytics data to improve user experience and platform performance

4. Legal Basis for Processing Personal Data

CaptainX processes personal data based on one or more of the following lawful bases under the PDPL:

• Explicit consent of the data subject or legal guardian
• Performance of a contract to which the user is a party
• Compliance with legal or regulatory obligations
• Legitimate interests, provided such interests do not override the rights of data subjects

5. Privacy of Children and Minors

CaptainX Academy is designed for use by sports academies that include children and young athletes. In accordance with Saudi law and cultural norms:

• Users under the age of 18 may only use the Platform with the consent of a parent or legal guardian
• Parents or guardians must approve the collection and processing of a child's personal data
• CaptainX does not knowingly collect personal data from children without valid guardian consent
• Parents or guardians may request access, correction, or deletion of a child's data at any time

6. Data Relating to Women

CaptainX recognises and respects privacy considerations relating to women in the Kingdom of Saudi Arabia. Accordingly:

• Personal data of female athletes and users is accessed strictly on a need-to-know basis
• Visibility of profiles, images, and performance data can be restricted based on academy settings
• No personal data is shared publicly without explicit consent
• Female user data is handled with heightened confidentiality and security controls

7. How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain the Platform
• Manage academy registrations and user accounts
• Enable athlete development, training, and performance analysis
• Facilitate communication between academies, coaches, athletes, and parents
• Ensure athlete safety and compliance with academy standards
• Process subscriptions and payments through authorised providers
• Improve platform functionality and user experience
• Comply with legal, regulatory, and governmental requirements

8. Data Sharing and Disclosure

CaptainX does not sell personal data. We may share personal data only in the following circumstances:

• Within the relevant academy among authorised administrators and coaches
• With parents or guardians of minor athletes
• With trusted third-party service providers (e.g., cloud hosting, payment gateways) under strict confidentiality obligations
• With Saudi governmental or regulatory authorities where required by law
• As part of a merger, acquisition, or restructuring, subject to lawful safeguards

9. Cross-Border Data Transfers

Personal data may be stored or processed on servers located within Saudi Arabia or, where legally permitted, outside the Kingdom.

Where cross-border transfers occur, CaptainX ensures:

• Compliance with PDPL requirements
• Adequate data protection safeguards
• Transfers are limited to what is necessary for service delivery

10. Data Retention

CaptainX retains personal data only for as long as necessary to:

• Fulfil the purposes outlined in this Policy
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

Data that is no longer required will be securely deleted, anonymised, or archived in accordance with applicable laws.

11. Data Security

CaptainX implements appropriate technical and organisational security measures, including:

• Encryption of data at rest and in transit
• Role-based access controls
• Secure cloud infrastructure
• Regular monitoring and security reviews

Despite our efforts, no digital platform can guarantee absolute security, and users acknowledge this risk.

12. Data Subject Rights

Under the Saudi PDPL, users have the right to:

• Be informed about the collection and use of their personal data
• Access their personal data
• Request correction or updating of inaccurate data
• Request deletion of personal data where legally permissible
• Withdraw consent at any time (where processing is based on consent)

Requests may be submitted using the contact details below.

13. Cookies and Analytics

CaptainX uses cookies and similar technologies to:

• Authenticate users
• Maintain sessions
• Analyse usage trends and improve services

Users may control cookies through browser settings. Disabling cookies may affect Platform functionality.

14. Changes to This Privacy Policy

CaptainX may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Updated versions will be published on the Platform with a revised "Last Updated" date.

Continued use of the Platform constitutes acceptance of the updated Policy.

15. Contact Information

For questions, concerns, or requests relating to this Privacy Policy or personal data, please contact:

CaptainX Company

Email: info@captainx.ai

CaptainX - The Future, In Every Athlete.