Privacy notice

myStriide is operated by Striide, the data controller for the personal data described in this notice. Company details are published at striide.app. For anything privacy-related, write to privacy@striide.app.

We apply the UK GDPR, the EU GDPR and India's Digital Personal Data Protection Act 2023. Where these differ, we apply the standard that gives you the most protection.

• Account data — name, email, phone, language and region. Needed to give you an account (contract).
• Sport profile data — sport, role or position, age group, measurements, availability, achievements, education, match and tournament records, videos and photographs. Used to build your profile (contract) and to make you discoverable to verified organisations (your consent, switchable off at any time).
• Date of birth — to apply age-appropriate protections and to determine whether guardian consent is required.
• Verification and KYC documents — to confirm identity and organisation legitimacy so the network stays safe (legitimate interests).
• Messages and enquiries — to enable safe, on-platform communication and to investigate reports (contract and legitimate interests).
• Billing data — plan, invoices and payment metadata. Card details are handled by our payment provider and never reach our systems.
• Technical data — IP address, device and log data for security, fraud prevention and service reliability (legitimate interests).

Our full register of processing activities — purpose, lawful basis, recipients, retention and transfer safeguards for each activity — is published on the privacy commitments. Very few companies publish this. We do, because it is the honest way to show what we actually do with your data.

We use AI to summarise assessments, suggest development areas, triage moderation and billing cases, and match athletes, organisations and experts. These are decision aids, not automated decisions with legal effect — a person reviews anything consequential such as verification or account suspension. You can turn AI-derived insights off in your privacy settings, and doing so does not restrict any other part of the product.

Under-16 accounts are locked until a parent or guardian verifies consent by email code. While locked, the profile cannot be searched, contacted, shortlisted or messaged. Guardians can withdraw consent at any time, which re-locks the profile immediately. We never run behavioural advertising to under-18s. Full detail is on the protecting young athletes page.

Verified clubs, academies and experts can see your profile when you have discoverability switched on. Beyond that we share only with the service providers listed on our subprocessors page, each bound by a data processing agreement. We do not sell personal data, and we do not share it with advertisers.

Some providers process data outside the UK, EEA or India. Those transfers rely on UK International Data Transfer Agreements or EU Standard Contractual Clauses, with the mechanism listed per provider on the subprocessors page.

• Account and profile data: for the life of your account, then deleted 30 days after you confirm deletion.
• Verification and KYC documents: 24 months after the decision.
• Messages: 24 months after last activity in the conversation.
• Billing records: 7 years, because tax law requires it.
• Audit and moderation records: 24 months.

These periods are enforced by scheduled deletion jobs, not by memory. The date of the last run is published on the privacy commitments.

You do not need to email us and wait. Signed-in members can do all of this from Settings → Privacy:

• Access and portability — download everything we hold about you as a machine-readable file, instantly.
• Rectification — edit your profile directly, or request a correction to fields you cannot edit.
• Erasure — schedule account deletion, with a clear statement of what is deleted, anonymised or retained.
• Restriction and objection — switch off discoverability, profiling-based recommendations and AI insights.
• Withdraw consent — per purpose, with every change written to a consent history you can inspect and export.

If you do not have an account, use the data request form. We respond within one month. You can also complain to the UK ICO, your EU supervisory authority, or the Data Protection Board of India.

Only strictly necessary storage runs before you choose. See the cookie notice or change your preferences.

Every version of this notice is dated and listed on the privacy commitments, so you can see what changed and when. Material changes are notified in-product.