This Privacy Policy explains how we process personal data in connection with Biomechanical Freekick Analysis (the "Service"), in line with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). It should be read together with our Terms of Service and our Cookie Policy.
Data controller: Tijmen van Arkel
Address: Haringvliet 122, Alphen aan den Rijn
Contact email: webmaster@kickanalyzer.org
We have not appointed a Data Protection Officer, as we are not legally required to. You can reach us directly at webmaster@kickanalyzer.org with any question about this Policy or your data.
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account data | Email address; if you use "Continue with Google", your Google name, email address and profile photo. We never see your raw password — Firebase Authentication handles it and only gives us a securely hashed reference. | Creating and managing your account, letting you sign in | Performance of a contract (Art. 6(1)(b) GDPR) |
| Uploaded videos & analysis | The video you upload; joint-angle and body-region measurements derived from it; similarity score and ranking | Providing the free-kick analysis you asked for | Performance of a contract (Art. 6(1)(b) GDPR) |
| Technical & log data | IP address, browser/device type, request timestamps, error logs | Keeping the Service secure, diagnosing problems, preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) — keeping the Service secure and working |
| reCAPTCHA data | Your interaction with the reCAPTCHA widget, your IP address, and other signals collected by Google | Telling human users apart from automated bots before your upload is processed | Legitimate interest (Art. 6(1)(f) GDPR); see also our Cookie Policy |
| Analytics data (only if enabled) |
Pages viewed, general usage patterns | Understanding how the Service is used, to improve it | Consent (Art. 6(1)(a) GDPR) — you can decline this in the cookie banner |
| Correspondence | Your email address and the content of any message you send us | Responding to your questions | Legitimate interest (Art. 6(1)(f) GDPR) |
We do not sell your personal data, and we do not use it for third-party advertising.
Your uploaded video shows your body in motion, and may show your face — that makes it personal data under the GDPR. We do not use the video, or the joint-angle measurements derived from it, to uniquely identify you: we don't run facial recognition or identity verification on it. For that reason, we do not treat it as "biometric data" in the special-category sense of Article 9 GDPR. We also don't generate or infer health data, such as an injury diagnosis, from your video.
If that ever changes — for example, if we add a feature that does use your video to identify you or to assess a health condition — we will update this Policy and ask for your separate, explicit consent before doing so.
In line with our Terms of Service, the Service is intended for people aged 16 and over acting on their own behalf. Where a parent or legal guardian creates and controls an account on behalf of a younger user, we treat the parent or guardian as the account holder for data-protection purposes.
We use cookies and similar technologies — including the browser local storage / IndexedDB that Firebase Authentication uses to keep you signed in. Our separate Cookie Policy explains this in full, including which categories require your consent.
We do not sell your personal data. We only share your uploaded videos with the processors above, to the extent needed to run the Service.
Some of these providers — in particular Google — may process data in the United States. Where that happens, we rely on the EU–U.S. Data Privacy Framework, an adequacy decision of the European Commission under which Google is currently certified, and/or the European Commission's Standard Contractual Clauses as a fallback safeguard. This framework has so far been upheld against legal challenge but remains subject to ongoing scrutiny; we will update this section if that changes materially.
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS) and Firebase's built-in authentication security. No system is completely secure, and we cannot guarantee the absolute security of information you transmit to us.
You have the right to:
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl. If you live in a different EU/EEA country, you may also complain to your own national data protection authority.
Email us at webmaster@kickanalyzer.org. We will respond within one month, as required by Article 12(3) GDPR — this can be extended by a further two months for complex requests, in which case we will tell you why.
The Analysis is generated automatically, without human review, using computer-vision and pose-estimation software. It does not produce a legal effect or similarly significantly affect you, and it is not used to make any automated decision about your rights, eligibility, or status — it is informational feedback about your free-kick technique only. Article 22 GDPR (automated individual decision-making) therefore does not apply to it.
We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, for material changes, make reasonable efforts to notify you in advance.
Email: webmaster@kickanalyzer.org
Postal address: Haringvliet 122, Alphen aan den Rijn
Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl