Privacy policy
How we collect, use and protect personal data, including children's data.
Last updated: October 26, 2026
Who we are
MY TASK MASTER LTD ("Reelstat", "we"; company number 16878946, registered in England and Wales, registered office Flat 93 March Court, Warwick Drive, London, SW15 6LD) runs the Reelstat website and apps. We are the controller of the personal data described here, unless a club decides what happens to its players' data (see the club data agreement).
Contact for anything about your data: support@reelstat.com. We read every message.
What we collect
- Account: your name, email address and, if you use it, the profile details Apple or Google share when you sign in. We ask for your year of birth only, never the full date. We never ask for a password.
- Teams and players: team names, rosters, jersey numbers and the role you have (coach, parent, player, club admin).
- Game video and audio recorded by coaches with the Reelstat app, and what our software makes from it: tracking data, stats, clips and reels.
- Consent records: who agreed to what, when, and when it was withdrawn.
- Purchases: what you bought, the amount and the payment status. Card and wallet details go straight to Stripe; we never see or store them.
- Messages you send us, such as support requests and reports.
- Usage data, only if you accept analytics cookies: pages and buttons used, device type, approximate country. No names or children's data are put in analytics, and nothing is collected from under-18 accounts.
- Technical data such as error reports, so we can fix problems.
Children and young people
Most players on Reelstat are children, so we start from the strictest settings.
- Reelstat accounts are for people aged 13 and over. A child under 13 cannot create an account; a parent or guardian follows their games from the parent's own account.
- Accounts for 13 to 17 year olds need a parent or guardian to approve them. Those accounts cannot film, share publicly or receive notifications.
- A child's face, name and individual stats are private by default. The club decides whether names are used at all, and a parent can say no.
- Videos, clips and reels show the game as it was filmed, faces included.
- We do not use face detection or face recognition. We do not identify anyone by their face.
- Parents can withdraw consent at any time, and ask us to delete their child's data.
Read more in plain words on our safety page.
Why we use your data, and our legal basis
- To provide the service you ask for (contract): accounts, game processing, stats, reels, purchases and support.
- With your consent: filming a child or adult player, optional analytics cookies, and marketing emails. You can withdraw consent at any time and it will not affect what happened before.
- For our legitimate interests: keeping the service secure, preventing fraud and abuse, and measuring and improving the service in ways that do not intrude on privacy.
- To meet legal duties, such as tax and accounting records.
Automated processing and AI
Computer vision software reads game video to find players, shots and scores. A person on our team checks every game before families see it. Stats can still be wrong; coaches can correct them.
We send game statistics (not video, names or faces) to an AI service to write a short summary for the coach.
We do not use club game footage to train our AI models today. If that ever changes, we will say so here first, clubs and parents will be able to opt out, and we will not use footage of children until a lawyer has confirmed that our consent approach is lawful.
Who we share data with
- The club and the people on the team: coaches see their team's games; parents see their child's reels; the public sees only what the club and parents have allowed.
- Our sub-processors, listed below and on the sub-processors page, who store or process data for us under contract.
- Authorities, where the law requires it.
We do not sell personal data and we do not show advertising.
Where your data is stored
Video and accounts are stored in London (UK) and the EU. Some sub-processors, for example for text messages and the AI summaries, are in the United States. When data leaves the UK or the EU we rely on an adequacy decision or on standard contractual clauses, with the UK addendum where it applies.
How long we keep it
- Raw game video: deleted 180 days after upload. Clips and reels made from it are kept until the club or parent deletes them or the account is deleted.
- Account and team data: until you delete your account.
- When a child's profile or an account is deleted, the data is removed within 30 days; backups are overwritten within a further 30 days.
- Purchase records: kept for the period the law requires for tax and accounting.
- Support emails: up to 12 months.
- Consent records: kept for as long as we need to show that consent was given or withdrawn.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or stop its use, or move it to another service. You can withdraw consent at any time. A parent or guardian can do all of this for their child.
Write to support@reelstat.com; we answer within one month. Account deletion is also available inside the app.
If you are not happy with our answer you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
Sign in with Google and Apple
If you choose Google, Google tells us your name, email address and profile picture. If you choose Apple, Apple tells us your name and email address (which can be Apple's private relay address). We use this only to create and secure your Reelstat account and to contact you about it.
We do not read your Google or Apple content, we do not use this data for advertising, and we do not share it with anyone except the sub-processors that run Reelstat. Reelstat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
To remove Reelstat's access, delete your account in the app or write to support@reelstat.com; you can also revoke access in your Google or Apple account settings. We then delete the data we got from them within 30 days.
Security
Data is encrypted in transit and at rest. Videos are delivered through short-lived signed links. Access is limited to the people who need it. If a breach puts people at risk, we tell the people affected and the regulator within the legal deadlines.
Cookies
We set no analytics cookie until you choose. See the cookie policy for details.
Changes and contact
If we change this policy in a way that matters, we will tell account holders before it takes effect.
Questions, requests and complaints: support@reelstat.com.
Sub-processors
| Company | What it does for us | Where |
|---|---|---|
| Amazon Web Services (S3, Batch, CloudFront) | Video storage, processing and delivery | London, UK (eu-west-2) and Ireland (eu-west-1) |
| Amazon SES | Sending and receiving email | London, UK (eu-west-2) and Ireland (eu-west-1) |
| Supabase | Database and accounts | London, UK |
| Vercel | Website hosting | EU and global edge network |
| Stripe | Card and wallet payments, club payouts | EU and US |
| RevenueCat | In-app purchases in the iOS and Android apps | US |
| Twilio | Text messages with sign-in and verification codes | US |
| Expo | App builds, updates and push notifications | US |
| Sign in with Google | US and EU | |
| Apple | Sign in with Apple, App Store payments | US and EU |
| Amazon Bedrock (Anthropic Claude) | Written game summaries from game statistics (no video, names or faces) | UK / EU |
| PostHog | Website and app analytics, after consent | EU |
| Sentry | Error reports | EU (Germany) |
Locations are being confirmed with each provider before launch.