Effective date: 10 November 2026 · Last updated: 10 November 2026
This policy explains how FluxiCode FZE collects, uses, shares and protects personal data when you use Noventa Pro, our football match analysis service, and our website.
1. Who we are
Noventa Pro is provided by FluxiCode FZE, a free zone establishment licensed in the Sharjah Research, Technology and Innovation Park (licence no. 6518).
- Address: Block B, B33-063, SRTIP, Sharjah, United Arab Emirates
- Email for all privacy matters: info@fluxicode.com
2. Our two roles
Clubs, academies and other organisations ("Customers") upload match videos and team rosters for us to analyse. The Customer decides why and how that footage and the players in it are used, so it is the controller. We are the Customer's processor and act only on its instructions under our Data Processing Agreement. If you are a player, parent or guardian, contact your club first; we will help it respond.
We are the controller of data about our account holders, website visitors, billing, support and security, of any footage used with consent to improve our analysis models (section 6), and of the anonymised comparisons between clubs (section 7).
3. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, organisation, role, language | You or your organisation's admin |
| Sign-in data | One-time email codes, session records, IP address | Your device |
| Order and billing data | Services ordered, invoices, amounts, refund and credit records | You; our payment provider |
| Payment data | Card brand and last four digits only | Our payment provider (we never receive full card numbers) |
| Match footage | Video of matches, including players, officials and anyone else visible | The Customer |
| Roster data | Player names, shirt numbers, positions, team | The Customer |
| Analysis outputs | Match events, statistics, player positions and movement data, clips, reports | Produced by our AI systems and reviewed by our analysts |
| Consent records | Which uses each rostered player or guardian agreed to: sharing, highlight reels, model training | The Customer |
| Requests and support | Messages, takedown and erasure requests, report-a-concern forms | You or the requester |
| Technical data | Logs, error reports, browser and device type | Your device |
We do not use facial recognition and do not create biometric templates of anyone in the footage. We do not intend to collect health, religious or other sensitive data; please do not include it in uploads or messages.
4. Why we use data and our legal basis
| Purpose | Legal basis |
|---|---|
| Provide the service: accounts, uploads, analysis, reports, share links | Performance of our contract with the Customer; for footage, the Customer's instructions and the consents it has obtained |
| Take payment, issue refunds and SLA credits, keep tax records | Contract and legal obligation |
| Secure the service, prevent fraud and abuse, fix errors | Legitimate interests and legal obligation |
| Send service messages (order status, delivery, sign-in codes) | Contract |
| Improve our analysis models using match footage | Consent recorded for each rostered player (or their parent or guardian) |
| Handle complaints, takedowns and legal claims | Legal obligation and legitimate interests |
We do not sell personal data and do not use it for advertising.
5. Children
Many players in the footage are under 18. The service is sold to organisations and is not for use by children. Before uploading footage of a child, the Customer must have consent from the child's parent or guardian for each use it turns on. We:
- identify by name only players on the Customer's roster, never opposing or other players;
- publish share links and highlight reels only where the recorded consent allows it;
- use a child's footage for model training only with a recorded training consent;
- blur or remove a person on a valid request (see our Data Deletion page).
6. Automated analysis and model training
Our AI systems draft match events and statistics, which our analysts review before delivery. This analysis describes play on the pitch. It is not used to make decisions with legal or similarly significant effects on any person, such as selection or contracts. Any such decision is the club's own.
Where training consent is recorded, we may use footage and labels to improve our models, acting as controller for that use. Consent can be withdrawn at any time; withdrawn footage is removed from future training sets. Models already trained cannot practically "forget" a single example, but they do not store or reproduce the footage.
7. Anonymised comparisons between clubs
Where a club has accepted our Data Processing Agreement and has given its consent to anonymised comparisons in its privacy settings, we combine the season figures of its players and teams with those of other clubs that have done the same. We use this only to show each taking-part club where its own players and teams stand against groups of comparable players and teams, as percentiles. We act as controller for this use.
- What is pooled: season figures calculated from approved matches, grouped by position and by year of birth. No names, footage or contact details are pooled.
- What a club sees: only the standing of its own players and teams. A club never sees another club's players, names, club, matches or years of birth, or the figures of any single player of another club. A group is shown only when it is above a minimum size, draws on several clubs and no single club makes up most of it.
- No outside data: the comparison uses only matches analysed on our platform.
- Withdrawing: a club can withdraw its consent at any time in its privacy settings. Its matches leave the comparison the next time it is calculated. We keep no stored copy of the comparison, so there is nothing further to delete.
8. Who we share data with
We share personal data only with:
- Service providers that host, store, deliver or process data for us under contract, including providers of specialised computing that run our analysis models. Customers can ask us for the current list (see Annex 2 of our Data Processing Agreement).
- Our payment provider, which processes payments as an independent controller under its own privacy policy.
- People you choose, when a Customer creates a share link or publishes a reel.
- Authorities, when the law requires it.
- A buyer or successor, if our business is sold or merged, under the same protections.
9. International transfers
Our systems store and process data in data centres in the European Union, and some providers operate from other countries. We transfer data outside the UAE or Egypt only where the destination offers adequate protection or where we have contractual safeguards in place, and, for Egypt, under the permits required by Egyptian law.
10. How long we keep data
| Data | Retention |
|---|---|
| Raw uploaded video, after delivery | 30 days, then deleted automatically |
| Uploads never paid for | 7 days, then deleted automatically |
| Reports, clips and analysis outputs | For as long as the Customer's account is open; deleted within 30 days of a deletion request or of the account closing |
| Account data after the account closes | Deleted 30 days after the account closes |
| Invoices and payment records | As long as tax law requires (at least 5 years in the UAE) |
| Logs | Technical logs and sign-in records: up to 12 months; records of staff and administrative actions: 7 years |
| Consent and takedown records | As long as needed to prove what was agreed or done |
| Backups | Overwritten within 35 days |
11. Your rights
Depending on where you live, you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct inaccurate data;
- delete your data;
- restrict or stop certain processing, or object to it;
- move your data to another provider;
- withdraw consent at any time, without affecting earlier processing.
To use these rights, see our Data Deletion page or email info@fluxicode.com. We may ask you to prove your identity, or that you are a child's parent or guardian. We reply within 30 days. Where we process data for a club, we pass your request to the club and help it respond.
12. Security
We encrypt data in transit and at rest, deliver video only through signed links that expire, limit staff access by role, and log access to footage. If a breach puts your data at risk, we will notify the affected Customer, the authorities and you as the law requires.
13. Cookies
We use only cookies needed to sign you in and keep the service secure. We do not use advertising cookies.
14. Complaints
Please contact us first at info@fluxicode.com. You can also complain to the UAE Data Office or its successor authority, or, in Egypt, to the Personal Data Protection Center.
15. Changes
We will post any change here and update the date at the top. For material changes we will also email Customers' account holders before the change takes effect.
16. Language
This policy is available in English and Arabic. If they differ, the English version prevails.