Privacy Notice
This privacy notice applies to personal data Ruckpath Group Ltd (Company or We) collect about you when you register with, access, or use RuckPath, and explains what personal data we hold, why, and what rights you and your child have.
1. Who we are
Ruckpath Group Ltd (registered in England and Wales, company number 17374680, registered office Vaughan Chambers, Vaughan Road, Harpenden AL5 4EE) runs this platform. We are the data controller for the personal data on it: parents hold accounts with us directly, and we decide what the platform collects and how it works.
Your child’s club uses the platform to coach, under an agreement with us that strictly limits what it may do with the data (see §5). The club remains responsible in its own right for its membership records and its coaching activity.
Questions, requests or concerns: support@ruckpath.app.
2. What we hold
About your child: - name, date of birth, gender, and age-group placement - skill assessments and tiers recorded by their coaches - targets they set, and badges — those awarded by coaches, and those they claim about themselves - attendance - season history and rank
About you: - name and email address - your link to your child, and your consent records - subscription status, where you subscribe. Payments are processed by Stripe; we never see or store your card details
About coaches and club administrators: - name, email address, role, and the age groups they coach - documents and links they upload for their own coaching use (see §2.1)
That is the whole list. There are no photographs of children, no free-text notes about children, no messaging, and no location tracking — the platform does not have these features.
2.1 Materials clubs upload. Coaches and administrators can store their own coaching documents and links on the platform, visible only to the club’s own staff. Under our agreement with the club, these must not contain any child’s personal data or any child’s image. We do not monitor what is uploaded, but we may remove anything that breaks that rule.
3. Why we hold it, and the legal basis
To provide the service — showing your child’s development journey to their coaches and to you, and running seasons, ranks and badges. Basis: our contract with you (these terms apply whether or not a payment is due); and our legitimate interest in providing the platform to the club.
To take payment and manage your subscription, where you have one. Basis: our contract with you.
To keep the platform secure and working. Basis: legitimate interests.
To meet legal obligations — accounting records, responding to lawful requests. Basis: legal obligation.
We do not use the data for marketing, profiling or automated decision-making, and we never use children’s data to target anything at them.
4. What we will never do
We do not sell advertising, and nothing about your child is used to target anything. We use no advertising networks, no tracking, no profiling, no common automatic information collection and no behavioural targeting. Nobody buys space in this app from us, and we do not sell or share personal data with advertisers or data brokers.
Your club may show its own sponsors. Some clubs display the businesses that support them — a name or a logo, in a space the club controls, on the coach app and in the parent app. That is the club’s choice and the club keeps whatever it is paid. Nothing is tracked, no personal data reaches a sponsor, and these placements never appear on a child’s own account. If you hand your device to your child, they will see what you see.
No secret sharing. The only people who can see your child’s record are their coaches at the club, linked parents — and, for the badges your child claims about themselves, only your household: never their coaches or club.
5. Who the data is shared with
Your child’s club and its coaches see the coaching record they create and your child’s registration details. Under their agreement with us they may use it only to coach their own players. The platform gives them an export for that purpose; anything they export stays subject to the same restriction and may not be shared with anyone else.
Service providers who host and run the platform for us, under contracts that bind them to protect it. The database and sign-in system (Supabase) are hosted in the United Kingdom (London) — your child’s records live here. Payments are processed by Stripe, the app is delivered by Vercel, and sign-in emails are sent by Resend; where they process data outside the UK they do so under recognised contractual transfer safeguards.
Where necessary to protect a child — if we ever believed a child was at risk of harm, we would share what was strictly necessary with the appropriate safeguarding authorities.
A buyer of our business, if we are ever sold — your data would transfer with the service, and the new owner would be bound to tell you and honour this notice or provide their own.
Nobody else, unless the law requires it of us.
6. How long we keep it
We keep a child’s records for as long as any account linked to them stays active. If no linked account signs in for three years, the records are permanently deleted or irreversibly anonymised. We do not contact you first. Signing in — even without subscribing — keeps the records alive.
A child leaving their club does not delete their records. Coach and administrator accounts are removed when the club tells us they have left; payment records are kept for as long as tax law requires.
7. Your rights, and your child’s
You can ask us at any time to: see the data we hold (access); correct it; delete it; restrict or object to how we use it; or receive a copy in a portable form. Email support@ruckpath.app and we will respond within one month.
You can also get a copy yourself, at any time, without asking: your account has a “Your child’s record” page which shows everything we hold about your child and lets you print it or download it as a data file.
These rights are your child’s too. A child old enough to understand them — usually around 13 — can exercise them in their own right, and we will help them do so.
If you are unhappy with how we handle data, you can complain to the Information Commissioner’s Office at ico.org.uk However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. The ICO will expect you to have done this before reviewing your complaint. You can find our complaints policy at ruckpath.app/complaints.
8. How we protect it
Data is encrypted in transit and encrypted at rest in storage. Access to data is enforced at the database itself, per person and per role — a coach’s account cannot read another club’s players, a parent’s account cannot read another family’s children, and no account can read a child’s self-claimed badges except their own household’s. Connections are encrypted, and access to production systems is restricted to those who need it.
No system is perfectly secure. If a breach ever put your or your child’s data at meaningful risk, we would tell you and the ICO promptly, as the law requires.
9. Children signing in
Today, children use the platform through a parent’s account, handed over by the parent. A parent may also give their child their own sign-in from their own account, which the parent can withdraw at any time. Either way the parent holds the account: settings, payment and consent controls stay with them throughout, and a child’s own sign-in shows their own journey and nothing else.
10. Changes to this notice
If we change this notice in any way that matters, we will tell you — by email or in the app — before the change takes effect. Every version is dated and archived on our website.
Version 1 — 29th August 2026