Privacy policy

How Scouty handles the data of the people who use it, in plain words. Last updated: 14 November 2026. This is a translation: if the two versions differ, the Italian version prevails.

Who handles the data

Scouty (the app at app.scoutyapp.it and the website scoutyapp.it) is developed and run by Luigi Molinaro, controller of the account data. For any question about your data: support@scoutyapp.it.

The data a club enters about its own team (players, matches) is decided by the club: for that data the club (the coach who created it) is the controller, and Scouty processes it on the club’s behalf only to run the service.

What data

• Account: email, first and last name, password (stored only in encrypted form, not readable); if you sign in with Google, your Google identifier, name and profile picture (you can remove or change the picture in Settings).
• Club and users: name and logo of the club, nickname, name, role and email of the people invited.
• Teams and matches: names or nicknames, shirt numbers and roles of the players, leagues, opponents, the actions recorded while scouting and the stats derived from them.
• Payments: plan chosen, amount, date, PayPal order or subscription identifier and the payer’s email. We neither see nor store card details: payment happens on PayPal.
• Artificial intelligence (Scouty AI with the Pro plan, calendar with Club or Pro): for each request we record the club, the user who made it, the feature used, the amount of text processed (tokens), the estimated cost, the duration and any error. We do not keep the questions or the answers.
• Support: the messages you write to us from Manage › Support or by email, with the browser you use.
• Technical data: IP address, date and time of requests and login attempts, in the server logs, for security and to block anyone trying to guess passwords.
• Website statistics (only on scoutyapp.it, without cookies): pages visited, where you came from, browser, operating system, device type, screen size, language, country and approximate area, clicks on the buttons to try Scouty. Each visit is saved with a code derived from IP address and browser, which changes every month; the IP address is not kept.

The test site demo.scoutyapp.it stores no personal data: it only counts how many times a day some features are used, with no IP or other visitor data.

Players and minors

Youth teams are often made up of minors. Whoever creates the team in Scouty must be entitled to do so on behalf of the club (which has the families’ consent to use the players’ names). To be safe we recommend using nicknames or initials and the shirt number: that is all scouting needs. Stats are matched by shirt number.

Player access: if the coach invites a player with her email, she sees only her own page (her numbers, the goals, the team calendar and announcements) and can write her goals, her notes, whether she will be at training and how each training went. The coach (not scoutmen) sees her goals, her training answers and her notes, except those she marks “Only for me”: a new note is shared with the coach until she makes it private. If the player is a minor, the coach confirms at the invite that they have the parents’ consent; we record who confirmed it and when. Access can be removed at any time and the player can delete her account.

Why and on what basis

• Running Scouty (accounts, scouting, stats, export, invitations): it is the service you ask for, so the performance of a contract.
• Payments and receipts: contract and legal obligations (tax and accounting).
• Service emails (welcome, invitations, password recovery, receipts, plan notices): needed for the service, not advertising.
• Security (logs, blocking login attempts): legitimate interest in protecting accounts.
• One free trial per person (email fingerprint, sign-up limit): legitimate interest in preventing abuse.
• Newsletter: only if and when you ask for it, with your consent, which you can withdraw at any time.
• Website and demo statistics: we measure visits, where they come from and some clicks to understand what is useful. These statistics do not hold your name or email and we do not link them to your account. The demo only sends counts of actions, with no visitor data.

We do not sell data, we do no profiling and we use no advertising.

Where it is and who else sees it

• Hetzner Online GmbH (Germany): Scouty’s servers, in a data centre in the European Union.
• Cloudflare: the site and the app go through its network, which protects them and makes them faster; it sees the IP address and the requests of whoever connects, not the content saved in Scouty.
• Metricool: visit statistics for the website, only on scoutyapp.it; it receives the IP address, the page visited, where you came from and the size of the browser window. It uses no cookies.
• Amazon SES (Amazon Web Services EMEA SARL, Luxembourg; servers in Milan): sending service emails (welcome, invitations, passwords, receipts, reminders); it receives the email address, the name and the text of the email, and tells us whether an email was delivered or bounced.
• Brevo (Sendinblue SAS, France): sending the same service emails when Amazon SES is not available; it receives the same data.
• ImprovMX: receives the emails you write to our @scoutyapp.it addresses and forwards them to our mailbox.
• Google: sign-in with Google (only if you choose it), the Gmail mailbox where we read the emails you write to us, backups on Google Drive. The fonts of the site and the app are on our own servers: no requests to Google Fonts.
• PayPal: payments; PayPal processes payment data as an independent controller, under its own policy.
• Anthropic (Anthropic PBC, United States), with the Claude model, only when you use a feature with artificial intelligence:
  • Scouty AI (Pro plan): receives the match numbers (points, errors, rotations, directions, skills), with each player identified only by shirt number and role, and the question you type. Squad names are never sent: the app puts them back on your screen. Do not type names or other personal data in the question.
  • Calendar (Club or Pro): receives the league file you import (dates, times, teams, gyms) or the question you type about the calendar.
  Anthropic processes these data on our behalf, only to answer; under its commercial terms it does not use them to train its models and keeps them for a limited time.

Some of these providers may transfer data outside the European Union, with the safeguards required by the GDPR (adequacy decisions or standard contractual clauses).

How long

• Account and club data: as long as you use them. You can delete your user from Manage (Delete my user): if you are in no other club, the account is deleted too (every way in Delete your account). If you are the only coach you can delete the space too. A deleted club is erased completely within 30 days.
• Deactivated account: you can deactivate your account from Manage. Your data stays and you stop receiving emails; to come back, just log in. After 24 months without access the account is deleted, with an email notice 30 days before.
• After deletion: to prevent the free trial from being repeated we keep a fingerprint of your email and of your Google identifier, if any, a code that cannot be traced back to the address, for about 13 months; this is our legitimate interest in preventing abuse, and then it is deleted. We also keep a count of deleted accounts, only with the date and the reason, with no personal data.
• After the subscription ends: the club’s matches, stats and other data stay stored, with no time limit, until the club asks to delete them or deletes its space. The data belong to the club: the DataVolley export of all matches is always available, also on the Free plan (Manage › Season and archive › All matches in DataVolley), and with a renewal everything comes back.
• Backups (made several times a day): about 30 days, then they are deleted.
• Email outcomes (delivered, bounced, marked as spam): 30 days, with the address masked; addresses blocked because they bounce stay blocked until we unblock them.
• On your device: so you can work without a network, the app keeps the latest copy of the club’s data and the match in progress. The copy is deleted when you log out or change club.
• Payments: for the time required by tax obligations.
• Log of artificial intelligence requests (no questions or answers): 12 months.
• Technical logs: a few weeks.
• Website and demo statistics: kept for at most 24 months.

Cookies

The app uses only technical cookies, needed to sign in and stay signed in: sv (session in the club), gw (account), scouty_club (the club chosen), gwo and gwp (a few minutes, during sign-in with Google), scouty_up (a few minutes, to take you to your plan after signing in). In the browser the app only keeps a safety copy of actions not yet sent (if the network drops) and the website remembers the light or dark theme and the language.

On the website and the demo we measure visits with Umami, installed on our own servers: no cookies, no IP address kept and no data sent to Google. On the website we also use Metricool, an external service without cookies (see the providers). No advertising or profiling cookies.

Your rights

You can ask at any time to see your data, correct it, delete it, restrict its use, object or receive a copy: write to support@scoutyapp.it, we reply within a month (usually much sooner). If you think your data is being handled badly you can contact the Italian data protection authority, the Garante per la protezione dei dati personali, or the authority of your country.

For a team’s data (for example a player’s name) the request goes to the club, which can change or remove it from Manage; if needed, we help.

Changes

If this policy changes in an important way we announce it in the app (in the notices) before it applies.