SyncState

Privacy policy

Last updated: 7 October 2026

Company: Sportsync (스포츠 싱크) · Registration no. 277-18-02409 · South Korea · Representative: Geehee Kang

1. What SyncState is and who processes your data

SyncState is an app that sports clubs subscribe to so their players can log their daily wellness and training effort, and their coaching staff can see it. It can't be used on its own: every account is created by a club.

The CLUB that registered you is the data CONTROLLER: it decides who is registered, what the data is used for and for how long. If you have any question about your data, your club is the first point of contact.

Sportsync (스포츠 싱크), a company registered in South Korea under number 277-18-02409, develops the app and acts as data PROCESSOR: it processes data only on behalf of the club and following its instructions, under a data processing agreement (GDPR article 28) that every club accepts before registering anyone. Contact: digital@sportsync.pro.

2. What data is collected

Only what sports monitoring needs:

  • Identification: name, email, phone (optional), shirt number, position, team and a face photo (if uploaded by the club or by the player).
  • Parent or guardian email when the player is a minor.
  • Daily perceived wellness: sleep, energy, muscle soreness, stress and mood, on a 1–7 scale.
  • Perceived exertion for each session (0–10 scale) and minutes completed.
  • Attendance, availability to train, notices of not being able to attend with their reason, and injury periods (type and area, no medical diagnosis).
  • Body weight (once a day at most, logged by the player or their staff) and, if the club uses it, anthropometric measurements following the ISAK protocol (height, skinfolds, girths, breadths).
  • Growth data: sex, date of birth, father's and mother's height, and the estimates calculated from them (maturity, estimated adult height, body composition).
  • Population group or ethnic origin, only if a body-composition equation requires it. Optional ("not stated").
  • Messages between the player and their coaching staff inside the app.
  • Technical data: chosen language, access date and time, and the identifier the phone provides to receive notifications.

3. What is NOT collected or done

  • No location, contacts or phone content is collected.
  • There is no advertising and no third-party analytics or tracking.
  • Data is never sold or shared with anyone for commercial purposes.
  • The app makes no medical diagnoses and does not predict injuries.
  • A player can never see another player's data.

4. What it is used for

So the club can monitor its players' wellness and training load, adjust training and look after recovery; to send players their reminders and messages from their coaching staff; and to run the app securely (access, abuse prevention, backups).

5. Health data and minors

Perceived wellness, injuries, weight, anthropometric measurements and growth data are health-related data, and ethnic origin is also a special category (GDPR article 9); many users are also minors. Growth and body-composition estimates are not diagnoses and make no automatic decisions. That is why the club must have a valid legal basis and, where the player is under fourteen, the express consent of their parent or guardian (article 7 of the Spanish LOPDGDD); the app gives the club the consent template and lets it record that it has it.

Within the club, each staff member only sees the teams that match their role.

6. Who else processes the data, and where

These providers are used to deliver the service. They process data on our behalf and under the same safeguards:

ProviderPurposeLocation
SupabaseDatabaseEuropean Union (Paris)
VercelHosting and running the appEuropean Union (Paris)
ResendEmail delivery (access keys and notifications)European Union / United States
NotionData backupUnited States
Google and AppleDelivering notifications to the phoneUnited States

Where a provider is outside the European Economic Area, the transfer relies on the mechanisms in GDPR chapter V (an adequacy decision —South Korea has had one since 2021— or standard contractual clauses).

7. Security

All communication is encrypted (HTTPS). Passwords are stored with key-derivation functions, never in plain text; the session lives in a signed cookie; isolation between clubs and teams is checked on the server on every request, and access is logged.

8. How long it is kept

For as long as the player's account exists in their club. When the club deletes it, all their records go with it: wellness, effort, attendance, injuries, notices and conversations. They disappear from the backup within 30 days at most.

If the club stops using SyncState, its data is returned or erased as the club chooses, unless the law requires keeping it.

9. Your rights and how to delete your account

You can ask for access to your data, its rectification or erasure, restriction of or objection to its processing and its portability, and withdraw consent at any time. As your club is the controller, the request goes to them; we help them handle it.

To delete your account and all your data: from the app (My stats → Your account → Request deletion), or by following the steps on the “Delete your account” page. You can also write to digital@sportsync.pro and we will pass your request on to your club.

If you believe your rights have not been respected, you can complain to the data protection authority in your country; in Spain, the Agencia Española de Protección de Datos (www.aepd.es).

10. Cookies

The app only uses strictly necessary technical cookies: the session, the language and, when entering through a team link, one that recognises the device. There are no advertising or analytics cookies.

11. Changes

If this policy changes, it will be published here with its new date. If the change is significant, the app will let you know.