Privacy Policy
Last updated: October 5, 2026
NOVA STRATEGY CO., LTD. manages personal information for KICKUP Online and uses player and guardian information only as needed to provide the service.
1. Information collected
We collect email addresses, names, language, player age, goals, guardian details and consent records, videos, bookings, coaching notes, reports, inquiries and operational records. Cases with optional consent may also involve meeting video, audio, transcripts and AI drafts.
2. Purposes
We use information for registration, authentication, human coaching, scheduling, communications, reports, support, rights requests, fraud prevention and safety. Optional recording, transcription and AI processing are limited to organizing that case’s coaching content. We do not use submissions for public advertising or AI training.
3. Access and providers
Videos are private and accessible to the customer, assigned coach and necessary operations staff. We use Vercel for hosting, Supabase for authentication and database storage, Cloudflare R2 for video storage, Resend for email and Zoom for meetings. Optional AI processing sends necessary text to the OpenAI API. See Recording, transcription and AI for details. Google Drive stores recording copies, accessible to operations members authorized for the operations workspace.
4. International processing
Information may be handled outside Japan based on the locations of operations, coaches, providers and processing facilities. Our operations are based in Thailand and providers include companies in the United States and other countries. Contact us for details on processing locations, subprocessors and safeguards. Processing requiring specific consent will not begin until the explanation and consent are in place.
5. Retention and deletion
Submitted videos become due for scheduled deletion 90 days after report delivery. Replaced videos are also deleted. The app does not automatically delete original Zoom video, audio or transcripts. Operations meeting videos and lesson videos with confirmed video-storage consent are also copied to the connected Google Drive. Recording videos are not automatically deleted; operations handles retention and deletion requests individually. App transcripts and AI drafts become due for deletion at 92 days from recording. Cases, reports, consent and operational history are kept as needed for service and support; we explain scope and timing when handling closure or deletion requests. Providers may retain security logs under their own terms.
6. Optional consent and withdrawal
We record consent for each case. You can withdraw it on the case page to stop new processing. The app cannot itself stop a recording already running in a meeting: tell the coach immediately. Contact us separately to request deletion of information already stored.
7. Your requests
You or your guardian may request access, corrections, deletion or stopping use through our Contact page. After identity verification we will explain our response and timing. If retention is necessary for legal obligations or disputes, we explain why and what is retained.
8. Security and children
We use encrypted connections, private storage, authentication, case-level access control and operational logs. We check guardian consent for under-18 participation and optional processing and ask guardians to explain it to the player. We cannot guarantee complete anonymity or zero security risk.
9. Public-site usage analysis
We measure public-page visits, acquisition links, CTA clicks, scroll depth and registration/application steps to improve our service and guidance. A random browser identifier connects link navigation between our sites. After registration or sign-in, it can be linked to registration confirmation and applications within 30 days of acquisition. We do not collect form text, passwords, videos or private-note contents for this analysis. Public-page behavior records and identifier links are scheduled for deletion after 90 days. We respect Do Not Track and Global Privacy Control. You may also contact us to request an opt-out.