Statcut Privacy Policy

Last updated: September 18, 2026

This Privacy Policy describes how Statcut ("Statcut," "we," "us," or "our") collects, uses, discloses, and protects information when you access or use the Statcut mobile application, websites, and related services (collectively, the "Service").

IMPORTANT: The Service is a sports performance analytics tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment.

Fitbit and Google API data: If you connect a Fitbit account or otherwise authorize access to Google-related health or fitness data, Statcut accesses that data only with your authorization and only to provide the user-facing features you request. Google/Fitbit user data is not used to train or improve generalized or foundational artificial intelligence or machine learning models.

1) Who this policy applies to

This policy applies to: (a) individual athletes or players ("Players"), (b) coaches, teams, or organizations ("Teams"), and (c) other users who create an account or interact with the Service.

2) Information we collect

2.1 Information you provide

Account information: name, email address, authentication credentials, team affiliation, and account role (such as player, coach, or administrator).
User content you upload or submit: game or practice footage, clips, photos, tags, notes, training logs, and other content you choose to provide.
Support communications: messages you send to customer support, survey responses, feedback, and other communications with us.

2.2 Information collected from connected devices and third parties

When you connect Google Health (including data from Fitbit), Statcut requests two read-only permissions:

https://www.googleapis.com/auth/googlehealth.activity_and_fitness.readonly — used for steps, active minutes, active zone minutes, calories burned, and distance.
https://www.googleapis.com/auth/googlehealth.health_metrics_and_measurements.readonly — used for heart rate.

Together with their timestamps, this is "Biometric & Health Data". Statcut does not request or collect sleep, heart rate variability, or workout data.

We access only the categories of connected-device data necessary to provide the features you authorize.

You can disconnect Google Health at any time. Disconnecting within Statcut withdraws our access at Google and deletes the health data we have stored for you. If you instead revoke Statcut's access through your Google or Fitbit account settings, our access ends for future data retrieval.

2.3 Information collected automatically

Device and usage data: app events, feature usage, IP address, device identifiers, operating system version, app version, crash logs, and approximate location derived from IP address.
Cookies and similar technologies on our website, where applicable.

3) How we use information

We use information to:

Provide, operate, and maintain the Service, including wearable syncing, sports performance analytics, biometric visualizations, video analysis, tagging, and related features.
Personalize your experience and display your statistics, trends, analytics, and performance insights.
Enable Team features when a Player is linked to a Team, as described in Section 5.
Train and improve Statcut's computer-vision and machine-learning systems using eligible game or practice footage and associated tags, where permitted and as described in Section 6.
Maintain security, prevent fraud or abuse, troubleshoot errors, debug the Service, and protect users and our systems.
Provide service-related communications, product updates, account notices, and customer support.
Comply with legal obligations and enforce our terms, policies, and agreements.

Google/Fitbit user data is excluded from Statcut's generalized AI/ML model-training activities. We do not use raw, aggregated, anonymized, de-identified, or derived Google/Fitbit user data to create, train, improve, or fine-tune generalized or foundational AI/ML models.

4) Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal information based on one or more of the following legal bases:

Performance of a contract: where processing is necessary to provide the Service you requested.
Consent: for example, when you choose to connect Fitbit or another wearable integration, and separately where consent is required for permitted model-training uses involving eligible footage and related tags.
Legitimate interests: such as maintaining security, preventing fraud, troubleshooting, and improving the operation of the Service, where those interests are not overridden by your rights.
Legal obligations: where processing is required to comply with applicable law.

5) Sharing and disclosure

5.1 Sharing with your Team

If you join or are added to a Team account, your data may be made available to authorized Team users, such as coaches or designated staff, as part of the Service's role-based features.

Teams are responsible for obtaining any consents required by applicable law before collecting, uploading, or accessing Player data. Statcut is not responsible for a Team's independent use of Player data outside the Service.

You control whether you connect Google Health. If you do, the limits below apply to what an authorized Team user can see.

What a coach can see. A coach can see a player's heart rate only for the duration of a game that coach recorded — from the start of the footage to its end. Coaches cannot see a player's heart rate at any other time, cannot see step counts, activity, or any daily summary, and can never access a player's Google credentials. Each access by a coach to a player's heart rate is recorded.

5.2 Service providers

We may share information with service providers that help us operate the Service, such as infrastructure hosting, database hosting, analytics, error monitoring, communications, and customer support providers.

These providers are authorized to process information only as necessary to provide services to Statcut and are required to protect information in accordance with applicable contractual and legal obligations.

5.3 AI/ML service providers

Statcut does not transfer Google/Fitbit user data to third-party AI/ML providers for the purpose of training or improving their models.

Statcut's computer-vision and machine-learning models used for sports analytics are self-hosted or operated within infrastructure controlled by Statcut. Google/Fitbit user data is not transmitted back to an external model provider for generalized model training or other secondary purposes.

5.4 Legal, safety, and business transfers

We may disclose information to comply with applicable law, legal process, court orders, or lawful governmental requests.
We may disclose information where reasonably necessary to protect the rights, safety, security, or integrity of users, Statcut, or the public.
Information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and any required user rights or consents.

5.5 No selling or advertising use of Google/Fitbit data

We do not sell Google/Fitbit user data. We do not use Google/Fitbit user data for advertising, personalized advertising, interest-based advertising, or cross-context behavioral advertising.

6) Footage and AI/model training

Statcut uses computer vision and machine learning to provide and improve sports-video detection, tagging, and performance analytics.

Where permitted by law and your applicable consent or Team agreement, eligible basketball game or practice footage and associated tags or labels may be used to train and improve Statcut's computer-vision and machine-learning models.

Where such training occurs:

We de-identify training content where feasible, including by removing direct identifiers, separating account identifiers from training datasets, and using randomized identifiers.
We may use eligible footage and associated labels in aggregated or de-identified form for internal model development and product improvement.
We do not publish your raw footage publicly without your explicit permission.

Google/Fitbit data exclusion: Google/Fitbit user data, including Biometric & Health Data obtained through Google or Fitbit APIs, is not used to create, train, improve, or fine-tune Statcut's generalized or foundational AI/ML models.

This exclusion applies to raw Google/Fitbit data and to data that has been aggregated, anonymized, de-identified, or derived from Google/Fitbit user data.

Google/Fitbit user data is used only to provide or improve the user-facing functionality authorized by the user, such as displaying biometric trends, performance context, and related analytics within Statcut.

You may opt out of eligible training uses involving your footage and associated labels where required by law or where Statcut provides an applicable opt-out control.

7) Google API Limited Use

Statcut's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

Google user data is used only to provide or improve user-facing Statcut features that the user has authorized.

Statcut does not use raw, aggregated, anonymized, de-identified, or derived Google user data to create, train, improve, or fine-tune generalized or foundational artificial intelligence or machine-learning models.

Statcut does not sell Google user data, use Google user data for advertising, or transfer Google user data to third-party AI/ML providers for their model training or secondary purposes.

8) Data retention

We retain information only for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, maintain security, and fulfill other legitimate purposes permitted by applicable law.

Retention periods vary by data type:

Account data: retained while your account is active and for a reasonable period afterward where necessary for legal, security, or administrative purposes.
Footage: retained until you or your Team deletes it or the applicable account is deleted, subject to backups, legal holds, and applicable retention requirements.
Google/Fitbit data: detailed, minute-by-minute heart-rate readings are deleted automatically after 180 days, and daily activity and heart-rate summaries after 365 days. Data is deleted immediately when you use either control described in Section 11.
Other de-identified or aggregated data: data that is not obtained from or derived from Google/Fitbit user data may be retained longer for analytics, security, product improvement, and permitted model development.

9) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including:

encryption in transit using HTTPS/TLS;
encryption at rest of Google access credentials using AES-256-GCM, with the encryption key held outside the database;
database-level access controls that prevent any user of the Service, including the account holder, from reading stored credentials;
an internal record of access to health data; and
least-privilege permissions.

No system can be guaranteed to be completely secure, and we cannot guarantee absolute security of information.

10) Your choices and rights

10.1 Access, correction, export, and deletion

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a copy of your personal information.

You can delete your Google/Fitbit health data, or your entire account, at any time using the in-app controls described in Section 11, or by contacting us.

10.2 Consent controls for Biometric & Health Data

Biometric & Health Data may be sensitive personal information. Where required, we obtain affirmative authorization or consent before accessing this information through a wearable integration.

You may withdraw authorization for future access at any time by disconnecting Google Health within Statcut or revoking Statcut's access through your Google or Fitbit account.

10.3 California privacy rights

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, access, delete, correct, and receive information regarding certain uses of personal information.

Statcut does not sell personal information and does not share personal information for cross-context behavioral advertising.

10.4 Illinois and other biometric privacy laws

Where biometric privacy laws apply, including the Illinois Biometric Information Privacy Act where applicable, Statcut will provide required notices, obtain required consent, and follow applicable retention and destruction requirements.

11) Managing and deleting your Google/Fitbit data

In Statcut, go to Settings → Integrations. Two controls are available there, and both take effect immediately:

Delete my health data: removes every stored heart-rate and activity record while keeping your Google Health connection active, so new data continues to sync.
Disconnect: withdraws Statcut's access at Google and deletes all stored health data. Nothing further is collected.

You can also:

Revoke access from Google: remove Statcut from your Google or Fitbit account's connected apps. This prevents any future retrieval of data.
Delete your account: go to Settings → Account & Security → Delete Account. This cancels your subscription, withdraws our Google access, and permanently deletes your account, videos, and health data. You can also contact contact@statcut.com.

12) International transfers

If personal information is transferred across national borders, we use safeguards required by applicable law, such as standard contractual clauses where applicable.

13) Children

Players under 13 may use Statcut where a parent, guardian, or their team or organization has provided any consent required by applicable law.

Google Health (including Fitbit) integration is available only to users aged 13 or older. We ask for date of birth at registration for this reason, and Statcut does not collect Biometric & Health Data from users under 13. For an under-13 account the integration is disabled.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has connected a health integration or provided information without appropriate consent, contact contact@statcut.com and we will delete it.

14) Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service, on our website, or by other means where required by applicable law.

15) Contact

Statcut
Attn: Privacy
Email: contact@statcut.com