Privacy notice

Last updated: 11 October 2026. This notice covers the Kyri Stats website and Android app.

Who is responsible for your information?

The data controller is Simon Howe trading as Kyri Stats, 43 Harrison Road, Worthing, BN14 8LS, United Kingdom. For privacy questions or to exercise your rights, use our contact page or write to this address.

Information we collect

• Account information you provide: email address, a securely hashed password, and messages you send to support. We record email verification status and account identifiers.
• Subscription records: Stripe customer and subscription identifiers, status, payment-event identifiers, invoice identifiers and confirmed paid periods. Stripe collects payment and billing-address information during Checkout; Kyri Stats does not store full card details.
• Research preferences: saved watchlists and named filters, associated with your account or browser/app session as applicable.
• Technical and security information: session identifiers, request information in server logs, and hashed identifiers derived from login information and network address for rate limiting. Hashing these identifiers does not necessarily make them anonymous.
• Information on your device: essential website cookies, and Android account-access information and downloaded match research stored locally.

We obtain information directly from you, from your use of the service and from Stripe payment and subscription confirmations. API-Football supplies football research data; it is not used to process your subscription payments.

Why we use it and our lawful bases

• Contract: creating and verifying your account, signing you in, providing subscription access, handling payments and cancellations, saving your research preferences and responding to service requests.
• Legitimate interests: protecting accounts, preventing abuse and duplicate payment processing, investigating errors and resolving disputes. Our interest is operating a secure and reliable service; we consider the impact on your privacy.
• Legal obligation: retaining or disclosing records where needed to meet applicable accounting, tax or other legal requirements.

Verification and password-reset emails are service messages. Information needed to create an account and verify payment is required to provide paid access; without it we cannot supply that access. We do not make solely automated decisions with legal or similarly significant effects on you. Subscription checks use your verified account and confirmed payment status to control access; contact us if a check is incorrect.

Cookies and local storage

The website uses essential session and security cookies to keep you signed in, remember session-based preferences and protect forms against forged requests. Blocking them can stop login or saving from working. The Android app stores account-access information and a downloaded snapshot for offline use. Sign out to remove saved app account access; clear app storage or uninstall the app to remove its local data. These actions do not cancel a subscription or delete server-side records.

Who receives information?

Stripe receives your account email, account reference and information needed for Checkout and subscription management. Stripe also handles payment information you enter directly and processes information for its own payment, fraud-prevention and legal purposes as described in Stripe’s privacy policy.

Our hosting, email-delivery and backup providers process information needed to run and protect the service. Authorised people administering Kyri Stats may access it for support and operations. We may disclose relevant records to professional advisers or authorities when necessary for legal obligations or legal claims. We do not sell your personal information.

International processing

Stripe and service providers may process information outside the UK. Where we make a restricted transfer, UK data protection law requires an appropriate transfer arrangement, such as UK adequacy regulations or approved contractual safeguards. Contact us for details of the destinations and safeguards relevant to your information. Stripe describes its international processing in its privacy policy linked above.

How long we keep information

Account and preference records are retained while needed to provide your account. Cancelling renewal leaves your account in place; you can separately request deletion. We assess whether records are still needed when handling a deletion request or closing an account.

Billing records may need to remain after account closure for applicable accounting and tax obligations, payment disputes or legal claims. Support and security records are kept for as long as needed to resolve the issue, investigate abuse or protect against a related claim. Retention depends on the record, applicable legal period and any unresolved matter, rather than a single period for all data. Backup copies may remain until replaced in the normal backup cycle and are used for recovery. Contact us for the retention criteria applying to a particular record.

Your rights

Depending on the circumstances and lawful basis, you can request access, correction, erasure, restriction of processing or a portable copy of information you provided. You can object to processing based on legitimate interests. Some information may need to remain to meet legal obligations or deal with legal claims; we will explain any applicable exception.

Use our contact page or write to the address above. We may ask for information needed to verify your identity and normally respond within one month. If a permitted extension is needed for a complex request, we will explain it. Requests are normally free of charge.

You can complain to the Information Commissioner’s Office, the UK data protection regulator, or your local supervisory authority where applicable. You may contact us first so we can try to resolve your concern, but you do not have to.

Updates

We will update this notice when our practices change and communicate material changes where appropriate. The date above identifies this version.