Privacy Policy

Draft · revised 16 October 2026

This document is a working draft and has not been reviewed by legal counsel — particularly regarding biometric data from minors and marketing consent. Professional legal review is required before publication.

1. Who We Are

Bound Pte. Ltd. ("Bound") is a football sports-technology company registered in Singapore. It is developing a smart insole and associated software for football clubs and academies.

2. What Data We Collect

Enquiry & contact data

When you submit an enquiry or contact us, we collect the details you provide — typically your name, email, organisation, role, country, squad size, the type of enquiry, and your message. Submissions are handled through our forms provider (Netlify).

Account data

Organisation name, contact person, email, and country.

Player profile data

Name, age group, playing position, and foot dominance.

Movement and biometric data

When a player wears Bound insoles during a session, we collect foot-pressure and motion (acceleration) data. This constitutes biometric data under applicable privacy laws and receives our highest level of protection.

Derived data

Session measures derived from raw sensor data, such as loading and left/right comparisons.

3. How We Use Data

Purpose	Legal Basis
Responding to enquiries & pilot outreach	Consent / legitimate interest
Biomechanical analysis & development insights	Contract + explicit consent (biometric)
Session reports for coaches	Contract performance
Algorithm improvement (anonymised only)	Legitimate interest
Platform security	Legitimate interest

We never use biometric data for advertising, sale to third parties, or automated decisions with legal effects.

4. Cookies & Local Storage

We do not use tracking, analytics, or advertising cookies, and the website does not store information in your browser's local storage.

The site loads fonts from Google Fonts (which may receive your IP address) and processes form submissions through Netlify. The enquiry form uses Google reCAPTCHA, provided through Netlify, to block spam; reCAPTCHA may set cookies and process your IP address. No advertising or cross-site tracking is involved.

5. Consent for Minor Players

We do not collect data from players under 18 without verifiable parental or guardian consent. The Academy is responsible for obtaining, maintaining, and recording that consent.

Parents can withdraw consent at any time by contacting the Academy or bound@trybound.tech. Affected data is deleted within 30 days.

6. Data Sharing

Player data is visible only to authorised staff within the Academy. We never share identifiable data between Academies, or with scouts, agents, or any third party.

No player names or identifiable data are sent to any AI/LLM provider; only anonymised session context is used for natural-language generation.

7. Data Storage and Security

All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
Per-Academy isolation so one Academy can never see another's data
Breach notification within 72 hours

8. Data Retention

Data Type	Retention
Enquiry & contact data	Until you ask us to remove it, or the pilot programme concludes.
Movement / biometric data	While the player is active. Deleted within 30 days of consent withdrawal.
Player profiles	While registered. Deleted within 30 days of removal.
Account data	While active. Deleted within 90 days of closure.
Anonymised / aggregated data	Retained indefinitely (cannot identify individuals).

9. Your Rights

Wherever you are, you can: access your data, correct inaccuracies, request deletion, and withdraw consent. EU/UK users have additional rights under GDPR; Singapore users have rights under the PDPA.

Contact bound@trybound.tech — we respond within 30 days.

10. SIM vs REAL Data

SIM (simulated) data contains no personal information. Only REAL data from physical insoles is subject to this policy. The active data mode is always visible in the interface.

11. Contact

Email: bound@trybound.tech

Company: Bound Pte. Ltd., Singapore