Privacy Policy

Last Updated:

Covalant UG (“Covalant”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data when you use our AI analytics platform.

1. Who We Are

Covalant is an AI-powered sports analytics platform based in Germany. Our platform allows players and coaches to upload match and training footage for analysis. Controller under GDPR: Covalant UG Donaustrasse 44, 12043, Berlin Germany info@covelant.com

2. What Data We Collect

We collect and process the following categories of personal data:

  • Account Data: Name, email address, password.

  • Profile Data: Physical statistics such as dominant hand (left/right), height, and similar.

  • Uploaded Content: Videos and training/match footage you upload.

  • Transaction Data: Payment details processed securely via Stripe (we do not store your credit card information).

  • Usage Data: Information about how you use our platform (credits used, subscription type, login activity).

We never sell your data.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contractual necessity – to provide you with the platform’s services (Art. 6(1)(b) GDPR).

  • Legal obligation – to comply with tax, accounting, and legal requirements (Art. 6(1)(c) GDPR).

  • Legitimate interests – to improve our services and prevent fraud (Art. 6(1)(f) GDPR).

  • Consent – required for WHOOP data integration and certain communications (Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR for health-related data).

4. How We Use Your Data

We use your personal data to:

  • Provide, maintain, and improve the Covalant platform.

  • Analyse uploaded footage and deliver insights.

  • Process and integrate WHOOP data where you have given consent.

  • Manage subscriptions and payments via Stripe.

  • Communicate with you about your account, usage, or support requests.

  • Ensure compliance with applicable laws and platform security.

5. Data Storage and Security

  • Your data is stored on secure servers within the European Economic Area (EEA).

  • All video uploads and WHOOP data are encrypted in transit and at rest.

  • We implement strict access controls and security measures to protect sensitive information.

6. Data retention

  • Account data: kept until you delete your account.

  • Uploaded videos: can be deleted by you at any time.

  • Transaction data: retained for up to 10 years as required by German tax law.

  • Backup data: deleted within 30 days of account deletion.

7. Sharing of Data

  • Stripe Payments: All payment transactions are processed by Stripe. Stripe’s privacy policy can be found at https://stripe.com/privacy.

  • Service Providers: Cloud and technical providers process data under strict contracts.

  • Legal Compliance: Disclosure may be required by law.

8. Your Rights under GDPR

You have the right to:

  • Access your personal data.

  • Rectify inaccurate data.

  • Erase data (“right to be forgotten”).

  • Restrict processing.

  • Port your data.

  • Object to processing.

  • Withdraw consent (especially for WHOOP data) at any time.

  • Lodge a complaint with a data protection authority-

9. Account & Video Deletion

You may delete your videos or your account at any time. Data will be permanently removed from active systems and backups within 30 days.

10. International Data Transfers

We store data within the EEA. If transfers outside the EEA occur, safeguards such as EU Standard Contractual Clauses will apply.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you.

13. Contact

For questions, requests, or complaints regarding this Privacy Policy, please contact us at: info@covelant.com 📍 Covalant UG, Donaustrasse 44 12043 Berlin, Germany