Legal

PRIVACY POLICY

Last updated: October 2026 · Version 2026-10

1. Data controller

The controller of the personal data collected through the Nivela AI app and website is NivelaAI Analytics (company in the process of incorporation; "we"), contact email: hola@nivelaai.com.

We will publish its tax ID and registered address in this policy and in the Legal notice as soon as its registration is completed.

2. Data we collect

We only collect the data needed to provide the service:

We do not collect location data, banking data or any special category of personal data.

3. Purpose and legal basis

4. Data retention

Waiting list data is kept until the official launch or until you ask to be removed. Account data, profile photo, videos and the push notification identifier are kept for as long as you keep your account active. After the account is deleted, the data is erased within a maximum of 30 days, unless there is a legal obligation to retain it.

5. Providers and sharing with third parties

We do not sell or hand over your data. To provide the service we use these providers, which process data only on our behalf (data processors):

We may also disclose data to public authorities when required by law.

6. Visibility between users

Nivela AI includes social features (player groups) in which part of your information is shown to other users — not to external third parties, but to people with whom you share a group within the app itself. Specifically, the members of a group you belong to can see:

We do not share your videos with other users, only the numerical result of the analysis. You can leave a group at any time from the app, which removes your information from the view of the other members.

7. Minors

Nivela AI is intended for people aged 14 or over. If you are under 14, you may only use it with the permission of your parents or legal guardians (Art. 7 of the Spanish data protection act, LOPDGDD). If we find an account of a child under 14 without that permission, we will delete it.

If you are a coach or club and upload videos showing minors (for example, academy students), you must have the permission of their parents or guardians.

8. International transfers

Some providers (Cloudflare, Supabase, Resend and Google) are US companies and may process data outside the European Economic Area. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

9. Your rights

In accordance with the GDPR and the Spanish Organic Law on Data Protection (LOPDGDD), you have the right to:

To exercise any of these rights, write to us at hola@nivelaai.com. We will reply within a maximum of 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Cookies and storage on your device

The website and the app do not use advertising or tracking cookies. The app only stores on your device what is strictly needed to work: your signed-in session, your language and your preferences.

Usage statistics are collected without cookies, without storing any identifier on your device and without linking them to your name or email.

11. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including encryption in transit (HTTPS) and at rest.

12. Changes to this policy

We may update this policy to reflect changes in the service or in the applicable regulations. We will notify you of relevant changes by email or by a notice in the app. The date of the last update always appears at the top of this document.

13. Contact

For any query about privacy or data protection: hola@nivelaai.com