Privacy Policy
Last updated: 18 August 2026
SquadScout AI ("the app", "we", "us") is a personal Fantasy Premier League companion tool. This policy explains what data we collect, why, and what rights you have over it.
SquadScout AI is not affiliated with, endorsed by, or connected to the Premier League, the Football Association, or Fantasy Premier League. It's an independent, unofficial companion built on Fantasy Premier League's public data.
1. What we collect
| Data | Why we collect it |
|---|---|
| Email address | Used for sign-in (Supabase Auth) and, if you opt in, deadline reminder emails |
| Password | Never stored by us directly — handled and hashed by Supabase Auth |
| FPL manager ID | Public identifier you provide, used to fetch your squad and points from the official Fantasy Premier League API |
| League IDs | Public identifiers you provide, used to show your mini-league standings |
| Squad, points, and rank data | Pulled from Fantasy Premier League's public API for your manager ID, stored so the dashboard loads quickly without hitting FPL's servers on every visit |
| AI recommendations we generate for you | Stored so you're not charged/waiting for a fresh AI call every time you open the app |
| Your feedback on AI suggestions (👍/👎) | If you use this feature, stored against the recommendation it relates to |
| Email reminder preference | Whether you've opted in or out of deadline reminder emails |
We do not collect payment details, precise location, device identifiers for advertising, or any data beyond what's listed above.
2. How your data is used
- To show your squad, points, and league standings on your dashboard.
- To generate AI-powered transfer, captain, and chip suggestions.
- To send you an optional email before each gameweek deadline, if you've turned this on.
- To keep your account secure and functioning (sign-in, password reset).
We do not use your data for advertising, and we do not sell or rent your data to anyone.
3. Who else sees your data
SquadScout AI runs on a small number of third-party services that process data on our behalf, strictly to run the app:
| Service | What it handles |
|---|---|
| Supabase | Hosts our database and handles sign-in/authentication. Your email, manager ID, squad data, and AI recommendations are stored here. |
| Vercel | Hosts the website and runs the backend code that talks to Supabase and the FPL API. |
| Anthropic (Claude API) | Your squad, points, and budget data are sent to Anthropic's API to generate your AI recommendations. Anthropic processes this data to generate a response and does not use it to advertise to you. |
| Resend | If you've opted into deadline reminder emails, your email address and a short summary of your squad status are sent here to deliver that email. |
| GitHub Actions | Triggers our scheduled data refresh. It does not handle your personal data directly — it only calls our own backend on a timer. |
Some of these providers may process data on servers outside the UK/EEA. Each operates under its own privacy and security standards; we've chosen providers with a general reputation for security, but we don't control their infrastructure directly.
We never expose your data to other users beyond what you'd expect from a mini-league feature (e.g. your public FPL rank being visible to others in the same public FPL league — that's already true on the official site, not something SquadScout AI adds).
4. How long we keep it
We keep your data for as long as your account exists. If you delete your account (Settings → Delete account), your email, manager ID, stored squad snapshots, league snapshots, and AI recommendations are permanently deleted immediately — this is enforced at the database level, not just hidden from view.
5. Your rights
You can, at any time:
- View your current data through the app itself.
- Download a copy of your stored data via Settings → Download my data.
- Correct your FPL manager ID or league list via the app.
- Delete your account and all associated data via Settings → Delete account.
- Opt out of deadline reminder emails via Settings → Notifications, or the unsubscribe link in any reminder email.
If you're in the UK or EU, these map onto your rights under UK GDPR / the EU GDPR (access, rectification, erasure, and objection to processing). To exercise any of these beyond what the app's settings page offers, contact us at contactus@squadscoutai.com.
6. Cookies
We use only the essential session cookie set by Supabase Auth to keep you signed in. We do not use tracking, analytics, or advertising cookies.
7. Children
SquadScout AI isn't directed at children and isn't intended for use by anyone under 16. We don't knowingly collect data from children.
8. Security
We use Supabase's Row Level Security so that your data is only ever readable by your own signed-in account, and all traffic is encrypted in transit (HTTPS). No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, standard precautions.
9. Changes to this policy
We may update this policy as the app changes. Material changes will be reflected here with an updated date at the top.
10. Contact
Questions about this policy or your data: contactus@squadscoutai.com