This policy explains what personal data KMS Youth Soccer Football Academy (“KMS”, “we”, “us”) collects through the KMS Youth Soccer – Parent mobile application and the web parent portal, how it is used, and how your privacy is safeguarded.
The app and portal are operated by KMS Youth Soccer Football Academy, which acts as the data user and decides what information is collected and for what purposes. Technical development, infrastructure hosting, and maintenance are handled on the academy’s behalf by Digital Pulse Tech Consultancy, who process data strictly under our instructions.
Account Eligibility: The parent app is exclusively designed for parents and legal guardians of registered academy players. Children do not hold individual accounts and cannot sign in directly.
What we collect
We limit our collection strictly to information required to run football training sessions, administer player enrollment, verify fee payments, and keep guardians informed.
About you, the guardian
- Full name, identity / passport number, mobile number, and email
- Relationship to player, and secondary emergency contact details
- 6-digit sign-in PIN (stored securely as a one-way cryptographic hash)
- Digital signature, timestamp, and IP recorded on the Code of Conduct
- Academy wallet balance, transaction ledger, and referral code
About your child (the player)
- Full name, identity / birth certificate / passport number, and date of birth
- Gender, assigned age group (e.g. Under-8, Under-12), and training squad
- Training session attendance records and coach evaluations
- Profile photo (optional, provided voluntarily by the guardian)
- Package enrollment details and monthly training fee status
Created by your interaction with the app
Strict Privacy Guarantee: What We Never Collect
We never collect your precise GPS location, read your address book or contacts, access your microphone, or track your activity across other apps. The KMS Parent application contains zero advertising SDKs and zero commercial behavioral trackers.
Why we collect it
Every piece of data collected has an explicit, necessary purpose for operating the football academy:
To establish your child’s enrollment, verify family guardianship, and ensure children are accompanied by authorized guardians.
Your child’s identification number combined with your secret 6-digit PIN securely authenticates your access to family records.
To schedule pitch sessions, allocate coaches, track training frequency, and compile player progress insights.
To compute monthly academy tuition, verify uploaded bank transfer slips, and manage sibling and referral credits.
To maintain the legally binding Code of Conduct waiver and reach parents immediately during field emergencies.
To deliver automated session reminders, weather delay advisories, and official academy announcements.
We never sell, broker, or trade personal data, nor do we perform algorithmic behavioral profiling.
How it is protected
We apply industry-standard defense-in-depth security measures to protect academy records:
Encrypted in Transit
All traffic between the mobile application, web portal, and our backend servers is strictly encrypted with modern TLS / HTTPS. Plain HTTP requests are rejected.
Cryptographic PIN Hashing
Your sign-in PIN is never stored as plaintext. It is hashed using irreversible cryptographic algorithms (bcrypt/Argon2). No administrator can read your PIN.
Hardware Keystore Tokens
Mobile API access tokens are stored in the device’s hardware-backed Secure Keystore (iOS Keychain / Android Keystore), isolated from standard phone storage.
Strict Tenant Isolation
Backend database queries enforce strict ownership scopes. A parent can only ever access data linked to their authenticated guardian profile.
How long we keep it
We retain player registration, squad records, and training attendance logs for the entire duration the player remains actively enrolled with KMS Youth Soccer Academy.
Following withdrawal or graduation from the academy, records are retained only for the minimum duration required to fulfill statutory financial, tax, and legal obligations under Malaysian accounting law (typically up to 7 years for payment transaction records). Uploaded receipt proofs are securely purged once the retention period concludes.
Your rights
As a parent or legal guardian, you have full authority to exercise data rights concerning your and your child’s records:
To submit an access, correction, or deletion request, email our compliance team at kmsyouthsoccer@gmail.com. Signing out of the mobile app immediately unregisters your push token, halting all remote notifications instantly.
Children’s data
Minor Protection & Guardian Authorization
The KMS Youth Soccer Parent application is operated exclusively for adults on behalf of minor players. A child’s personal data is supplied exclusively by the registered parent or legal guardian, who provides express consent via our signed Code of Conduct waiver.
Under no circumstances can children register accounts, access the portal, or share personal information independently.
Changes
We may periodically revise this Privacy Policy to reflect modifications in academy programs, legal requirements under the PDPA, or updates to app features. When material changes are introduced, we will update the revision date at the top of this document and post an announcement in the KMS Parent app.
Have questions about this policy?
Our data compliance team is available to assist parents and guardians with access requests, corrections, or general questions.