Privacy Policy for ActiveScanning

Version 2.1 · applies from 24 October 2026
This is an English translation. The Norwegian version is the governing one.

ActiveScanning is a training diary for football players. Many of the people who use it are under 18. This explains what we store about you, what stays on your phone, who gets to see what, and how you get it deleted.

If you are a parent or guardian: the player gives consent themselves from the age of 13. Section 7 is about what you get from us.

1. Who we are

The controller is Edda AS, organisation number 945 211 512.
Questions about privacy: personvern@trainingdiary.com. Anything else: support@activescanning.com.

2. Who can use the app

You must have turned 13. When you register, you give your month and year of birth, and we work out whether you have turned 13.

If you have not turned 13, you cannot register. We then create no account, and the age you gave is not stored by us. The email address you logged in with has been used to send you the login code. A coded version of it is kept in the protection against misuse for up to seven days (section 3). Your browser gets a block that lasts one year (section 9).

Up to and including the year you turn 14, you must give the email address of a parent or guardian. When we write «13 or 14» in this text, we mean up to and including the year you turn 14. The guardian gets an email saying that you have started using the app. It contains your name and your year of birth. The address is not stored on your account. It is in the email that documents the consent (section 8).

Month and year of birth cannot be changed in the app afterwards. If you have entered them wrong, we correct it when you write to us.

3. What we store on our side

About you

• Name and email address.
• Year of birth and month of birth. We do not store date of birth. The year places you in the right age group, which decides how often the reports come and when you get the year summary. The month and year together are used to check that you have turned 13. Otherwise the month is only used to give age context in your report, never to change your numbers.
• The language you have chosen.
• Which version of the consent text you have accepted.
• The choices you have made in the app: which separate consents you have given, and whether reminders and coach visibility are switched off.

What you log

• Matches: date, team, opponent, score, minutes you played and minutes you have logged, home or away, type of match, match format, which position you played if you state it, yellow and red cards, and goals you scored from penalties and free kicks. If you correct a match afterwards, we store when you did it and which fields you changed.
• What you count in the match, for each involvement: whether it was a reception or a recovery, how many times you looked around (scans), critical scans, what happened with the ball (pass, dribble, shot, goal, assist, lost ball), and if you record it: position, half, number of touches, time and whether you used your weak foot. If you play in goal, the goalkeeper events are also stored: saves, high balls, coming off your line, crosses, back passes and goals conceded, with what happened and whether you were under pressure, and a count of your distributions by type, length and whether they reached a team-mate.
• Training and other sessions: the date, what kind of session it was, and how long it lasted. You can also add how hard the session was (1 to 5), how the quality or feel was (1 to 5), and whether the day turned out differently than planned: «Less time», «Tired today» or «Just log what I did». If you choose «Other sport», the name you type for the sport is stored.
• Strength sessions: the name you give each exercise, and for each set the reps, kilos and how heavy it was.
• Sessions you bring in from a watch or GPS vest, as a file or a screenshot: date, activity, duration, distance and top speed. The file and the image stay on your phone. Heart rate, calories and sleep are not included.
• Everyday movement (Human Rewild): what you did, for how long, and what it gave you (body, outdoors, social or useful).
• Older sessions may hold two numbers the app no longer asks for: whether you were there for the whole session, half of it or not at all, and how fun it was (1 to 10).
• Two numbers only if you have switched it on yourself: how well you think you looked around, and how hard the match was on your body (1 to 10). You can switch it off again. Numbers already stored then stay until you ask us to delete them. This applies to the two questions at the end of the match report. If you log a match as a session, how hard it was (1 to 5) is stored as for other sessions, without this choice.

If you use it

• Goals: which suggestions you chose, how many times a week you want to practise, and your answer each week (yes, a little or no).
• Fixed training times: which weekdays and times you usually train, for how long, what kind of session it is, and the name you give it. The app creates sessions from them and records them as done by itself. If you were not there, you say so in the app. The session then stays with us, marked as not done. If you would rather be asked every time, switch off «Save planned training sessions as completed automatically» in the settings. The coach does not see the times, but sees the date of your sessions (section 6).
• The penalty log: for each penalty you log in a penalty shoot-out, we store the outcome (goal, save, wide or woodwork), where the ball went and which zone that is, where you planned to shoot, the goalkeeper's angle, which penalty in the order you took, the date, and the opponent as you wrote it in the match report. The result of the match and of the shoot-out is also stored on the team, without your name, and the others on the team can see it. If you make a plan for your penalties, it is stored (zone, how you want to shoot, power and foot), and earlier versions of the plan are kept. Older penalties may hold three things the app no longer asks for: how ready you felt, whether you followed your routine, and the time from the whistle. The penalty log has its own consent text. Section 6 says what the coach sees.
• Favourite team: if you choose a favourite team, the team is stored on your account. When your report shows the team's next match, our server fetches it from the service football-data.org. The only thing sent there is the team's number. Nothing about you is sent, and the service sees the server's address, not yours.
• Calendar: you can paste in the address of a calendar you follow, for example your team's. Our server fetches the calendar about twice a day and creates sessions from the events that have taken place. It also fetches it when you open the training page or the training log, to show your week and the time of sessions that are waiting, and when you preview or add the address. What is fetched then is not stored. We store the address encrypted, the words you have chosen to filter on, when the calendar was last fetched, and whether the fetch failed. On the session we store the calendar's own number for the event, so the same event does not become two sessions. The titles of the events are not stored. The session is only called «Match» or «Training». Training sessions are recorded as done by themselves, as for fixed training times. Matches you must confirm yourself. If an event is cancelled in the calendar, the app deletes the session only if it is still waiting for you to confirm it.
• Report choices: which parts your report should have, and how often and when it arrives.
• Records from the tools in the app: your best number and the date, for example in juggling.
• FLAG DOWN in ranked matches: If you play FLAG DOWN signed in, in a ranked match, we store a generated nickname, the area you choose, your points, rating, answer times and answers, and the messages you send when you disagree with a call: which situation, the reason you chose and, if you are 18 or older, the text you write. The text is deleted 90 days after you sent it. Everything is deleted when the account is deleted. We also store which version of this policy you accepted before your first ranked match.

If your team uses the team module (see also section 6)

• That you are on the team: name, role, shirt number, whether you are captain.
• Call-ups to training sessions and matches, and your answer. If you answer no, you can write a short message to the coach. Never write anything about health there.
• Carpooling: meeting point, departure time, who is driving, number of seats, and who is riding along. The app stops what looks like a street address, but it does not catch all of them. Write a meeting point, never a home address.
• Notices from the coach, and that you have marked «read» if you tap it.
• The coach's match log: playing time, goals and result.
• The team's penalty competitions, if the coach keeps them: the list is stored as the coach wrote it.
• A guardian's email address, if the coach has entered it.
• A short comment the coach can write on a session, with the coach's name and the time. Only you and the coaches of your teams see it.

When you write to us

• The feedback button: your email address, the message (up to 2000 characters) and which page you were on.

Technical

• Abuse protection: when someone asks for a login code, enters the code, confirms a place on a team or sends us feedback, the server stores small files that count the attempts, so no one can try too many times. They are labelled with a code calculated from the email address or the IP address. One of the files counts all requests together and is not tied to anyone. The addresses themselves are not in them. The files are deleted within seven days.
• Just before we send you the reminder «Were you at practice?», the server stores a small file for that day, so you do not get it twice. The file is labelled with a code calculated from your account. Your name and email address are not in it. The file is deleted within seven days.
• Otherwise the server processes your IP address only while it is responding to you. It is not added to your account.
• The server keeps a technical log for troubleshooting. Your IP address is not in it. The log is deleted after 90 days.
• We count events in the app without names, for example how many registered today. We get a daily summary with only numbers.

We do not store

• Where you are (GPS).
• Free text about how you are doing, and health information. What you can store about how a session felt is numbers and fixed choices, never your own words.
• Height and weight. You can enter height, but it stays on the phone (section 4).
• Pictures, video or sound. The feature for your own pictures is not switched on. If it is switched on, the consent text says what applies, and this policy is updated first.
• Gender.

4. What stays on your phone

This is stored in the browser on your device and is not sent to us:

• Notes you write for yourself, including the goalkeeper note.
• The words you write yourself in your goals.
• Voice notes.
• Your height. It is encrypted, but the key is on the same phone. The encryption therefore does not stop someone who has your phone.
• Drafts of matches and sessions, until you submit them, and a copy of your latest sessions, so the app can suggest repeating them.
• The daily form you set.
• Your reflection after a match and your focus goal for the week.
• Your exercises and templates in the strength log.
• Your progress in the games and tools in the app, such as FLAG DOWN and juggling. If you have chosen a tool as part of your report, your best number and the date are stored with us (section 3).
• A copy of your birth year, and whether you have closed the «Complete your profile» card. If you earlier answered there whether you are a boy or a girl, the answer is on your phone, not with us.
• Settings, such as colour theme.

This also means that we cannot get it back. If you clear your browser, change phone or log in on another device, it is gone.

If you have notes from before that are stored with us, the app moves them to the phone the first time you open the match they belong to. It deletes the copy on our side only after it has checked that the text is on the phone.

5. What you write, and who reads it

Your notes stay on the phone. We cannot read them, and no AI reads them.

Text you send to others yourself is read by those you send it to: the message to the coach when you cannot come is read by the coach. Feedback to us is read by us.

We never send your notes to guardians, coaches or others. If you share your login with a parent, the parent can see what is in the app.

We are a training diary, not a crisis service. If you need someone to talk to: Alarmtelefonen for barn og unge (the Norwegian emergency helpline for children and young people), 116 111, and Mental Helse Ungdom (a Norwegian mental health helpline for young people), 116 123. Both are free and open around the clock.

If we learn about serious matters, for example because you or a guardian contact us, we, like everyone else, have a duty to try to avert serious criminal acts (straffeloven § 196, the section of the Norwegian Penal Code on the duty to avert serious crimes). We can also report a concern to barnevernet (the Norwegian child welfare services). The recipient is then a public authority, not a guardian.

6. Who sees what

You. Everything on your account.

Us. Only the people at Edda AS who need it to run the service have access to the data. Employees and temporary staff sign a confidentiality agreement before they get access.

Everyone on the team, if your team uses the team module. Players, guardians and support people who are on the team see:

• the squad: name, role, shirt number, who is captain, and which players have not logged in yet
• the team's calendar, and who has answered what to the call-ups
• the notices from the coach
• the car-sharing: driver, place and who is riding along

Only the coach sees the message you write when you cannot come.

The coach also sees:

• The guardian email the coach has entered. Others on the team do not see it.
• Who has marked a notice «read», and when. You choose yourself whether you tap.
• How many sessions have been recorded for you in recent weeks, and whether nothing has been recorded in the last week. Training sessions the app has recorded by itself count. When the coach opens the comment field for you, the coach sees the date of your 20 latest sessions and whether each was a match, a training session or another session. The coach does not see what the sessions contained. You can switch this off in the app whenever you want, and switch it on again.
• Your match numbers, only if you have said yes to this separately: scans, involvements, passes, dribbles, lost balls, shots, goals and assists, with your name. The coach sees them as rates and averages, together with how many matches and involvements they are built on, your minutes per position, and Action Score (an average from 0 to 10 of how your involvements ended). The coach can sort the team by a number and split the numbers by position, half, home or away, formation and date. To make that possible, the numbers from every match you have logged, including matches for other teams, are sent to the coach's browser: date, type of match, match format, home or away, minutes, position and each involvement. Opponent, score and notes are not included. You can say no now and yes later, or the other way around.
• From the penalty log, if you have accepted its consent text: the outcome and the zone of your penalties in the team's competitions. The coach does not see how ready you felt, or whether you followed your routine.
• The coach never sees your notes, your goals or the times in your fixed training times.

Guardians. See section 7.

No one else. We do not sell information. We do not share it with clubs, federations, sponsors or advertisers. The app does not show advertising. The app sends nothing to AI services, and we do not use the data to train AI models.

The services we use to run the app (data processors):

• Microsoft Azure: the server, the database (Dataverse) and the technical log are in Norway (Norway East). The website, that is the files the app consists of, is delivered from Microsoft's network outside Norway. Those files contain nothing about you. Everything you send to the server goes through Microsoft's network service Azure Front Door, which protects the server against attacks.
• Azure Communication Services: sends our emails. Microsoft stores them in Europe.
• The PDF service (Gotenberg): a program we run ourselves at Microsoft in Norway. It creates the PDF of your report and does not store it.
• Microsoft 365: our mailboxes. The feedback you send us and the emails that document consent are stored there.
• Cloudflare: receives email to personvern@trainingdiary.com and forwards it to our mailbox. Cloudflare keeps a log with sender, recipient and subject line for each email, and the log is kept for 31 days.

Two services get a request from our server, but nothing about you: football-data.org (next match for the favourite team) and the calendar whose address you have entered yourself.

Fonts, scripts and images in the app are hosted by us. The app loads nothing from other websites, and it has no tracking tools.

7. Parents and guardians

The player gives consent themselves from the age of 13 (personopplysningsloven § 5, the section of the Norwegian Personal Data Act on the age for giving consent). The account belongs to the player.

Guardians do not get their own access to the player's account. If you log in with your own email, you see no numbers, sessions or notes from it. If the player shares their login with you, you see what the player sees (section 5).

If the coach has added you to the team, you can log in with your own email. You then see what everyone on the team sees (section 6), and you can answer call-ups for your child.

Anything else you get comes by email:

• When a player aged 13 or 14 registers: one email saying that the player has started using the app, with the player's name and year of birth.
• The weekly summary, if the coach has added your email address to the team: the player's name, how many sessions and matches have been recorded for the player that week, suggestions for what you can praise and ask about, and general tips on good support at home. If nothing has been recorded that week, no email is sent. Training sessions the app has recorded by itself count. Some weeks there is also a section called «Verdt et blikk» (Worth a look). It comes at most every fourth week, when the player has recently been at training clearly less than before. It contains only suggestions for a calm chat, never numbers or a reason, and you can switch it off with the link in the email. Never content or numbers from the matches.
• Call-ups and notices from the team, if the coach has entered your email address.

The weekly summary is sent up to and including the year the player turns 14. From 1 January of the year the player turns 15, it is not sent. You can unsubscribe with the link in the email. The player can stop it by switching off the coach's access (section 6).

You can ask us to close the account of a player aged 13 or 14. Write to personvern@trainingdiary.com. We will then let the player know and delete the account within 30 days.

To you who are a player and feel unsafe at home: write to support@activescanning.com, and we will work it out together. If it is urgent: Alarmtelefonen for barn og unge (the Norwegian emergency helpline for children and young people), 116 111.

8. The emails we send

Every time someone registers or accepts a new consent text, an email also goes to our own privacy inbox with name, email address, birth year, how the age was checked, time, language and which version of the text was accepted, and the previous version when you accept a new one. When a player aged 13 or 14 gives a guardian's email address, at registration or the first time the age is given, the address is also there. If you say yes to helping make the advice better (section 10), or withdraw that yes, an email goes there with name, email address and time. When you say yes, it also says which version of the consent text you have accepted. This is how we document consent.

9. Cookies and storage in the browser

The app uses no cookies for tracking or advertising.

• One cookie is set by the app: the block for someone who has not turned 13 (section 2). It lasts one year and contains nothing about you.
• The login is kept in the browser's storage as long as the tab is open, not in a cookie.
• What is listed in section 4 is kept in the browser's storage on your device.
• Microsoft, which runs the servers, can set technical cookies that are needed for the site to work.

10. If you want to help make the advice better

This is a separate, voluntary choice in the app. If you say no, you use the app exactly as before.

If you say yes, the numbers you log from then on (sessions, matches, involvements and scans) can count when we work out what good advice and the right limits in the reports are, together with the numbers of many others. Year and month of birth can count, so that the advice becomes more accurate for those born late in the year.

This is how we do it:

• Your name and email are replaced with a code before the numbers are worked on. The link between the code and you is kept only by us.
• We only work on groups of at least 20 players. No one gets to see your numbers, and no one is compared by name.
• The calculation is run by hand by us. Rows are then created with your code, year of birth, month of birth, scans and involvements. Group figures are only calculated when at least 20 players are included.
• If you withdraw your yes, the app deletes your rows and the link to you straight away. Group figures that have already been calculated remain. They contain nothing that can be linked to you.

We never use your month of birth to change your numbers.

11. What we use the information for, and why we are allowed to

We use the information to give you an overview of your own matches and sessions, create your reports, let your team use the team module, and keep the service secure. If you have said yes in section 10, we also use it to make the advice better. We do not use it for advertising, sales or research that is published.

• Your account and what you log: your consent (the General Data Protection Regulation, GDPR, Article 6(1)(a)). You can consent yourself when you have turned 13 (personopplysningsloven § 5, the Norwegian Personal Data Act).
• The two numbers about yourself, the penalty log, the coach's access to the match numbers, and helping make the advice better: separate consents that you give and withdraw one by one in the app.
• The team module: your consent. The coach sees only their own team.
• Feedback: our legitimate interest in being able to reply to you (Article 6(1)(f)). You contact us yourself.
• The protection against misuse, the mark for a sent reminder and the technical log: our legitimate interest in keeping the service secure.

We do not process health information.

12. How long we store

• Your account and what you have logged: until you ask us to delete it, or withdraw your consent. We then delete everything about you within 30 days.
• Feedback: deleted no later than 90 days after the case is closed. This also applies to the copy in our inbox.
• Applications to become a beta tester came to us by email, with email address, year of birth and three yes/no answers. We delete them on the day registration opens.
• The protection against misuse and the mark for a sent reminder: up to seven days.
• The technical log: 90 days.
• Backups at Microsoft: 28 days. What you have had deleted can therefore remain in a backup for up to 28 more days.
• PDF reports: not stored by us. The copy in your email is yours.
• Group figures (section 10): remain, because they cannot be linked to anyone.

We never lock old data behind payment.

13. Your rights

You can:

• See everything we have about you.
• Have what is wrong corrected.
• Have everything about you deleted.
• Have your data handed over as a data file you can take with you (JSON).
• Ask us to pause the processing temporarily.
• Withdraw your consent at any time, without saying why.

Some things you do yourself in the app: switch off the coach's access, switch off the two numbers about yourself, withdraw your yes to helping make the advice better, and download your data.

You can also download a text summary. It is created on our server according to fixed rules, without AI and without other services. It contains year and month of birth, an overview of sessions and matches, scans, outcomes, positions and development over time. Name, email, notes and height are not included. What you do with the file afterwards is up to you. If you paste it into an AI service, that service's terms apply.

Everything else we do for you: write to personvern@trainingdiary.com. There is no button for deleting the account. We delete by hand and reply within 7 days.

You can complain to Datatilsynet (the Norwegian Data Protection Authority): Postboks 458 Sentrum, 0105 Oslo, phone 22 39 69 00, datatilsynet.no.

14. Money

ActiveScanning is free today. Logging matches and getting your own reports will stay free. Later there may be voluntary memberships that give extra features.

We will never sell data, show advertising, sponsored content or affiliate links, or lock old data behind payment. If we introduce paid features, you will be told at least six months in advance.

15. Changes

This is version 2.1. What is new in 2.1 is section 16, for people who live in the United States. It does not change what we store, who sees it or what we use it for, so no one is asked again. What is new in version 2 is the point about FLAG DOWN in ranked matches (section 3). If we change what we store, who sees it, or what we use it for, we will show the new text in the app and ask the people it affects to accept it. The change in version 2 affects only those who play FLAG DOWN in ranked matches, and you are asked before your first ranked match. Which version you have accepted is stored on your account. You can get earlier versions of the policy by writing to us.

16. If you live in the United States

What the app stores on our side (section 3) is kept in Norway (EEA), under European data-protection law. Section 6 lists the services we use, among them Cloudflare, a US company that receives e-mail to personvern@trainingdiary.com and forwards it to our mailbox.

We do not sell or share personal information, and we show no advertising.

You must be 13 or older to use the diary. If we learn that an account belongs to someone under 13, we delete it.

You can have anything you have entered, and your whole account, deleted. Write to personvern@trainingdiary.com. We reply within 7 days and delete it within 30 days. Deleted data may remain in backups for up to 28 days.

If you are 13 to 17: optional e-mails (reminders and the note when your season summary is ready) are off unless you turn them on.

Residents of the United States: if a security breach affects your data, we notify you as required by your state's law.