PIBE app privacy policy

Memelut Ltd. · legal@pibe.ai

The PIBE app is published on the App Store by Memelut Inc. (developer). The PIBE service and the processing of your data are the responsibility of Memelut Ltd., controller: legal@pibe.ai.

• Account: email address (to sign in with a code, to sign the agreement and to send you your copy), first and last name, date of birth, position, club.
• Agreement: the signature data (email, typed signature, boxes, time, IP address when available, device) and, for minors, those of the parent or guardian (name and email).
• Contact about other proposals: only if you tick the optional box in the agreement (art. 13.5), we may also write to you about new services and programmes (including specialist examinations), introducing PIBE to other players, information on becoming an investor (adults only), events and research. Basis: your consent, which you can withdraw at any time by writing to us or with the link in every message.
• Health and activity: the daily summaries you authorise, with an explicit consent that we ask for only when you connect a source. From Apple Health and Health Connect only four: sleep, heart rate variability (HRV), resting heart rate, respiratory rate. From WHOOP (and from Oura when available), if you connect them, also recovery, strain, oxygen saturation, steps, active energy, workouts and VO2 max, depending on the device.
• Technical data: date and time of requests, app version and device type, IP address (when available), for security and support; if you turn on match alerts, the device's push notification identifier (deleted when you turn them off or delete the account); the record of when the Estimate was shown to you and of your last use.
• Public sports data (not collected from you): appearances, minutes, goals, assists, transfers, market value and days of unavailability of the profile you confirm, from Transfermarkt and from sports data providers. Basis: legitimate interest (art. 6(1)(f) GDPR; information under art. 14). You can object by writing to legal@pibe.ai.

• PIBE only reads the data types you authorise in the system screen, and never writes anything to Apple Health or Health Connect.
• This data is used only to provide your own service (your dashboard, comparisons with your own average and your personal model). Your agent never sees it, and neither does anyone else.
• We do not sell it, we do not use it for advertising, marketing or commercial profiling, and we do not give it to advertising platforms, data brokers or information resellers.
• It does not enter PIBE's Global Model or the Readings for third parties provided for in the Athlete Agreement (art. 5.3).
• We do not store it in iCloud. It is kept on our servers in the European Union, over encrypted connections.
• You can remove access at any time: on iPhone in the Health app › your profile › Apps › PIBE; on Android (when available) in the Health Connect app. In the app, «Disconnect» deletes the data already sent.

If you connect them, you authorise it on the manufacturer's page. We keep the access keys encrypted and use the data within the manufacturer's terms. You can disconnect them in the app: the keys and that device's data are deleted at once.

The contract with you (art. 6(1)(b) GDPR); for health data your explicit consent (art. 9(2)(a)), which you can withdraw at any time; legal obligations and proof of the contract (art. 6(1)(c) and (f)).

With the agent you connect: they see the WHOOP and Oura data you have connected only after you have signed the Athlete Agreement, never Apple Health or Health Connect data. With the technical providers that run the service: Hetzner (server hosting, Germany); Amazon Web Services (Amazon SES, Frankfurt region) for the emails with your codes and your copy of the agreement; Apple (the APNs notification service) to deliver your alerts, only if you turn them on: it receives the device identifier and the text of the alert; Anthropic (Claude), in the United States, under standard contractual clauses (safeguards under art. 46 GDPR), to write «PIBE's reading» of your career: it receives position, club, seasons, minutes, goals, assists and days of absence through injury from public sources, without your name and never your health data. Providers process data only on our behalf and are bound by contracts that guarantee the same level of protection described here. We do not sell personal data.

For as long as you have an account. If you delete it, profile, health data and connections are deleted at once from the live systems; backup copies are deleted within 7 days. The signature record of the agreement is kept for 10 years to protect both parties (art. 14.4 of the agreement). If you withdraw your consent to health data we stop collecting, disconnect WHOOP and Oura and delete the body data already uploaded at once.

The app contains no analytics, advertising or tracking SDKs, does not follow you across other apps or sites and does not use the advertising identifier.

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent: write to legal@pibe.ai. You can also complain to your data protection authority (in Italy, the Garante, garanteprivacy.it).

On entry we record the version of the terms of use you accept (read them here) and of the privacy notice you confirm you have read, with date, time, IP address (when available) and device, to prove the acceptance. This record is kept for 10 years even if you delete your account.

We do not ask for your body data to use the app. We ask only when you connect a source (Apple Health, Health Connect, WHOOP, Oura), with an explicit, separate consent (art. 9(2)(a) GDPR) of which we record version, date and time; under 18 a parent or guardian gives it with a code sent to their email. You withdraw it from You › Sources, with one tap, whenever you like: we stop collecting, disconnect WHOOP and Oura and delete the body data already uploaded at once.

• What: daily summaries of sleep, heart rate variability, resting heart rate, respiratory rate; from WHOOP (and from Oura when available) also recovery, strain, saturation, steps, energy and workouts.
• What for: to show you your body next to your matches, compare you with your own average and build your personal model, for you only. No diagnoses.
• Who sees it: you. Apple Health and Health Connect go to nobody else; your agent sees WHOOP and Oura only if you sign the Athlete Agreement.

Consent version: 2026-10-26b, of 26 October 2026.

Terms of use

In You › Proposals you see what someone requesting a Reading about you would receive: your public match numbers compared, anonymously, with other players of the same position, league and age band (at least 20, no names) and, only if you turn it on, a summary of your WHOOP or Oura data. Nothing is sent to anyone without your approval of each single request. The Athlete Agreement is optional: you sign it when there is a proposal.

The app is for people aged 14 and over. Under 18, consent to health data and the Athlete Agreement are given by a parent or guardian, with a code sent to their email; the PIBE Estimate and Readings for clubs are not available.

In the app: You › Delete account. Or write to legal@pibe.ai. All the details.