Which Premier League Clubs Take and Share the Most Data from Fans?

A new study has revealed which Premier League clubs' apps collect and share the most fan data, based on each club's own mobile apps disclosure.

The research, carried out by Free Bets, analysed Google Play "Data safety" disclosures for all 20 clubs' apps to discover which clubs' apps take the most of fans' data, and those that share this information.

Which club's app takes the most data?

Of the 19 Premier League clubs with an official downloadable mobile app, such as Google Play Scores, this is the data listed as being shared from users' devices.

Invasiveness: High2

Invasiveness: Medium8

Invasiveness: Low9

Share data onward12

Declare no sharing7

Search for a club

Order Takes the most first Takes the least first Club name A to Z

Filter

High Medium Low Shares data Copy data Reset

Rank

Club

Data footprint

Invasive Score

1 TOT Tottenham HotspurInvasiveness: High · 19 data types tracked · shares data

32/40 ▼

Invasiveness: HighShares data19 types trackedInvasive Score 32/40

What it tracks 19 data types

NameEmail addressPhone numberAddressUser IDsOther infoApproximate locationPrecise locationVoice or sound recordingsOther in-app messagesPhotosVideosDevice or other IDsApp interactionsIn-app search historyOther actionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 20 data types

NameEmail addressPhone numberAddressUser IDsOther infoApproximate locationPrecise locationVoice or sound recordingsPhotosVideosUser payment infoPurchase historyDevice or other IDsApp interactionsIn-app search historyOther actionsCrash logsDiagnosticsOther app performance data

Collects the most data of any club app, the only one recording audio/voice and in-app messages, and one of just two sharing users' precise location.

(8 shared × 2) + (8 collected × 1) + 8 bonus = 32

Highlighted = especially sensitive, and carries the score bonus

App: Official Spurs AppDeveloper: Tottenham HotspurPackage: uk.co.spurs.officialEncrypted in transit: YesDeletion on request: Yes

2 LIV LiverpoolInvasiveness: High · 16 data types tracked · shares data

27/40 ▼

Invasiveness: HighShares data16 types trackedInvasive Score 27/40

What it tracks 16 data types

NameEmail addressPhone numberAddressOther infoApproximate locationContactsUser payment infoPurchase historyDevice or other IDsApp interactionsIn-app search historyOther actionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 18 data types

NameEmail addressPhone numberAddressApproximate locationPrecise locationContactsUser payment infoPurchase historyDevice or other IDsInstalled appsOther user contentApp interactionsIn-app search historyOther actionsCrash logsDiagnosticsOther app performance data

The only club app that shares users' contacts and their list of installed apps with other companies.

(7 shared × 2) + (7 collected × 1) + 6 bonus = 27

Highlighted = especially sensitive, and carries the score bonus

App: The Official Liverpool FC AppDeveloper: Liverpool Football ClubPackage: tv.liverpoolfcEncrypted in transit: YesDeletion on request: Yes

3 ARS ArsenalInvasiveness: Medium · 1 data type tracked · shares data

10/40 ▼

Invasiveness: MediumShares data1 type trackedInvasive Score 10/40

What it tracks 1 data type

Other app performance data

What it shares with other companies 6 data types

NameUser IDsOther infoPurchase historyDevice or other IDsApp interactions

Collects very little itself, but passes personal info, device IDs and purchase history to other companies.

(4 shared × 2) + (1 collected × 1) + 1 bonus = 10

Highlighted = especially sensitive, and carries the score bonus

App: The Arsenal: Official AppDeveloper: Arsenal Football ClubPackage: com.arsenal.officialEncrypted in transit: YesDeletion on request: Yes

3 MCI Manchester CityInvasiveness: Medium · 11 data types tracked · shares data

10/40 ▼

Invasiveness: MediumShares data11 types trackedInvasive Score 10/40

What it tracks 11 data types

NameEmail addressPhone numberAddressUser IDsRace and ethnicityApproximate locationDevice or other IDsApp interactionsCrash logsOther app performance data

What it shares with other companies 1 data type

User payment info

The only club app that collects users' race and ethnicity data.

(1 shared × 2) + (5 collected × 1) + 3 bonus = 10

Highlighted = especially sensitive, and carries the score bonus

App: Manchester City Official AppDeveloper: Manchester City FC LtdPackage: com.mancityEncrypted in transit: YesDeletion on request: Yes

5 CHE ChelseaInvasiveness: Medium · 9 data types tracked · shares data

9/40 ▼

Invasiveness: MediumShares data9 types trackedInvasive Score 9/40

What it tracks 9 data types

NameEmail addressPhone numberUser IDsApproximate locationDevice or other IDsApp interactionsCrash logsDiagnostics

What it shares with other companies 1 data type

Precise location

One of only two club apps sharing users' precise (GPS-level) location with other companies.

(1 shared × 2) + (5 collected × 1) + 2 bonus = 9

Highlighted = especially sensitive, and carries the score bonus

App: Chelsea Official AppDeveloper: Chelsea FCPackage: com.chelseafc.the5thstandEncrypted in transit: YesDeletion on request: Yes

5 MUN Manchester UnitedInvasiveness: Medium · 16 data types tracked · shares nothing

9/40 ▼

Invasiveness: MediumShares nothing16 types trackedInvasive Score 9/40

What it tracks 16 data types

NameEmail addressPhone numberAddressUser IDsOther infoApproximate locationPhotosVideosPurchase historyDevice or other IDsApp interactionsIn-app search historyOther actionsCrash logsDiagnostics

What it shares with other companies

This club declares it shares no data with other companies.

Collects a broad range of data (7 categories) but says none of it is shared with other companies.

(0 shared × 2) + (7 collected × 1) + 2 bonus = 9

Highlighted = especially sensitive, and carries the score bonus

App: Manchester United Official AppDeveloper: Manchester United LimitedPackage: com.mu.muclubappEncrypted in transit: YesDeletion on request: Yes

7 BRE BrentfordInvasiveness: Medium · 9 data types tracked · shares data

8/40 ▼

Invasiveness: MediumShares data9 types trackedInvasive Score 8/40

What it tracks 9 data types

NameEmail addressUser IDsOther infoDevice or other IDsApp interactionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 4 data types

App interactionsCrash logsDiagnosticsOther app performance data

Collects basic personal and device details; shares app-performance and usage data with other companies.

(2 shared × 2) + (4 collected × 1) + 0 bonus = 8

App: Brentford FC OfficialDeveloper: Brentford Football ClubPackage: com.incrowdsports.football.brentfordEncrypted in transit: YesDeletion on request: Yes

7 BHA Brighton & Hove AlbionInvasiveness: Medium · 9 data types tracked · shares data

8/40 ▼

Invasiveness: MediumShares data9 types trackedInvasive Score 8/40

What it tracks 9 data types

NameEmail addressUser IDsOther infoDevice or other IDsApp interactionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 4 data types

App interactionsCrash logsDiagnosticsOther app performance data

Collects basic personal and device details; shares app-performance and usage data with other companies.

(2 shared × 2) + (4 collected × 1) + 0 bonus = 8

App: BHAFC AppDeveloper: Brighton & Hove Albion FCPackage: mobi.digitalstadiumEncrypted in transit: YesDeletion on request: Yes

7 CRY Crystal PalaceInvasiveness: Medium · 9 data types tracked · shares data

8/40 ▼

Invasiveness: MediumShares data9 types trackedInvasive Score 8/40

What it tracks 9 data types

NameEmail addressUser IDsOther infoDevice or other IDsApp interactionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 4 data types

App interactionsCrash logsDiagnosticsOther app performance data

Collects basic personal and device details; shares app-performance and usage data with other companies.

(2 shared × 2) + (4 collected × 1) + 0 bonus = 8

App: Official Crystal Palace AppDeveloper: Crystal Palace FCPackage: uk.co.tribehive.fli.palaceEncrypted in transit: YesDeletion on request: Yes

7 LEE Leeds UnitedInvasiveness: Medium · 6 data types tracked · shares data

8/40 ▼

Invasiveness: MediumShares data6 types trackedInvasive Score 8/40

What it tracks 6 data types

Email addressDevice or other IDsApp interactionsCrash logsDiagnosticsOther app performance data

What it shares with other companies 4 data types

App interactionsCrash logsDiagnosticsOther app performance data

Collects basic device and account details; shares app-performance and usage data with other companies.

(2 shared × 2) + (4 collected × 1) + 0 bonus = 8

App: Leeds United OfficialDeveloper: InCrowd (Leeds United FC)Package: com.incrowdsports.football.leedsEncrypted in transit: YesDeletion on request: Yes

11 NEW Newcastle UnitedInvasiveness: Low · 0 data types tracked · shares data

4/40 ▼

Invasiveness: LowShares data0 types trackedInvasive Score 4/40

What it tracks

This club declares it collects no user data.

What it shares with other companies 3 data types

App interactionsCrash logsDiagnostics

Says it collects no user data directly, but still shares crash/diagnostics and usage data with other companies via analytics tools.

(2 shared × 2) + (0 collected × 1) + 0 bonus = 4

App: Official Newcastle United AppDeveloper: Newcastle United Football Company LimitedPackage: com.nufc.appEncrypted in transit: YesDeletion on request: Yes

12 BOU AFC BournemouthInvasiveness: Low · 2 data types tracked · shares data

3/40 ▼

Invasiveness: LowShares data2 types trackedInvasive Score 3/40

What it tracks 2 data types

NameEmail address

What it shares with other companies 1 data type

Device or other IDs

Collects just name and email; shares a device ID with other companies.

(1 shared × 2) + (1 collected × 1) + 0 bonus = 3

App: AFC BournemouthDeveloper: AFC BournemouthPackage: uk.co.afcb.appEncrypted in transit: YesDeletion on request: Yes

12 EVE EvertonInvasiveness: Low · 2 data types tracked · shares data

3/40 ▼

Invasiveness: LowShares data2 types trackedInvasive Score 3/40

What it tracks 2 data types

NameEmail address

What it shares with other companies 1 data type

Device or other IDs

Collects just name and email; shares a device ID with other companies.

(1 shared × 2) + (1 collected × 1) + 0 bonus = 3

App: EvertonDeveloper: Official Everton Football ClubPackage: com.urbanzoo.everton.releaseEncrypted in transit: YesDeletion on request: Yes

14 FUL FulhamInvasiveness: Low · 4 data types tracked · shares nothing

2/40 ▼

Invasiveness: LowShares nothing4 types trackedInvasive Score 2/40

What it tracks 4 data types

NameEmail addressUser IDsCrash logs

What it shares with other companies

This club declares it shares no data with other companies.

Collects name, email and crash logs; shares nothing with other companies.

(0 shared × 2) + (2 collected × 1) + 0 bonus = 2

App: Official Fulham FC AppDeveloper: Fulham Football ClubPackage: com.fulhamfc.appEncrypted in transit: YesDeletion on request: Yes

15 AVL Aston VillaInvasiveness: Low · 3 data types tracked · shares nothing

1/40 ▼

Invasiveness: LowShares nothing3 types trackedInvasive Score 1/40

What it tracks 3 data types

NameEmail addressUser IDs

What it shares with other companies

This club declares it shares no data with other companies.

Collects only name and email; shares nothing with other companies.

(0 shared × 2) + (1 collected × 1) + 0 bonus = 1

App: Aston VillaDeveloper: Aston Villa Football ClubPackage: com.incrowdsports.football.villaEncrypted in transit: YesDeletion on request: Yes

15 COV Coventry CityInvasiveness: Low · 2 data types tracked · shares nothing

1/40 ▼

Invasiveness: LowShares nothing2 types trackedInvasive Score 1/40

What it tracks 2 data types

NameEmail address

What it shares with other companies

This club declares it shares no data with other companies.

Collects only name and email; shares nothing with other companies.

(0 shared × 2) + (1 collected × 1) + 0 bonus = 1

App: Coventry City FCDeveloper: Coventry City Football ClubPackage: uk.co.ccfc.appEncrypted in transit: YesDeletion on request: Yes

15 HUL Hull CityInvasiveness: Low · 2 data types tracked · shares nothing

1/40 ▼

Invasiveness: LowShares nothing2 types trackedInvasive Score 1/40

What it tracks 2 data types

NameEmail address

What it shares with other companies

This club declares it shares no data with other companies.

Collects only name and email; shares nothing with other companies.

(0 shared × 2) + (1 collected × 1) + 0 bonus = 1

App: Hull CityDeveloper: Hull CityPackage: co.uk.wearehullcity.appEncrypted in transit: YesDeletion on request: Yes

15 IPS Ipswich TownInvasiveness: Low · 2 data types tracked · shares nothing

1/40 ▼

Invasiveness: LowShares nothing2 types trackedInvasive Score 1/40

What it tracks 2 data types

NameEmail address

What it shares with other companies

This club declares it shares no data with other companies.

Collects only name and email; shares nothing with other companies.

(0 shared × 2) + (1 collected × 1) + 0 bonus = 1

App: Ipswich Town Official AppDeveloper: Ipswich Town Football ClubPackage: uk.co.itfc.appEncrypted in transit: YesDeletion on request: Yes

15 NFO Nottingham ForestInvasiveness: Low · 3 data types tracked · shares nothing

1/40 ▼

Invasiveness: LowShares nothing3 types trackedInvasive Score 1/40

What it tracks 3 data types

NameEmail addressPhone number

What it shares with other companies

This club declares it shares no data with other companies.

Collects only name, email and phone number; shares nothing with other companies.

(0 shared × 2) + (1 collected × 1) + 0 bonus = 1

App: Official Nottingham Forest AppDeveloper: Nottingham Forest Football ClubPackage: uk.co.nottinghamforest.appEncrypted in transit: YesDeletion on request: Yes

Showing all 19 clubs

How this was built: each club's official mobile app was found on Google Play and every figure comes from that app's public "Data safety" section. A club's score is the number of data categories it shares with other companies, counted double, plus the number it collects, plus a bonus for especially sensitive categories. These disclosures are self-reported by each developer to Google and are not independently audited, so the score measures what a club declared, not what an audit found.

How the Invasive Score works

Invasive Score = (categories shared × 2) + (categories collected × 1) + sensitive-data bonus

Scores are shown against a scale of 40. That is the practical ceiling for a football club app across the Google Play categories these apps actually use, not the arithmetic maximum of the formula.

Sharing counts double. Data a club passes to other companies leaves its control, so it carries more risk than data the club merely holds.

Sensitive-data bonus

Added once per category present, whether collected or shared:

+2 points

Precise location, contacts, audio or voice recordings, race and ethnicity, messages

+1 point

Photos and videos, financial info (payment or purchase data), your list of installed apps

Bands

16 and up Invasiveness: High

6 to 15 Invasiveness: Medium

0 to 5 Invasiveness: Low

Joint ranks

Clubs on an identical score share a rank, so two clubs can be joint‑third.

Two counts, and why both are here

Google groups disclosures into broad categories such as "Personal info", then lists the individual data types inside each one, such as name, email and phone number.

The score is built on categories, because that is the unit Google's own framework uses and the only one that compares cleanly between clubs. Every club row also shows the individual data-type count, which is the more vivid figure but is not what the score is calculated from. Both are labelled everywhere they appear so the two are never mixed up.

What invasiveness does not mean

The score reflects the declared scope of collection and sharing. It says nothing about how much data is held, how long it is kept, who the third parties are, or whether a club honours its own disclosure. A low score means a club declared less, not that it was independently verified.

Scope and sources

Figures come from each app's public Google Play "Data safety" section, retrieved 4 August 2026 and re-checked 11 August 2026. Android only, as Apple uses a different disclosure format that is not directly comparable. No official Sunderland AFC app was listed on Google Play, so 19 of the 20 clubs are scored.

Badges

Club marks on this page use each club's identity colours and standard three-letter code. They are not official club badges.

Data: Google Play "Data safety" disclosures, retrieved August 2026. Analysis: Freebets.com. Free to reuse with credit and a link. Freebets.com is an affiliate publisher, not a bookmaker.

The Premier League's Most Invasive Apps

Tottenham Hotspur scored a whopping 32 on Freebets.com's Invasiveness Score, the only app recording audio and in-app messages.

Coming up the rear in second place were Liverpool, with a score of 27, the only app sharing users' contacts.

Arsenal and Manchester City completed third, tied on a score of 10 apiece.

The Least Invasive Apps

At the other end of the table, five clubs were found to have the least invasive apps in the Premier League: Aston Villa, Coventry City, Hull City, Ipswich Town and Nottingham Forest all scored just 1, sharing nothing with third parties.

No official Sunderland AFC app could be found on Google Play at the time of research.

What Stands Out

Tottenham's app stands out for doing both at scale: it discloses sharing 20 separate categories of data with other companies, including voice or sound recordings and precise location, alongside collecting a near-identical list itself, the broadest disclosure of any club in the study.

Manchester City is the only club whose app collects users' race and ethnicity data, while Newcastle United presents an unusual case at the other end of the scale: its app declares no data collected directly, yet still shares crash, diagnostics and usage data with other companies, most likely through third-party analytics tools built into the app.

Brighton & Hove Albion's result also comes with a footnote: the club lists two separate apps on Google Play, the main "BHAFC App" analysed here, and a separate "MyAlbion Hub" app with its own, different disclosure, which was not included in this ranking.

Dominic Celica, Director of PR at Grandstand, said: "Fans hand over a lot of personal information without necessarily realising it, and this study shows just how differently clubs approach that responsibility. Every figure here comes from information the clubs themselves have already made public, it's worth a look before downloading any club's official app."

With Premier League apps set to see a surge in downloads ahead of the new season, this study is a timely reminder to check exactly what you're signing up for before you tap install.

For fans getting ready for the season kick-off, Free Bets, the home of the best betting sites, has the latest sign-up offers and free bets available now.

Joshua Kerr

Having completed a bachelor's degree in sports journalism and over five years of industry experience, Josh made the transition into digital PR and iGaming back in 2021 and has worked on leading award-winning PR campaigns and projects for industry leaders, such as Betway, working within their UK, US and Canadian markets. Now working within Grandstand, Josh is part of the PR activation process for Freebets.com, the home of the best betting sites.