Privacy Policy

1. Who We Are

SportsMonkey is a sports coordination platform operated from the United Arab Emirates. For privacy, support, legal, or complaints matters, contact info@sportsmonkey.org.

2. Information We Collect

• Account data: first name, last name, email address, password hash, optional phone number, profile photo, country, and city.
• Google or Apple sign-in data: provider account ID and basic profile data needed to create or access your SportsMonkey account. We do not receive your Google or Apple password.
• Team and game data: teams, memberships, roles, game details, challenge history, RSVP status, player lists, standby lists, team splits, jersey colours, notes, and notifications.
• Location and venue data: city, country, venue name, address, place ID, latitude, and longitude when you create, search, or open game locations.
• Device and notification data: Firebase Cloud Messaging token, device/platform information needed for push notifications, and notification preferences.
• Photos and media: profile photos, team images, and shared game/team images if you choose to upload or generate them.
• Diagnostics and security data: app version, operating system, server logs, crash reports, request metadata, authentication/session records, and abuse-prevention signals.

3. How We Use Information

• Create and manage accounts, sessions, profiles, teams, pickup games, challenges, RSVP status, lineups, standby lists, notifications, and shared links.
• Show users relevant local teams and games based on team, profile, and game location information.
• Send push notifications for game invites, reminders, team activity, and important app updates.
• Provide customer support, investigate bugs, enforce terms, prevent fraud or abuse, and keep the platform secure.
• Comply with legal obligations and respond to lawful requests.

4. Launch Payment Position

For launch, contribution amounts shown in pickup games and team challenges are informational only. SportsMonkey does not require in-app wallet funds to accept or participate in pickup games. Users coordinate any payment outside the app unless a future payment feature is expressly enabled.

Wallet, venue booking, and in-app payment features are disabled in the launch version. Historical database fields or future-ready internal records may exist, but launch-facing pickup participation does not require wallet balance or in-app payment.

5. What Other Users Can See

• Your display name and profile photo may be visible to users who share a team, game, invite, or challenge with you.
• Your team membership, team role, RSVP status, player/standby status, and participation may be visible to relevant team members or game participants.
• Public teams and public pickup games can be discovered by users in relevant regions.
• Your email address, phone number, payment details, authentication provider IDs, and private support requests are not shown to other users.

6. Third-Party Services

• Supabase/PostgreSQL stores account, team, game, notification, venue, and admin records.
• Google Firebase may be used for push notifications, crash reports, and app support services.
• Google Maps and Places may be used for venue search, location display, and map directions.
• Google Sign-In and Sign in with Apple may be used for authentication.
• Email and messaging providers may be used for account, support, or operational communications.

7. Security

Passwords are stored as hashes, not plain text. Data in transit is protected with TLS. Access to personal data is restricted through server-side authentication and authorisation controls. Admin access should be limited to authorised personnel who need it for support, safety, security, legal, or operational purposes.

No system is completely secure. If we become aware of a personal data breach that requires user notice, we will notify affected users and/or regulators as required by applicable law.

8. Data Retention

• Active accounts: retained while the account exists and as needed to provide the service.
• Deleted accounts: public profile hidden immediately; underlying records retained for up to 12 months for legal compliance, dispute resolution, fraud prevention, safety, and security, then deleted or anonymised.
• Game and team records: may be retained to preserve team/game history, integrity, disputes, and platform statistics; where practical, personal identifiers may be anonymised after deletion.
• Push tokens: removed on logout, account deletion, or when no longer valid.
• Server/security logs: retained only as long as reasonably needed for security, debugging, legal, and operational purposes.

9. Your Rights and Choices

To exercise privacy rights, email info@sportsmonkey.org. We aim to respond within 30 days, subject to identity verification and applicable law.

• Access: request a copy of personal data we hold about you.
• Correction: update your profile in the app or contact support.
• Deletion: delete your account in Profile > Privacy & Security, or email us.
• Data portability: request an export by email. Automated in-app export is not yet available.
• Notifications: manage notification preferences in the app and through your device settings.

10. Children

SportsMonkey is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child's data has been submitted, contact info@sportsmonkey.org and we will review it promptly.

11. International Transfers

SportsMonkey is based in the UAE. Our service providers may process data in other countries. Where required, we will take reasonable steps to use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we may notify users in the app or by email. The Last updated date shows the current version.

13. Contact

General support, legal, privacy, complaints, and account deletion requests: info@sportsmonkey.org. WhatsApp support: +971 55 999 1430.