Privacy Policy - Matchabit

1. Information We Collect

We collect information you provide directly to us, including your name, email address, phone number, profile details (such as avatar, skill level, and sports preferences), booking/match/tournament activity, and messages you send through the app. We process in-app messaging data to provide group chats for matches, tournaments, leagues, coaching, and similar activities; to provide direct messaging between users; and to allow authorized club/organization managers to access activity chats for organization, support, incident review, or complaint-handling purposes. Matchabit support/operations may also review messages and related records for safety, abuse prevention, complaint resolution, service operation, and legal compliance. Messages are stored on our servers for the operation of the service and deleted in accordance with our retention policy. We also process payment-related data such as transaction status, payment provider transaction identifiers, refund/reconciliation records, match-video access and purchase references, and, if you use saved cards, provider card tokens and masked card details; full card numbers and CVC/CVV are processed by our payment provider and are not stored by Matchabit. We process location data when you allow device location for nearby match/venue suggestions, and we use selected venue/event location details for bookings, matches, tournaments, and coaching flows where needed. We also collect device or usage data like IP address, device identifiers, app version, and analytics or crash logs.

2. How We Use Your Information

We use the information we collect to operate and improve our services, process bookings, matches, tournaments, coaching flows, and payments, personalize recommendations, send notifications and service updates, provide customer support, and protect our users and platform. We may use message data to provide group and direct chat, handle support requests and complaints, protect safety, enforce our Terms, and comply with legal obligations.

3. Information Sharing

We do not sell your personal information. We may share information with clubs and participants for bookings, matches, and tournaments. When you purchase match-video access, the limited user, purchase, and match references required for access may be transferred to contracted video infrastructure providers; card, email, and phone information is not transferred. We may also share information with service providers for payments, notifications, analytics, hosting/storage, and location services. We may also share information when required by law or to protect our rights.

4. Data Security

We implement appropriate technical and organizational measures to protect personal data. Communications between the app and our servers use measures such as HTTPS/TLS for data in transit; for payment card data, we apply data minimization by not storing full card numbers or CVC/CVV and using provider tokenization where applicable. However, no method of transmission or electronic storage is 100% secure.

5. Your Rights

You can access and update your personal information through the app. You may request correction or deletion of your personal data by contacting us. Additional rights may apply under the laws of your country or region.

6. Account Deletion

You may request deletion of your account at any time. If you have no active matches, bookings, tournaments, or pending payments, your account will be scheduled for deletion 30 days after your request.

How to Request Account Deletion

You can request account deletion through the Matchabit mobile app:

Open the Matchabit app and go to Settings
Navigate to the Account section
Select "Delete Account"
Confirm your deletion request

You will receive a confirmation email once your deletion request has been submitted.

Requirements Before Deletion

Before your account can be deleted, you must resolve the following:

Cancel or complete any active matches
Resolve any pending payments
Cancel or complete any active bookings or reservations
Withdraw from any active tournaments

If you have any of these active items, you will be notified and asked to resolve them before your deletion request can be processed.

30-Day Deletion Period

Your account deletion is scheduled for 30 days after your request. During this period:

Your account remains scheduled for deletion
You can cancel your deletion request by logging back into the app
If you create new active matches, bookings, tournaments, or pending payments during this period, your deletion may be automatically cancelled
After 30 days, if all requirements are met, your account will be anonymized and deleted

Cancelling Account Deletion

You can cancel your account deletion request at any time before the 30-day period expires by simply logging back into the Matchabit app. Your account will be restored to normal status immediately.

What Happens When Your Account is Deleted

When your account is deleted after the 30-day period:

Your personal information (name, email, phone, bio, avatar) will be anonymized
Your account will be marked as deleted and you will no longer be able to log in
Historical match records and booking history may be retained in anonymized form for business and legal purposes
Payment records may be retained as required by law and financial regulations

Special Cases

Club Owner Accounts: Club owner accounts cannot be deleted through the standard deletion process. If you are a club owner and wish to delete your account, please contact us directly at [email protected]. Club owners must use club owner accounts to organize tournaments and matches at their clubs; standard accounts are not permitted for this purpose.

7. Analytics and Service Improvement

We use technical analytics to operate the service, run security checks, detect errors, and improve performance.

We currently do not run third-party advertising measurement flows and we do not show personalized ads in the app.

On iOS

Because we do not run an advertising flow, we do not use your device advertising identifier (IDFA) for ad measurement.

On Android

Because we do not run an advertising flow, we do not use your device advertising identifier (AAID) for ad measurement.

These technical signals are used for error detection, service stability monitoring, abuse prevention, and product improvement.

8. Contact Us

If you have questions about this Privacy Policy or need assistance with account deletion, please contact us through the app or at the contact information provided in our Terms of Use. For privacy-related inquiries, you can reach us at [email protected].

9. Club and Partner Data Processing

If a club or commercial partner uses Matchabit, the following additional privacy terms apply:

Roles and Responsibility: Depending on the feature and workflow, Matchabit and the club may each act as an independent controller, or one party may act as processor/service provider for the other, as defined in the applicable partner agreement.
Data Shared with Clubs: We may share booking details, limited user contact details, participation records, payment status metadata, and operational identifiers required for reservation fulfillment and customer support.
Permitted Processing by Clubs: Clubs may use personal data received through Matchabit only for booking operations, venue access, customer support, fraud prevention, accounting/tax obligations, and legal compliance.
No Unauthorized Marketing Use: Clubs may not use Matchabit user data for unrelated or independent marketing unless a valid legal basis exists and any required user consent has been obtained.
Retention and Deletion: Clubs must retain personal data only for as long as needed for the stated purposes or legal obligations, then securely delete or anonymize it.
Subprocessors and Cross-Border Transfers: Matchabit and clubs may use trusted service providers. Where data is transferred across borders, appropriate legal safeguards are applied as required by applicable law.
Security and Incident Handling: Clubs must implement reasonable technical and organizational security measures and notify Matchabit without undue delay of any incident affecting Matchabit user data.
Data Subject Requests: If a club receives a privacy request related to data sourced via Matchabit, the club must handle it under applicable law and role allocation, and cooperate with Matchabit when coordination is required.
DPA and Supplementary Terms: Where required by law, additional data processing terms, including DPA terms, may apply through a separate club/partner agreement.