Privacy Policy

1. Introduction

PlayRez (“we,” “our,” or “us”) operates the PlayRez website at playrez.com and the PlayRez mobile application for iOS (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use any part of the Service.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect:

• First and last name
• Email address
• Phone number
• Password (stored securely using bcrypt hashing—we never store plaintext passwords)

Booking & Club Data

When you use the Service, we collect:

• Club memberships and community associations
• Court booking details (date, time, court, status)
• Event sign-ups and attendance records

Payment Information

Payments are processed entirely by Stripe, Inc. We never receive, store, or have access to your full credit card number, debit card number, or bank account details. Stripe may collect payment card information, billing address, and transaction data in accordance with their own Privacy Policy.

Device & Usage Information

We automatically collect certain technical information, including:

• Device type, operating system, and version
• IP address and approximate location (derived from IP)
• Pages or screens viewed, actions taken, and usage patterns
• Browser type and language preferences (web)

Mobile App–Specific Data

When you use the PlayRez iOS app, we additionally collect or store:

• Authentication tokens: Stored securely in the iOS Keychain on your device to keep you signed in. Tokens expire after 30 days.
• Notification preferences: If you grant permission, we may send push notifications for booking confirmations, reminders, and event updates. You can disable notifications at any time in your device settings.
• App preferences: Onboarding progress and selected club are stored locally on your device.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process court bookings and event registrations
• Facilitate payments between you and your club via Stripe
• Send booking confirmations, cancellation notices, and reminders
• Display club schedules, availability, and event information
• Improve, maintain, and troubleshoot the Service
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following circumstances:

• Club administrators: Your name, email, phone number, and booking details are visible to the administrators of clubs you join or book with. This is necessary for the Service to function.
• Payment processor (Stripe): Transaction data is shared with Stripe to process payments. Stripe acts as an independent data controller for payment data.
• Infrastructure providers: We use Vercel for hosting and MongoDB Atlas for data storage. These providers process data on our behalf under appropriate data processing agreements.
• Legal compliance: We may disclose information if required by law, subpoena, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We take the security of your data seriously and implement appropriate safeguards, including:

• All data transmitted between your device and our servers is encrypted using TLS (HTTPS)
• Passwords are hashed using bcrypt before storage
• Authentication tokens are stored in the iOS Keychain (the most secure storage available on the device)
• Payment card data is handled exclusively by Stripe, a PCI-DSS Level 1 certified processor
• Database access is restricted and authenticated

While we implement commercially reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or necessary to resolve disputes.

Anonymized or aggregated data (which cannot identify you) may be retained indefinitely for analytics and service improvement purposes.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to or restrict certain processing activities
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at keean@playrez.com. We will respond within 30 days.

Notifications: You can disable push notifications at any time through your device's Settings app. This does not affect your ability to use the Service.

8. Cookies & Tracking

Our website uses cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies or cross-site tracking.

The PlayRez mobile app does not use cookies. It does not track you across other apps or websites, and does not participate in any advertising identifier frameworks.

9. Third-Party Services

The Service integrates with the following third-party services, each of which has its own privacy policy:

• Stripe – Payment processing (Privacy Policy)
• Vercel – Web and API hosting (Privacy Policy)
• MongoDB Atlas – Database hosting (Privacy Policy)

10. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has provided us with their information, please contact us at keean@playrez.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the effective date above. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: