Privacy Policy

1. Introduction

This Privacy Policy describes how Baab Sport LLC ("Baab Sport," "Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application, website, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Full name, email address, phone number, date of birth, city, state, and zip code
• Complete Your Profile: Profile photo, skill level, preferred playing position, and sports preferences
• Verify Your Identity: Phone number verification via SMS
• Make Payments: Payment method information (processed securely by Stripe; we do not store full card numbers)
• Communicate: Messages sent through in-app chat, emails to support, and feedback you provide
• Create or Join Matches: Match preferences, availability, and participation history
• Form or Join Teams: Team name, team logo, roster information, and tournament registrations

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Log Data: IP address, browser type, pages visited, time and date of visits, time spent on pages, and other diagnostic data
• Location Data: With your permission, precise or approximate location data from your device to show nearby fields and matches
• Usage Data: Features used, actions taken, matches joined, booking history, and interaction patterns
• Push Notification Tokens: Device tokens for sending push notifications (if enabled)

2.3 Information from Third Parties

We may receive information about you from:

• Authentication Providers: If you sign in using Firebase Authentication, we receive your authentication credentials
• Payment Processors: Stripe provides us with transaction status, payment confirmation, and limited payment details
• Venue Partners: Information about bookings made at their facilities

2.4 Device Permissions & Access

Our mobile application may request access to certain features on your device. We will always ask for your explicit permission before accessing these features, and you can change these permissions at any time through your device settings.

a) Camera Access

We request camera access to allow you to:

• Take a new photo for your profile picture
• Capture images for team logos
• Share photos in chat conversations

Important: We do not access your camera in the background. Camera access is only activated when you explicitly choose to take a photo within the app.

b) Photo Library Access

We request photo library access to allow you to:

• Select an existing photo for your profile picture
• Choose images for team logos
• Share photos from your gallery in chat conversations

Important: When you grant photo library access, we only access the specific photos you select. We do not scan, upload, or analyze your entire photo library. Photos you upload are stored securely on our servers and used only for the purposes you intended.

c) Contacts Access (Address Book)

We request contacts access to enable our Invite Friends feature, which allows you to:

• Easily invite friends to join Baab Sport
• Find friends who are already using the app
• Send match invitations to contacts

Important: When you grant contacts access:

• We only read contact names and phone numbers for the invite feature
• We do NOT upload or store your entire contact list on our servers
• We do NOT send messages to your contacts without your explicit action
• Contact matching is done using secure, one-way hashing to protect privacy
• You can use the app without granting contacts access (manual invite by phone number is available)

d) Location Access

We request location access to:

• Show nearby fields and matches
• Provide location-based search results
• Display distance to venues

Important: Location data is only collected when the app is in use (not in the background). You can use the app without location access by manually entering your city.

e) Push Notifications

We request notification permission to send you:

• Match reminders and updates
• New message alerts
• Payment confirmations
• Important account notifications

You can disable push notifications at any time through your device settings or within the app's notification preferences.

2.5 Managing Device Permissions

You can manage or revoke any of these permissions at any time:

• iOS: Settings → Baab Sport → toggle permissions on/off
• Android: Settings → Apps → Baab Sport → Permissions

Revoking certain permissions may limit some features of the app, but core functionality will remain available.

3. How We Use Your Information

3.1 To Provide and Improve Our Service

• Create and manage your account
• Process field bookings and match participation
• Facilitate communication between players and match organizers
• Calculate and process payments, refunds, and credits
• Display your profile to other users (according to your privacy settings)
• Match you with appropriate players based on skill level and preferences
• Send match reminders and important updates

3.2 To Communicate With You

• Send transactional emails and SMS (booking confirmations, payment receipts, match updates)
• Send push notifications about matches, messages, and important updates
• Respond to your inquiries and support requests
• Send promotional communications (with your consent, where required)

3.3 To Ensure Safety and Security

• Verify user identities through phone verification
• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and community guidelines
• Investigate and respond to user reports and complaints
• Maintain audit logs for security and compliance purposes

3.4 To Analyze and Improve

• Analyze usage patterns and trends
• Conduct research and development
• Test and improve new features
• Generate aggregated, anonymized analytics

4. How We Share Your Information

4.1 With Other Users

Depending on your activities and settings, we share:

• Public Profile Information: Name, profile photo, skill level, and position to other players in matches you join
• Match Participants: Your participation status with other players in the same match
• Chat Messages: Messages you send in match or group conversations with other participants
• Team Information: Your team membership with other team members and tournament organizers

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Firebase/Google: Authentication, cloud messaging, and analytics
• Cloud Hosting Providers: Data storage and server infrastructure
• Email/SMS Providers: Sending transactional and marketing communications

4.3 With Venue Partners

When you book a field, we share necessary information with the venue:

• Booking date, time, and duration
• Contact information for booking confirmation
• Number of participants

4.4 For Legal Reasons

We may disclose your information if required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from public authorities (including law enforcement)
• Protect the rights, property, or safety of Baab Sport, our users, or others
• Enforce our Terms of Service and other agreements

4.5 Business Transfers

If Baab Sport is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.6 What We Do NOT Sell

We do not sell your personal information to third parties for their marketing purposes.

5. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our Service
• Required to comply with legal obligations (e.g., tax records, dispute resolution)
• Necessary to enforce our agreements and protect our legal rights

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.

Financial Records: Payment records are retained for 7 years as required by tax regulations.

Chat Messages: Match-related chat messages are automatically deleted within 30 days after match completion.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted between your device and our servers is encrypted using TLS/SSL
• Secure Payment Processing: All payment information is processed by Stripe, a PCI-DSS compliant provider
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Regular Security Audits: Periodic reviews of our security practices and infrastructure
• Phone Verification: Required phone verification to prevent fake accounts

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. You can access most of your information directly through your account settings.

7.2 Correction

You can update or correct your account information at any time through the app. If you need assistance, contact us at privacy@baabsport.com.

7.3 Deletion

You can request deletion of your account and personal data. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Marketing Opt-Out

You can opt out of promotional communications by clicking "unsubscribe" in any marketing email or adjusting your notification settings in the app. Note that you cannot opt out of transactional communications (e.g., booking confirmations, security alerts).

7.5 Push Notifications

You can disable push notifications through your device settings at any time.

7.6 Location Data

You can disable location services through your device settings. Note that some features (like finding nearby fields) may not function properly without location access.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out of Sale: We do not sell personal information, but you can contact us to confirm

To exercise your CCPA rights, contact us at privacy@baabsport.com or call +1 (412) 587-3533. We will verify your identity before processing your request.

9. Children's Privacy (COPPA Compliance)

Baab Sport is committed to protecting the privacy of children. We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable laws regarding children's privacy.

9.1 Age Restrictions

• Under 13: Our Service is NOT intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13.
• Ages 13-17: Users between 13 and 18 years of age may use the Service only with verifiable consent from a parent or legal guardian.
• 18 and Over: Users 18 years and older may use the Service without parental consent.

9.2 Age Verification

To ensure COPPA compliance, we implement the following measures:

• Date of Birth Collection: We require date of birth during registration to verify age eligibility
• Age Gate: Users who indicate they are under 13 are blocked from creating an account
• Account Review: We may request additional verification if we have reason to believe a user is under 13

9.3 If We Discover Underage Users

If we discover or are notified that we have collected personal information from a child under 13:

• We will immediately suspend the account
• We will delete all personal information associated with that account within 48 hours
• We will not use or share any information collected from the child
• We will notify the parent or guardian if contact information is available

9.4 Parental Rights

Parents and guardians have the right to:

• Review personal information we have collected from their child
• Request deletion of their child's personal information
• Refuse further collection or use of their child's information
• Withdraw consent previously provided

To exercise these rights, please contact us at privacy@baabsport.com with "COPPA Request" in the subject line. We will verify your identity as the parent or guardian before processing your request.

9.5 Report Underage Users

If you believe a user is under 13 years of age, please report it immediately to privacy@baabsport.com. We take these reports seriously and will investigate promptly.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for basic functionality (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

10.3 Do Not Track

Our Service does not currently respond to "Do Not Track" signals. However, you can manage your privacy preferences as described in this policy.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or services (e.g., venue websites, payment portals). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you visit.

12. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending you an email or push notification for significant changes

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: