Privacy Policy

1. Introduction

This Privacy Policy describes how Baab Sport LLC("Baab Sport," "Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application, website, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Full name, email address, phone number, date of birth, city, state, and zip code
• Complete Your Profile: Profile photo, skill level, preferred playing position, and sports preferences
• Verify Account Contact Details: Phone or email verification when required by your authentication method or a feature you use
• Make Payments: Payment method information (processed securely by Stripe; we do not store full card numbers)
• Communicate: Messages sent through in-app chat, emails to support, and feedback you provide
• Create or Join Matches: Match preferences, availability, and participation history
• Form or Join Teams: Team name, team logo, roster information, and tournament registrations

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Log Data: IP address, browser type, pages visited, time and date of visits, time spent on pages, and other diagnostic data
• Crash & Diagnostic Data: Crash reports, error logs, and diagnostic information (including device state, error context, and account identifiers) collected when the app or our services encounter a problem, to help us diagnose and fix issues
• Location Data: With your permission, precise or approximate location data from your device to show nearby fields and matches
• Usage Data: Features used, actions taken, matches joined, booking history, and interaction patterns
• Push Notification Tokens: Device tokens for sending push notifications (if enabled)

2.3 Information from Third Parties

We may receive information about you from:

• Authentication Providers: If you sign in using Firebase Authentication (including Google Sign-In and Sign in with Apple), we receive your authentication credentials
• Payment Processors: Stripe provides us with transaction status, payment confirmation, and limited payment details
• Venue Partners: Information about bookings made at their facilities

2.4 Device Permissions & Access

Our mobile application may request access to certain features on your device. We will always ask for your explicit permission before accessing these features, and you can change these permissions at any time through your device settings.

a) Camera Access

We request camera access to allow you to:

• Take a new photo for your profile picture
• Capture images for team logos
• Share photos in chat conversations

Important: We do not access your camera in the background. Camera access is only activated when you explicitly choose to take a photo within the app.

b) Photo Library Access

We request photo library access to allow you to:

• Select an existing photo for your profile picture
• Choose images for team logos
• Share photos from your gallery in chat conversations

Important: When you grant photo library access, we only access the specific photos you select. We do not scan, upload, or analyze your entire photo library. Photos you upload are stored securely on our servers and used only for the purposes you intended.

c) Contacts Access (Address Book)

We request contacts access to enable our Invite Friends feature, which allows you to:

• Easily invite friends to join Baab Sport
• Choose contacts for user-initiated invitations
• Share match or app invitations through your device's sharing tools

Important: When you grant contacts access:

• We only read contact names and phone numbers on your device for the invite feature
• We do NOT upload or store your entire contact list on our servers
• We do NOT send messages to your contacts without your explicit action
• We do NOT perform contact matching to determine which contacts already use Baab Sport
• You can use the app without granting contacts access

d) Location Access

We request location access to:

• Show nearby fields and matches
• Provide location-based search results
• Display distance to venues

Important: Location data is only collected when the app is in use (not in the background). You can use the app without location access by manually entering your city.

e) Push Notifications

We request notification permission to send you:

• Match reminders and updates
• New message alerts
• Payment confirmations
• Important account notifications

You can disable push notifications at any time through your device settings or within the app's notification preferences.

2.5 Managing Device Permissions

You can manage or revoke any of these permissions at any time:

• iOS: Settings → Baab Sport → toggle permissions on/off
• Android: Settings → Apps → Baab Sport → Permissions

Revoking certain permissions may limit some features of the app, but core functionality will remain available.

3. How We Use Your Information

3.1 To Provide and Improve Our Service

• Create and manage your account
• Process field bookings and match participation
• Facilitate communication between players and match organizers
• Calculate and process payments, refunds, and credits
• Display your profile to other users (according to your privacy settings)
• Match you with appropriate players based on skill level and preferences
• Send match reminders and important updates

3.2 To Communicate With You

• Send transactional emails and SMS (booking confirmations, payment receipts, match updates)
• Send push notifications about matches, messages, and important updates
• Respond to your inquiries and support requests
• Send promotional communications (with your consent, where required)

3.3 To Ensure Safety and Security

• Verify account contact details when required and protect authentication flows
• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and community guidelines
• Investigate and respond to user reports and complaints
• Maintain audit logs for security and compliance purposes

3.4 To Analyze and Improve

• Analyze usage patterns and trends
• Conduct research and development
• Test and improve new features
• Generate aggregated, anonymized analytics

4. How We Share Your Information

4.1 With Other Users

Depending on your activities and settings, we share:

• Public Profile Information: Name, profile photo, skill level, and position to other players in matches you join
• Match Participants: Your participation status with other players in the same match
• Chat Messages: Messages you send in match or group conversations with other participants
• Team Information: Your team membership with other team members and tournament organizers

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Firebase/Google: Authentication, cloud messaging, and analytics
• Google Analytics: Website usage measurement on baabsport.com (page views, traffic sources, and approximate location derived from IP; managed via cookies described in our Cookie Policy)
• Sentry: Crash reporting and application diagnostics (receives device information, error context, and account identifiers when errors occur)
• Cloudinary: Image storage and processing (profile photos and images you upload)
• Mapbox: Map display and location-based field search (receives approximate location/viewport data when you use the map)
• Cloud Hosting Providers: Data storage and server infrastructure
• Email/SMS Providers: Sending transactional and marketing communications

4.3 With Venue Partners

When you book a field, we share necessary information with the venue:

• Booking date, time, and duration
• Contact information for booking confirmation
• Number of participants

4.4 For Legal Reasons

We may disclose your information if required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from public authorities (including law enforcement)
• Protect the rights, property, or safety of Baab Sport, our users, or others
• Enforce our Terms of Service and other agreements

4.5 Business Transfers

If Baab Sport is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.6 What We Do NOT Sell

We do not sell your personal information to third parties for their marketing purposes.

5. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our Service
• Required to comply with legal obligations (e.g., tax records, dispute resolution)
• Necessary to enforce our agreements and protect our legal rights

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.

Financial Records: Payment records are retained for 7 years as required by tax regulations.

Chat Messages: Match-related chat messages are automatically deleted within 30 days after match completion.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted between your device and our servers is encrypted using TLS/SSL
• Secure Payment Processing: All payment information is processed by Stripe, a PCI-DSS compliant provider
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Regular Security Audits: Periodic reviews of our security practices and infrastructure
• Account Verification: Contact verification and authentication controls when required for an account or feature

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. You can access most of your information directly through your account settings.

7.2 Correction

You can update or correct your account information at any time through the app. If you need assistance, contact us at privacy@baabsport.com.

7.3 Deletion

You can request deletion of your account and personal data. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Marketing Opt-Out

You can opt out of promotional communications by clicking "unsubscribe" in any marketing email or adjusting your notification settings in the app. Note that you cannot opt out of transactional communications (e.g., booking confirmations, security alerts).

7.5 Push Notifications

You can disable push notifications through your device settings at any time.

7.6 Location Data

You can disable location services through your device settings. Note that some features (like finding nearby fields) may not function properly without location access.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out of Sale: We do not sell personal information, but you can contact us to confirm

To exercise your CCPA rights, contact us at privacy@baabsport.com or call +1 (412) 587-3533. We will verify your identity before processing your request.

9. Minors' Privacy and Age Eligibility

The Service is intended only for adults who are at least 18 years old. We do not offer accounts to minors or a parental-consent registration flow.

9.1 Age Gate

• Date of Birth Collection: We use date of birth during registration to determine whether a user meets the 18+ eligibility requirement
• Registration Restriction: A user who indicates they are under 18 cannot complete account registration
• Account Review: We may request additional information or restrict an account when we reasonably believe the user may be under 18

9.2 If We Discover an Underage User

If we discover or are notified that an account may belong to a person under 18, we may:

• Investigate and restrict or suspend the account while we review the report
• Close the account if the user does not meet the Service's age requirement
• Delete or anonymize personal information as appropriate, subject to legal, fraud-prevention, safety, financial-record, and dispute-resolution retention obligations

9.3 Report an Underage User

If you believe a user is under 18 years of age, contact privacy@baabsport.com. We will review the report and may request information needed to investigate it.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for basic functionality (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

10.3 Do Not Track

Our Service does not currently respond to "Do Not Track" signals. However, you can manage your privacy preferences as described in this policy.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or services (e.g., venue websites, payment portals). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you visit.

12. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending you an email or push notification for significant changes

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: