This policy explains what personal data the Playra app and the playra.org website collect, why, who can see it, how long it is kept, and the choices you have.
1. Who we are
Playra is run by Mohammad Takriti, an individual developer based in the United Kingdom ("Playra", "we", "us"). Playra is the controller of the personal data described here. Contact: info@playra.org.
Playra is an app for booking sports courts at independent venues in Syria and for arranging casual matches with other players ("Play Together").
2. The data we collect
Your account. Your email address (you sign in with a one-time code we email to it), your full name, your phone number and, if you choose one, a username. Your phone number is not used to sign in and is never sent a code; it is the number a venue uses to contact you about a booking. We also keep your preferred app language and a record of when you agreed to our Terms of Service and this policy.
PLAYZ and bookings. Your PLAYZ balance and its history: top-ups (which venue, when, how much), bookings and their cancellations and refunds, your shares of Play Together matches, and any corrections we make to your balance.
Play Together. The matches you create or join, results you record, messages you send in match chats (stored with the name you had when you sent them), and any reports or blocks you make.
Notifications. If you allow notifications, your device's push notification token, so we can send match reminders to your phone.
Security and diagnostics. When you sign in, your email address and your internet (IP) address are used for a short time to limit repeated attempts. If the app crashes, a crash report may be sent to us with technical details (device model, operating system, app version and what the app was doing), which can include the number of a booking or match.
Our website. If you fill in a form on playra.org (the players' list or the venue interest form), we collect what you type — such as your name, phone number, sport and area — and your browser's user-agent string.
What we do not collect. Your location, contacts, photos, microphone, date of birth, government ID, or bank or card details. There is no advertising in Playra, we do not track you across other apps or websites, and we do not sell your data. The camera is used only by venue staff, to scan a player's top-up code or booking pass; images are not stored.
On your phone only. The app keeps your sign-in session and a short-lived copy of recent screens (up to 7 days) on your device, so it opens quickly. Signing out deletes them.
3. Why we use it (and the legal basis)
- To provide the service you asked for (our contract with you): your account, bookings, PLAYZ top-ups and payments, Play Together, notifications you allowed, and support.
- To keep Playra safe and working (our legitimate interests): preventing fraud and abuse, limiting sign-in attempts, handling reports and enforcing our Terms, and fixing crashes.
- Because the law requires it (legal obligation): keeping financial records.
- Because you agreed (consent): push notifications, which you can switch off at any time in your phone's settings.
We do not use your data for advertising or marketing profiles, and we do not make decisions about you by automated means that have legal or similarly significant effects. Some things happen automatically, as the Terms explain — for example, an unfilled match is cancelled and refunded two hours before it starts.
4. Who can see it
Venues you book or top up at see your name and phone number for that booking, your name and the amount when you top up there, and whether you arrived. Each venue can also see a list of the players who book with it most often, by name.
Other players see your name (and username, if you set one) in the rosters of Play Together matches and on the messages you send in match chats. Chat is not anonymous. If ranked play is available, the leaderboard shows players' names and rankings.
Playra can see the account data described here, to run the service, give support and act on reports.
Service providers process data for us, only to provide their service:
- Supabase — database, sign-in and hosting (Frankfurt, Germany).
- Brevo — sends the sign-in code emails (France).
- Expo (EAS) — app updates and delivery of push notifications (United States), through Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging).
- Sentry — crash reports (stored in the European Union — Frankfurt, Germany; Sentry's own account records are in the United States).
- Netlify — hosts playra.org (United States).
- Google Workspace — our email, if you write to info@playra.org (United States).
We share data with public authorities only when the law requires us to. We do not share your data with anyone else.
5. Where it is stored, and how it is protected
Your data is stored in the European Union (Frankfurt, Germany). Some of the providers above are in the United States; where UK or EU data protection law applies to that transfer, we rely on the safeguards in their data processing terms, such as standard contractual clauses.
Every connection to Playra is encrypted (HTTPS/TLS), and data is stored on encrypted infrastructure. Access to the database is restricted so that each person can reach only what they are allowed to see, every change to a balance happens on our server and is logged, and sign-in codes are stored only in scrambled (hashed) form. No system is perfectly secure, but we protect your data carefully.
6. How long we keep it
- Your account data — for as long as your account exists.
- When you delete your account — your name, email address, phone number, username and push token are removed straight away, and the account can no longer be signed in to. Records of bookings, PLAYZ top-ups and payments are kept without your name, because we need them for accounting and to settle up with the venues you played at. Messages you sent in match chats stay visible to the players of those matches, under the name you had when you sent them.
- Crash reports — for a limited period (typically 90 days).
- Sign-in attempt limits — minutes to hours.
- Website form entries — until we have dealt with them, or earlier if you ask us.
7. Your rights
You can see and change your name, phone number and username in the app (Profile → Edit profile). You can delete your account in the app (Profile → Delete my account) or by following the steps at playra.org/delete-account. You can also ask us, at info@playra.org, for a copy of your data, to correct it, to delete it, or to restrict or object to how we use it. We will reply within one month.
You can switch notifications off at any time in your phone's settings.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
8. Age
Playra is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, contact us and we will delete it.
9. Changes to this policy
We will update this policy when the service changes, and change the date at the top. If the change is significant, the app will ask you to read and agree to it again.
10. Contact
Questions, requests or complaints: info@playra.org.