Privacy Policy

1. Who is responsible for your information

AIR/Rally operates the platform and decides how your personal information is handled. It is the personal information controller for the purposes of the Data Privacy Act of 2012 (RA 10173).

2. What we collect

Account information: your first name, last name, email address, and — if you provide them — a display name, profile photograph and phone number. We also generate a referral code for your account.

Booking information: the courts and times you book, the price, the status of the booking, your confirmation code, and any cancellation or rescheduling.

Payment information: the reference identifiers PayMongo returns for a payment, the amount, and whether it succeeded. We do not receive or store your card number, bank credentials or e-wallet credentials.

Content you create: reviews, COURT/Side posts and comments, clubs and events you create or join, photographs you upload, who you follow, and posts you like or reshare.

Support and safety information: support messages you send, and reports you file about other users or content.

Technical information: standard server and security logs generated when your browser contacts the service.

3. Why we use it

To create and secure your account, to take and confirm bookings, to process payment through PayMongo, to show your bookings and history back to you, and to notify you about activity that concerns you.

To let venues fulfil the bookings you make with them.

To operate community features, to moderate reported content, and to enforce the limits and rules in the User Agreement.

To keep records required for accounting, dispute handling and legal compliance.

4. Who can see your information

Other players see your display name and profile photograph next to your posts, comments, reviews, club memberships and event attendance. They do not see your email address or phone number.

A venue owner sees the display name of anyone who books their courts, together with the booking's time, court, status and value. This is how they know who is arriving.

AIR/Rally administrators can see accounts, bookings, payments, reports and support messages in order to run the platform, resolve disputes and moderate content.

Photographs you upload — profile, post, club and venue images — are stored in publicly readable storage. Anyone with the direct link can open them, including people without an AIR/Rally account and search engines that discover the link.

Reports you file are not shown to the person you reported, and are not attributed to you anywhere they can see.

5. Service providers and where your information is held

Supabase provides the database, authentication and file storage that hold your information. The database is located in South Korea.

Vercel provides the hosting that serves the site. Server functions run in South Korea.

PayMongo processes payments. When you pay, you interact with PayMongo directly and provide payment credentials to them, not to AIR/Rally.

Because these providers operate outside the Philippines, your personal information is transferred to and stored in another country.

6. How long we keep it

Account information is kept while your account exists.

Booking and payment records are kept after a booking finishes, because they are financial and dispute records.

Moderation records are kept even after the content they concern has been deleted. A report deliberately outlives the post it describes, so that a record of what was reported and what was decided is not erased along with the content.

7. Your rights

Under the Data Privacy Act of 2012 you have rights to be informed about how your information is used, to access it, to correct it, to object to its processing, to have it erased or blocked in certain circumstances, to obtain a copy in a portable form, and to be indemnified for damage caused by misuse.

You can change your name, display name, photograph and phone number yourself in your account settings.

For any other request, contact us through the support page. Self-service data export and account deletion are not yet available; requests are handled manually.

If you believe your rights have been infringed, you may complain to the National Privacy Commission.

8. Location

If you allow it, your browser shares your approximate location so that venues can be sorted by distance from you. This is used for that search only and is not stored on our servers. You can refuse, and the rest of the platform still works.

9. Keeping information secure

Access to data is enforced in the database itself rather than only in the application, so that a request can only return the records the requesting account is entitled to see.

Passwords are handled by Supabase authentication and are never visible to AIR/Rally.

No system is perfectly secure. If a breach affects your personal information, we will act in accordance with the notification requirements of the Data Privacy Act.

10. Children

AIR/Rally is not intended for children. Accounts should be created by adults; a minor should use the platform only through a parent or guardian's account and with their supervision.

11. Changes to this policy

This policy may change as the platform develops. Material changes will be notified in the platform.

12. Contact

Privacy questions and requests can be raised through the support page in your AIR/Rally account. Replies are delivered as in-app notifications.