← Back to home

Privacy Policy

Last updated: [Insert Date] · For attorney review before publication

1. Buod (Filipino Summary)

Kinokolekta namin ang inyong impormasyon tulad ng pangalan, numero ng telepono, at lokasyon upang makapag-book ng court at makahanap ng ka-laro. Hindi namin ibinibenta ang inyong personal na impormasyon sa kahit sino. Maaari kayong humingi ng kopya ng inyong datos, baguhin ito, o tanggalin ang inyong account anumang oras. Para sa mga tanong, makipag-ugnayan sa aming Data Protection Officer sa privacy@bookort.app.

2. Who We Are

Bookort ("we," "our," or "us") is operated by [LEGAL ENTITY NAME], a corporation registered under the laws of the Republic of the Philippines with SEC Registration No. [INSERT] and principal business address at [INSERT ADDRESS].

Data Protection Officer (DPO)

If you have any questions, concerns, or requests about your personal data, please contact our DPO directly at privacy@bookort.app. We will respond within 15 business days.

3. What We Collect

3.1 Account Information

  • Full name
  • Mobile phone number (used as primary identifier and for OTP verification)
  • Email address
  • Date of birth (for age verification)
  • Profile photo (optional)
  • Password (stored as a one-way cryptographic hash — we never store your actual password)

3.2 Sports Profile Information

  • Sport(s) played (pickleball, badminton, tennis)
  • Skill level and game history (used to calculate your Bookort rating)
  • DUPR rating (if you choose to link your DUPR account)
  • Match results and booking history

3.3 Location Data

  • Your approximate location (city/barangay level) to show nearby courts — collected with your permission
  • Precise GPS location (only when you actively search for courts near you or navigate to a venue) — collected only with your explicit runtime permission

We do not track your location continuously or when the app is in the background.

3.4 Payment Information

  • GCash number (used for payment and, if you are a venue partner, for receiving payouts)
  • Credit or debit card details — these are transmitted directly to Xendit and are never stored on Bookort's servers
  • Transaction history (amounts paid, booking dates, refund status)

3.5 Device and Technical Information

  • Device type and operating system version
  • App version
  • Device identifier (used for fraud prevention)
  • IP address (used for security logging and regional compliance)
  • App usage patterns (which screens you visit, which features you use)

3.6 Behavioral and Preference Data

  • Preferred sport, preferred time of day, preferred venues
  • Play frequency and patterns
  • Matchmaking preferences (competitive vs. social, skill level preferences)

This data is used to provide better court recommendations and player match suggestions. It is not sold to advertisers and is not used for targeted advertising.

3.7 Communications

  • In-app messages between you and venue partners or matched players (if you use in-app chat)
  • Your responses to post-session feedback requests

4. Why We Collect It

Purpose Data Used Legal Basis
Create and manage your account Name, mobile, email, DOB Contractual necessity (Sec. 12(b), RA 10173)
Process court bookings Booking details, payment info, location Contractual necessity
Process payments via Xendit Payment info, transaction history Contractual necessity
Match you with other players Sports profile, skill rating, location, preferences Contractual necessity + Consent
Send booking confirmations and reminders Mobile number, email Contractual necessity
Improve our matching algorithm Behavioral and preference data Legitimate interests (Sec. 12(f)) + Consent
Prevent fraud and unauthorized use Device identifier, IP address, usage patterns Legitimate interests
Comply with BIR tax withholding obligations Venue partner payout information Legal obligation (Sec. 12(c))
Send promotional messages (optional) Mobile number, email Consent — you can opt out at any time

5. Who We Share Your Data With

We do not sell your personal data. We share data only in the following circumstances:

Venue Partners

When you complete a booking, we share your name, mobile number, and booking details with that venue partner. This is necessary for them to verify your arrival and manage their court schedule. Venue partners are contractually prohibited from using your contact details for any purpose other than managing your booking.

Xendit Payments Philippines, Inc.

Payments are processed by Xendit. Your payment information is transmitted to Xendit for processing in accordance with their Privacy Policy. By making a payment, you acknowledge that your payment data will be processed by Xendit as our authorized payment processor.

Matched Players

If you use matchmaking, your display name, Bookort rating, sport preferences, and profile photo are visible to players you are matched with. Your mobile number is only shared if you have explicitly agreed through the in-app chat.

Service Providers

Provider Purpose Data Shared
Supabase Database hosting and authentication All account and booking data
PostHog Product analytics Anonymized usage patterns
[Cloud Hosting Provider] App infrastructure All data processed through the app

All service providers are bound by data processing agreements requiring them to protect your data in accordance with RA 10173.

Legal Requirements

We may disclose your data if required by law, court order, or lawful government request, or if necessary to protect Bookort's legal rights or the safety of our users.

Business Transfers

If Bookort is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. How Long We Keep Your Data

Data Category Retention Period
Account information While your account is active + 1 year after deletion
Booking history 3 years (required for BIR tax records)
Payment transaction records 5 years (BIR statutory requirement)
Match history and ratings While your account is active + 1 year
Location data Not stored beyond the booking session
Device identifiers While your account is active
In-app chat messages 90 days after the related booking date
Behavioral and preference data While your account is active + 6 months

After the retention period, data is permanently deleted or irreversibly anonymized.

7. Your Rights Under RA 10173

To exercise any of these rights, email privacy@bookort.app. We will respond within 15 business days.

  1. Right to Be Informed — know that your data is being collected and processed
  2. Right to Access — request a copy of the personal data we hold about you
  3. Right to Rectification — correct inaccurate or incomplete data in your profile through Settings, or by contacting our DPO
  4. Right to Erasure or Blocking — request deletion or blocking of your data where it is no longer necessary, where you withdraw consent, or where processing is unlawful. Note: we may retain certain data to comply with legal obligations (e.g., BIR tax records).
  5. Right to Object — object to processing for direct marketing at any time. You may also object to processing based on legitimate interests.
  6. Right to Data Portability — request your personal data in a commonly used, machine-readable electronic format.
  7. Right to Damages — seek compensation for unauthorized use of your personal data through the NPC or courts.
  8. Right to File a Complaint — lodge a complaint with the National Privacy Commission (NPC): privacy.gov.ph | info@privacy.gov.ph | 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila

9. Account Deletion

To delete your Bookort account:

  1. Go to Settings → Account → Delete Account in the app
  2. Confirm deletion

On deletion, your profile, match history, and preferences are permanently deleted within 30 days. Booking history and payment records are retained for the statutory periods required by BIR (see Section 6 above). You will receive a confirmation email when deletion is complete.

10. Data Security

  • All data is encrypted in transit using TLS 1.2 or higher
  • Passwords are stored using bcrypt hashing — we cannot read your password
  • Payment card data is transmitted directly to Xendit and is never stored on our servers
  • Access to personal data is restricted to authorized personnel with a documented need
  • We conduct periodic security assessments of our systems
  • In the event of a data breach that poses a real risk of harm to data subjects, we will notify the NPC within 72 hours and affected users within a reasonable period

11. Cookies and Device Identifiers

Bookort's mobile app does not use browser cookies. We use:

  • Device identifiers (Android ID, iOS Identifier for Vendor) for fraud prevention and to maintain your login session. These are linked to your account.
  • Analytics identifiers (PostHog anonymous ID) to understand how the app is used in aggregate. These are not linked to your personal identity by default.

For Bookort's web presence (bookort.app), we use browser cookies. Please refer to our Cookie Policy for details.

12. Children's Privacy

Bookort is intended for users who are 18 years of age or older. We do not knowingly collect personal data from users under 18. If you believe a minor has created an account, please contact us at privacy@bookort.app and we will promptly delete the account.

13. International Data Transfers

Bookort's data is hosted in [data center region, e.g., Singapore]. Some service providers (including Xendit and Supabase) may process data in countries outside the Philippines. Where this occurs, we ensure:

  • A data processing agreement is in place with the service provider
  • The service provider implements security measures equivalent to RA 10173 requirements
  • The transfer is necessary to deliver the service you have contracted for

14. Changes to This Policy

We will notify you of material changes via in-app notification and email at least 14 days before the change takes effect. Continued use of Bookort after the effective date constitutes acceptance of the updated policy.

15. Contact

National Privacy Commission