Privacy Policy

We collect the following categories of information:

• Account details — your name, email address, and password (stored hashed). Optionally a profile photo.
• Group and session activity — the groups you belong to, sessions you create or RSVP to, your RSVP and payment status, and any session notes you add.
• Payment tracking data — whether you have marked a session as paid and the method (cash or bank transfer). We do not currently process card payments. When we introduce card payments via Stripe, card details will be handled directly by Stripe and never stored on our servers.
• Device and notification data — push notification tokens for the devices on which you sign in, so we can send you session reminders and RSVP updates.
• Technical data — IP address, user agent, request timestamps, and similar server log information, collected automatically when you use the Service.

We use your information to:

• provide, operate, and improve the Service;
• let you organise and join sessions, see who else is attending, and track payments;
• send transactional notifications (RSVP confirmations, session reminders, payment receipts);
• respond to support requests, investigate abuse reports, and enforce our terms;
• detect, prevent, and respond to security incidents, fraud, and other unlawful activity.

We do not sell your personal information. We do not use it for advertising or build profiles for ad targeting.

Because Sportagon is built around shared activity, some information is visible inside the groups you join:

• Your name and profile photo are visible to other members of each group you belong to.
• Your RSVPs and payment status (paid / unpaid) are visible to other members of the same session, and to the session organiser.
• Group owners and admins can see the full member list and manage roles.

Information you put into your profile is not visible to people outside your groups.

We share information with third parties only in the limited circumstances below, and only the data necessary for the purpose:

• Service providers — cloud hosting (the provider running our servers and database), email delivery, push notification delivery (Apple Push Notification service and Firebase Cloud Messaging via Expo Push), and error monitoring. These providers process data on our behalf under contract.
• Stripe (future) — once card payments are enabled, payment details are handled by Stripe under its own privacy policy.
• Legal and safety — we may disclose information if required by law, court order, or to protect the rights, property, or safety of Sportagon, our users, or others.

We keep your account information for as long as your account is active. If you delete your account, we remove or anonymise your personal information within 30 days, except where we are required to retain certain records (for example, payment-related audit logs to comply with tax or anti-fraud obligations).

Server logs are retained for up to 90 days for security and debugging.

You have the right to:

• Access and correct the personal information we hold about you. Most of it is viewable and editable in your profile screen.
• Delete your account, which removes your personal information subject to the retention rules above. You can do this in the mobile app under Profile → Account → Delete account, or by emailing us.
• Withdraw consent to receive push notifications, by disabling them in your device settings.
• Make a complaint about how we have handled your personal information. We will respond within a reasonable period. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

We use HTTPS for all traffic between the app and our servers, hash passwords at rest, and restrict access to production data to a small number of authorised personnel. No system is perfectly secure; if we ever become aware of a breach affecting your data, we will notify you in accordance with applicable law.

Sportagon is not directed at children under 13. If you believe a child has created an account, please contact us and we will delete it.

Sportagon is operated from Australia. If you use the Service from outside Australia, your information will be processed in Australia and in the jurisdictions where our service providers operate.

We may update this policy from time to time. The “Last updated” date above tells you when. Material changes will be announced in the app or by email before they take effect.

For any privacy question, request, or complaint, email privacy@sportagon.com.au. You can also reach our support team via the support page.