Sokuji Labs ("we") is the personal information controller for this app. This policy explains what we collect and why, in line with the Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
Account: your email address and sign-in sessions (including the IP address and device used, for security and rate limits). If you sign in with Google, we receive your Google account email, name, and profile photo.
Profile: display name, photo, home area, preferred days and times, play style, and your skill rating (self-reported, or from DUPR if you connect it).
Activity: open plays you apply to or host, attendance and check-ins, rounds, scores and disputes, court requests, bookings and their notes, clubs you join, favourites, saved searches, notifications, and settings.
Location: if you tap Near me, your browser shares an approximate location (rounded to about 100 m) to sort results. We don’t store it.
Why we use it
To run the service you ask for: sign-in, matching you with plays, courts, and clubs, check-in, scores, and notifications. To keep the app safe: preventing abuse, investigating reports, and recording admin actions. We rely on your consent and on our agreement with you (the Terms of Service).
We don’t sell your data or use it for advertising.
Who sees what
Other players see your display name, photo, rating, and play history where it’s relevant (for example, in an open play you joined).
A host sees your application, note, and rating for their open play. A venue sees your name, photo, and booking history at that venue when you request a court. Club officers see your join request, note, and rating.
Admins can see account details, including email, to verify hosts, handle reports, and resolve disputes. Your email is not shown to other players.
Service providers
We host the app and store data and photos with Cloudflare. We send sign-in and notification emails through an email provider. Maps and DUPR are used only when those features are enabled or you connect them. These providers process data for us under their own security and privacy commitments.
How long we keep it
We keep your data while your account is open. When you delete your account, we remove your email, sign-in sessions, Google account link, DUPR connection and rating, photo, availability, saved searches, favourites, notification settings, and notifications; you leave your clubs and your name becomes “Deleted player”. Confirmed match results stay in anonymised form so other players’ records remain correct. Admin audit records are kept for as long as needed for safety and legal purposes. Sign-in attempt logs used for rate limiting are deleted within 24 hours.
Your rights
You can access, correct, or delete your data, object to processing, and ask for a copy. Most of this is in Settings; for anything else, email us. You can also complain to the National Privacy Commission (privacy.gov.ph).
To delete your account, open Settings → Delete account, or read the step-by-step guide at /account/delete — it also explains what to do if you can no longer sign in.
Security
Sign-in uses one-time email codes or your Google account; we don’t store passwords. Access to personal data is limited to the roles that need it, and admin actions are logged.
Contact
Data protection officer: deminit02@gmail.com. Address: [business address — to be confirmed].
We may update this policy and will tell you about important changes.