Privacy Policy

Draft, for owner review. Not legal advice.

This Privacy Policy explains how Plyora handles personal information, following the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Plyora is operated by [company name and address, to be filled in by the owner]. Data Protection Officer: [name, to be filled in by the owner], reachable at support@plyoraph.com.

1. What we collect

• Account details: name, email, phone number, password (stored only in scrambled form), account type, and your theme setting.
• If you sign in with Google: your name and email from Google.
• Sport ratings you enter (marked Self-reported).
• Bookings: reference, venue or coach, dates and times, amounts, payment method, reference number, and receipt image.
• Messages in booking chats and support chats.
• Verification documents, only for Venue Partners, Coaches, and Players who choose to verify: government ID, selfie, business documents.
• Which version of these policies you accepted, and when.
• Technical data needed to keep the service safe: sign-in sessions, security checks (Cloudflare Turnstile), and error reports.

2. Why we use it

- To run your account and bookings, and to show your bookings to the Venue Partner or Coach you booked. - To send service emails such as email confirmation, password reset, and booking updates. - To keep Plyora safe: preventing fraud, reused receipts, and account takeover. - To meet legal obligations and handle disputes. We do not sell your personal information.

3. Who sees it

• The Venue Partner or Coach you book sees your name, contact details, booking, and receipt.
• Other users see only your first name and initials, your public profile, and reviews you post. Contact details are never shown publicly.
• Plyora staff see what they need to support you, review verifications, and handle disputes. Every staff action is logged.
• Service providers that run Plyora for us: Supabase (database and sign-in), Cloudflare (hosting and security checks), Resend (email), Google (sign-in and maps), and Sentry (error reports). [Owner to confirm the list and where each stores data.]

4. How long we keep it

• Receipt images are deleted automatically 90 days after the booking date, unless a dispute is still open. We keep a fingerprint and reference number of each receipt to detect reused receipts.
• Booking, invoice, and chat records are kept for [period, owner and lawyer to decide] for records and disputes.
• A removed account cannot be used again; its records are kept as described above.

5. Your rights

Under the Data Privacy Act you can ask to be informed, to access your data, to correct it, to object, to have it deleted or blocked, to get a copy (data portability), and to file a complaint with the National Privacy Commission. Download and deletion requests will be available in the app; until then, email support@plyoraph.com.

6. Security

Data is stored with access controls, so each user sees only their own records. Receipts and documents are stored privately. Staff accounts need two-factor sign-in.

7. Changes and contact

We may update this policy. The version you accepted and the date are recorded. Questions or requests: support@plyoraph.com.