Privacy Policy

1. Information we collect

Account

• Email address, display name, username and password. Passwords are stored only as a salted hash; we never see or store your password itself.
• When you reset a forgotten password we create a one-time 6-digit code (stored only as a hash, valid for 15 minutes) and email it to you.

Profile and preferences

• The sports you pick, your city and state, and — only if you tap Use current location and allow it — the precise coordinates your phone reports, used to find your city and show distances to venues.
• The phone number you enter when registering for an event or tournament, saved to your profile so the next form is pre-filled.

Event, tournament and venue bookings

• Registration details: name, email, phone, playing position, experience level, optional emergency contact, team name, ticket quantity and ticket code; fees, currency and payment policy (all fees are paid at the venue — Athzy does not collect card, bank or UPI details).
• Team rosters, including the names (and any email or phone) of teammates a captain adds. If you add someone else, you confirm you have their permission to share their details for the tournament.
• Venue reservations: venue, sport, date, time, duration and price.
• Venues you save (bookmarks).

Social features and content you create

• Connections and connection requests, people you follow and who follow you, people you block.
• Community posts, comments, likes and poll votes.
• Chat messages in event lounges and direct conversations (including replies), and when you last read each conversation. "Typing…" indicators are passed on live and not stored.
• Team invites and requests to join a team.

Safety and support

• Reports you make about posts, messages or members, reports made about you, and what you send to support.

Device and technical information

• An app installation identifier, platform, device type, brand, model, operating-system version and app version, used to keep your sign-in working on this device and to diagnose problems.
• Server logs: IP address, time and type of request, and errors, kept for security and troubleshooting.

What we do not collect: contacts, photos from your library (there is no photo upload yet), health data, financial details, browsing history, or advertising identifiers. Athzy has no advertising, analytics or tracking SDKs and does not track you across other companies' apps or websites.

Calendar: "Add to calendar" writes a booking to your phone's calendar with your permission. Nothing from your calendar is read or sent to Athzy.

2. How we use information

To create and secure your account; show events, venues and players relevant to your city and sports; register you, issue tickets and manage capacity; run chat, the community feed, teams and notifications inside the app; keep members safe (reports, blocking, removing content and accounts that break our Terms); answer support requests; prevent abuse and fraud; and comply with the law.

We process your information to provide the service you ask for, with your consent for device permissions (location, calendar), and where required by law.

3. Who can see what

• Other members can see your display name, username, city, sports, follower/following counts, your community posts and comments, and messages you send to them or to an event lounge you are in.
• Event organisers can see the registration details you submit for their event or tournament.
• Teammates and captains can see the names on their team's roster (not each other's email or phone).
• Other members cannot see your email, phone number, emergency contact or precise location.
• If you block someone, you stop seeing each other's posts and messages and your connection and follows are removed.

4. Service providers

We use these providers to run Athzy. They process data only on our instructions:

• Amazon Web Services (AWS) — hosts Athzy's servers in Mumbai, India.
• MongoDB Atlas — stores Athzy's database.
• Google Workspace — sends account emails (such as password-reset codes) from no-reply@athzy.in.
• Google Maps Platform — venue ratings and review counts are fetched from Google Places by venue (no information about you is sent). If you tap Open in Maps / directions, the venue address is sent to Google Maps.
• Image hosting — some venue, event and sport images load from third-party image services (Unsplash), which receive normal network information such as your IP address.

We do not sell or rent personal information. We may disclose information if required by law or to protect the safety of members or the public.

5. Keeping and deleting your information

We keep your information while your account is active. You can delete your account at any time in the app (Profile → scroll to the bottom → Delete account) or by emailing privacy@athzy.in from your registered address. See Delete your account for exactly what is removed.

When you delete your account, we immediately: remove your sign-in details, email, username, phone and location; delete your posts, comments, likes, poll votes, follows, connections, blocks, saved venues, notifications and registered devices; remove the content of your chat messages; cancel your upcoming bookings and registrations; and remove the personal details (name, email, phone, emergency contact) from your past registrations. Records of past bookings and registrations are kept without those details so organisers' attendance records stay correct. Safety reports may be kept as long as needed to protect members and meet legal obligations. Backups are overwritten within 30 days.

6. Security

Data is encrypted in transit (HTTPS/TLS). Passwords are hashed, sessions use signed tokens that are revoked when you change or reset your password, and access to production systems is restricted. No system is completely secure; if a breach affects your data we will notify you and the authorities as required by law.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, nominate someone to exercise your rights, and raise a grievance. Most of this you can do in the app (edit profile, location, sports; delete account). For anything else email privacy@athzy.in — we respond within 30 days.

Grievance Officer: Arjun Gupta, Founder, privacy@athzy.in, Lal Bangla, Kanpur, Uttar Pradesh 208007, India. Complaints are acknowledged within 24 hours and resolved within 15 days.

8. Children

Athzy is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has an account, email privacy@athzy.in and we will delete it.

9. International processing

Your information may be stored and processed on servers outside India, protected as described in this policy.

10. Changes

We will update this page when our practices change and show the new effective date. For significant changes we will also tell you in the app.

11. Contact

privacy@athzy.in · Athzy, Lal Bangla, Kanpur, Uttar Pradesh 208007, India