PlayCrew Privacy Policy

1. Introduction

PlayCrew (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use our App:

2.2 Automatically Collected Information

• Device information (device type, operating system)
• App usage analytics
• Push notification tokens
• IP address and location data
• Crash reports and performance data

2.3 Third-Party Data

• Google account information (name, email, profile photo)
• Calendar data (with explicit permission)
• Location data (for game venues)

3. How We Use Your Information

3.1 Primary Uses

• Account Management: Create and manage your user account
• Team Functionality: Enable team creation, management, and communication
• Game Management: Facilitate game scheduling, participation, and organization
• Payment Processing: Handle team payments and transactions through Stripe
• Communication: Send notifications about games, team updates, and announcements
• Calendar Integration: Add games to your calendar (with permission)

3.2 Legal Bases for Processing (Australian Privacy Act)

• Consent: For optional features like calendar integration and notifications
• Contract Performance: To provide the core App functionality
• Legitimate Interest: For app improvement and security
• Legal Obligation: To comply with Australian laws and regulations

4. Information Sharing and Disclosure

4.1 Team Members

Your basic profile information (name, profile photo) is visible to other members of teams you join.

4.2 Third-Party Services

We share information with the following third-party services:

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

5. Data Security

5.1 Security Measures

• Encryption: All data is encrypted in transit (TLS) and at rest
• Access Controls: Strict database security rules limit data access
• Authentication: Multi-factor authentication for sensitive operations
• Regular Audits: Security assessments and vulnerability testing

5.2 Data Storage

• Location: Data stored in Firebase (Google Cloud) servers
• Retention: Data retained as long as your account is active
• Backup: Regular encrypted backups for data recovery

6. Your Privacy Rights

6.1 Access and Portability

You can request a copy of your personal data in a portable format.

6.2 Correction and Updates

You can update your profile information directly in the App.

6.3 Deletion Rights

You can request deletion of your account and associated data by contacting us.

6.4 Opt-Out Options

• Notifications: Manage notification preferences in App settings
• Calendar Integration: Revoke calendar permissions in device settings
• Analytics: Opt-out through device settings

7. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Australia. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the Australian Information Commissioner
• Appropriate technical and organizational measures
• Compliance with Australian Privacy Principles (APPs)

9. Third-Party Links and Services

Our App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

10. Data Retention

10.1 Account Data

• Retained while your account is active
• Deleted within 30 days of account deletion request

10.2 Transaction Data

• Retained for 7 years for tax and legal compliance
• Stripe handles payment data according to their policies

10.3 Analytics Data

• Aggregated data may be retained for business analysis
• Personal identifiers removed from analytics data

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Sending you an email notification
• Updating the “Last Updated” date

12. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

13. Australian Privacy Rights

13.1 Your Rights Under Australian Privacy Act

As an Australian resident, you have the following rights under the Privacy Act 1988:

• Right to know what personal information we collect and why
• Right to access your personal information
• Right to correct inaccurate personal information
• Right to request deletion of your personal information
• Right to opt-out of direct marketing
• Right to make a complaint to the Australian Information Commissioner

13.2 Australian Privacy Principles (APPs)

We comply with the Australian Privacy Principles, which include:

• Open and transparent management of personal information
• Anonymity and pseudonymity
• Collection of solicited personal information
• Dealing with unsolicited personal information
• Notification of the collection of personal information
• Use or disclosure of personal information
• Direct marketing
• Cross-border disclosure of personal information
• Adoption, use or disclosure of government related identifiers
• Quality of personal information
• Security of personal information
• Access to personal information
• Correction of personal information

14. Privacy Complaints

If you have concerns about how we handle your personal information, you can:

• Contact us directly using the contact information below
• Make a complaint to the Australian Information Commissioner (OAIC)
• Seek assistance from the OAIC if you're not satisfied with our response