PRIVACY POLICY

MatchSport® helps adults discover people nearby who share sports interests, match, chat, and organize pickup games through PlayNow! and Game Room (private group rooms with group chat).

This Policy covers the MatchSport® mobile app, informational web pages at matchsport.app (including /join, /privacy, /terms, /delete-account), and all registered users and website visitors.

The website does not allow joining Game Rooms or creating accounts - registration happens only in the app.

Where consent is required (including biometric verification, Section 3.4), you may withdraw it in Settings or by contacting us. Withdrawal does not affect prior lawful processing. Withdrawing biometric consent stops new verification captures; an existing Verified badge may remain until you delete your account or contact support@matchsport.app.

3.1 Account and profile

• Phone number (primary authentication)
• Optional email address
• First name / display name
• Date of birth (18+ verification)
• Gender
• Profile photos
• Favourite sports
• Optional room name and sports preferences for Play Now
• Approximate location (city / area label)

3.2 Authentication and security

• Account credentials managed by our authentication provider
• Google Sign-In and Apple Sign-In identifiers (if you choose them)
• SMS one-time codes for phone verification
• Device type, OS version, app version
• Push notification token
• Security logs (e.g. IP address, timestamps, failed logins)
• App integrity / anti-abuse signals (when enabled)

3.3 Location

When you grant location permission, we use it to show nearby users, games, and public sports events. We never collect or store your exact coordinates. We process and store only approximate location (city/area). Other users do not see coordinates; they may see a city or area, and in discovery an approximate distance in km. You may disable location in device settings; some features will not work without it.

3.4 Identity verification (short-lived biometrics / face liveness)

We offer identity verification with short-lived biometric processing (face liveness) because MatchSport® is built for in-person sports: meeting other people to train or play. The purpose is to help reduce fake or impersonated profiles, improve safety and trust before face-to-face meetups, and show others a clear Verified / Not verified signal. It is a brief check that a real person is present for the capture, not advertising profiling, and not building a biometric matching database.

You can use the app without completing identity verification, including Home, browsing profiles within a limited daily allowance, liking, and chat. Unverified accounts show a Not verified badge. Higher in-person trust features (e.g. Play Now) may require verification. Verifying increases how many profiles you can see.

Before verification starts: separate explicit consent (Art. 9(2)(a) GDPR, not mixed with Terms/Policy). If you don't consent, you keep using the app with the Not verified badge and the limited profile allowance.

During verification, a specialised provider (Amazon Web Services) performs short-lived biometric processing (face liveness) under our instructions. MatchSport® does not retain provider biometric templates, images, or scores, only the Verified / Not verified outcome.

3.5 Matching, chat, and social interaction

Discovery activity, match history, one-to-one chat, Game Room group chat, game invites, Play Now invites, blocks and reports.

3.6 PlayNow! and Game Room

Sport, skill level, scheduled time, venue information for the game, room membership, private invite links, post-game check-in, ratings, and reputation scores shown in the app.

3.7 Stories

Optional short-lived photo/video stories visible to mutual matches. Media is checked with automated moderation tools. Approved stories expire after a short period as shown in the app.

3.8 Payments and Premium

Premium subscription status and payment metadata from our payment processors - Stripe (Android and web checkout) and Apple (In-App Purchase on iOS). We do not store full card numbers. Price as shown in the app or at checkout.

3.9 Safety, moderation, and technical data

User reports, moderation notes, message text submitted to automated moderation tools when enabled (not used for advertising), aggregated usage metrics and crash data where enabled.

3.11 What other users can see vs what stays private

Other users may see (on profiles, discovery, or when you match / share a room): display name, public profile/gallery photos, favourite sports, city or area, approximate distance in km (discovery), verified badge, and product social signals you choose to share (e.g. stories visible to mutual matches, Game Room membership when you join).

Other users do not see (private to you and/or our servers under access controls): phone number, email, push tokens, internal location data used only for proximity, private registration selfie used for verification, payment card details (Stripe or Apple), blocks/reports internals, security logs, one-to-one or room chats (except participants), and moderation notes (restricted admin access).

Core service (account, matching, chat, Game Rooms, Play Now, push notifications); Premium billing via our payment provider; safety and integrity (reports, fraud prevention, identity verification where you choose it); aggregated service improvement; legal compliance.

When you delete your account, personal data is erased within 30 days, except where law requires longer retention.

Olvexis Group SL (operating the MatchSport® brand) is the data controller. The providers below act as processors under data processing agreements (GDPR Art. 28 where applicable), unless we state otherwise:

We do not sell, rent, or trade your personal information.

Some providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards for international transfers (for example standard contractual clauses and provider commitments). Primary application data is hosted in the European Union where configured; verification may occur in the EU (Ireland).

You have the right to access, rectification, erasure, restriction, data portability, objection, withdraw consent (including biometric consent), and not be subject solely to automated decisions with legal or similarly significant effects.

Contact: support@matchsport.app, subject [Data Subject Request] or Account Deletion Request. Response time: 30 days (extendable to 60 for complex requests).

Supervisory authority (Spain): Agencia Española de Protección de Datos (AEPD) - www.aepd.es

Delete your account in-app: Settings → Delete account, or see /delete-account.

Encryption in transit; access controls; server-side controls for sensitive actions; Stripe or Apple handle payment credentials. MatchSport® never stores full card numbers; rate limiting; breach notification as required by law.

MatchSport® is 18+ only. Accounts suspected of belonging to minors are suspended and deleted if confirmed.

Private invite links let people you choose open a join flow in the app. Only registered users can join after validation. The website page explains how to download and register; it does not grant room access by itself. Share links only with people you trust.

The mobile app does not use browser cookies. The website uses only essential cookies required for operation (if any). We do not use third-party advertising cookies on matchsport.app.

Matching and Play Now suggestions use some preferences you set (for example age range, distance, and shared sports). This is not credit scoring or employment screening. These suggestions do not produce legal effects or similarly significant effects under GDPR Art. 22. For significant account decisions (for example a suspension after safety reports), you may contact us to request a human review.

Spanish users retain rights under LOPDGDD. Identity verification is described in Section 3.4.

Material changes will be notified in-app and/or by email with 30 days' notice where required.

MatchSport® | Data Protection
Olvexis Group SL · MatchSport®
Email: support@matchsport.app

MatchSport® does not sell personal information or share it for cross-context behavioural advertising. California and other US state privacy rights: email support@matchsport.app with subject US Privacy Request. Response within 45 days where applicable.

Biometric / identity verification: see Section 3.4. Approximate location only, we never store precise location. You may disable location in device settings (some features will not work).

MatchSport® is not directed to children under 13. Service restricted to users 18+.

By using MatchSport®, you acknowledge this Privacy Policy and confirm you are at least 18 years old. Identity-verification consent, where required, is collected separately in the app (Section 3.4).

End of Privacy Policy, Version 2.2