On this page
This policy explains what book&play collects, why, and what you can do about it. book&play is a mobile app for people who play sport: you book courts and pitches, find players through open matches, arrange sessions with coaches, and enter local tournaments — across whichever sports the venues near you offer, from tennis and padel to football, basketball, volleyball and badminton.
The app does not process payments. Court and pitch fees, coaching fees and tournament entry fees are paid directly to the venue, owner, coach or organiser, so we never see or store your card details.
1Who we are
The controller of your personal data is Enigma Apps, A. Aliyev street, house 26, apt 1004, Baku, Azerbaijan (“book&play”, “we”, “us”), operator of the book&play app and of bookplayapp.com. For any question about this policy or your data, write to support@bookplayapp.com.
2What we collect
| Account details | Name, email address, phone number, password (stored only as a salted hash), profile photo, bio, the sports you play, your skill self-assessment and preferred play times. |
|---|---|
| Location | Approximate or precise location, only while you use the app and only if you grant the permission, to show nearby venues, coaches, open matches and tournaments. You can search by city or district instead and refuse the permission. |
| Activity | Reservations, open matches created and joined, coaching requests, tournament entries, submitted and confirmed scores, level history, fair-play ratings received, and reports you file or that are filed about you. |
| Messages | Direct messages and match-group messages, kept so the conversation stays available to its participants and so we can investigate reports of abuse. |
| Coach documents | If you apply for a coach account: certifications, experience details and service area, reviewed for verification. |
| Device & technical | Device model, operating system version, app version, language, a notification token, and crash and diagnostic logs. |
| Photos & camera | Accessed only when you choose a profile photo or upload a document. We do not browse your library. |
We do not knowingly collect health data, contact lists, browsing history, or any special category data. We do not run advertising trackers and we do not build advertising profiles.
3Why we use it, and our legal basis
- To run the service — reservations, matching, coaching requests, tournament entries and chat. Basis: performance of our contract with you.
- To work out your level — a separate skill level for each sport, fair-play scores and regional rank tables, updated from results your opponents confirm. Basis: performance of our contract.
- To send notifications — booking changes, match requests, chat messages and tournament reminders. Basis: performance of our contract. Marketing messages, if we ever send them, are separately opt-in.
- To keep the community safe — verifying coaches, reviewing reports, detecting false score reporting and repeat no-shows, and enforcing the terms. Basis: our legitimate interest in a trustworthy platform.
- To fix and improve the app — crash reports and aggregate usage counts. Basis: legitimate interests.
- To meet legal obligations — responding to lawful requests and keeping records we are required to keep. Basis: legal obligation.
4What other people see
- Other players see your display name, photo, sports, level per sport, fair-play score and recent match history. This is what makes fair matching possible; it appears in the open-match feed, rank tables and group chats.
- Venues and court owners receive what they need to hold the booking: your name, a contact detail, and the court or pitch and time reserved. Venues are managed through a separate web admin panel, not through this app.
- Coaches you contact receive your name, sport, level and the message you send.
- Tournament organisers receive your name, sport and level for the draw and the results.
Your email address, phone number and exact location are never shown to other players inside the app.
5Service providers
We share data with a small number of providers who process it only on our instructions and only to keep the app running: cloud hosting and database Amazon Web Services (AWS), push notifications Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM), email delivery Google LLC (Gmail).
We do not sell your personal data, and we do not share it with data brokers or advertising networks.
6International transfers
Our servers are located in Stockholm. Where data leaves your country, we rely on appropriate safeguards such as the European Commission's standard contractual clauses, and we can send you a copy of the relevant terms on request.
7How long we keep it
- Account data: while your account is open, then deleted as described on the delete your account page.
- Messages: up to 24 months after they are sent, or until you delete your account.
- Confirmed match results and levels: retained as part of other players' histories, anonymised once you leave.
- Safety and misconduct records: up to 5 years, to prevent repeat harm.
- Crash and diagnostic logs: up to 90 days.
- Encrypted backups: purged within 30 days of deletion.
8Your rights
You can access, correct, export or delete your data, object to processing based on legitimate interests, withdraw a permission at any time in your device settings, and ask us to restrict processing. Most of this is available directly in the app; for anything else, email support@bookplayapp.com and we will answer within 30 days. If you are in the EEA or the UK and you are not satisfied with our answer, you may complain to your national data protection authority.
9Security
Traffic is encrypted in transit with TLS, data is encrypted at rest, passwords are hashed, and staff access is limited to the people who need it and is logged. No system is perfect; if a breach affects your data, we notify you and the relevant authority as required by law.
10Children
book&play is not intended for children under 16. If you are under that age you may only use the app with the consent and supervision of a parent or legal guardian. If we learn that we hold a child's data without that consent, we delete it. A parent or guardian can contact us at support@bookplayapp.com.
11This website
bookplayapp.com is a plain informational site. It sets no cookies, loads no third-party fonts, scripts or analytics, and does not track you. Our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting.
12Changes to this policy
If we change this policy we update the date above and, for significant changes, tell you in the app or by email before they take effect. Continuing to use book&play after that means you accept the updated policy.