Privacy Policy
This Privacy Policy describes how Athlits, operated by Orayzen ("Athlits", "we", "us", or "our"), handles personal data when you use the Athlits sports court booking app for Android and iOS (app id: com.orayzen.athlits). Athlits lets players discover venues and book courts, and lets venue managers manage courts, calendars, photos, payments, teams, and bookings.
For privacy questions or requests, contact athlits@orayzen.tech.
Information we collect
We collect information needed to run the booking marketplace, secure accounts, support venue operations, process supported payment flows, and improve the app's reliability. Because Athlits is account-based, these categories may be linked to your account, user ID, or device identifier.
Account, profile, and preference information
- Name, email address, phone number, user ID, account role, language, gender, date of birth, country, sports interests, profile picture, and account or app preferences.
- We use this information for authentication, profile management, personalization, support, account security and deletion, and to route users to player or venue-manager features.
Location
- Approximate or precise device location when you grant permission, saved location preferences, and location provided during signup or profile setup.
- Location access is optional, used while the app is in use, and supports nearby venue discovery and relevant search results. Athlits does not use background location tracking.
Bookings and venue activity
- Selected venue, court, sport, booking date and time, status, cancellation status, price, currency, payment method and status, booking reference, recurrence settings, and booking notes where supported.
- Venue managers and authorized venue team members receive the booking details needed to provide the court, confirm attendance or payment, handle cancellations and support, manage venue-local restrictions, prevent conflicts, and operate the venue.
Payments and financial information
- Payment-related metadata, payment-provider tokens where applicable, card brand, last four digits, expiry, default status, external payment methods or instructions, payment status, and venue-confirmed payments.
- We use this information for supported online, external-app, saved-payment-method, or venue-confirmed payment flows, as well as fraud prevention, reconciliation, and support.
- Athlits does not keep full card numbers, CVC codes, or payment passwords in its logs, analytics, or crash reports.
Venue and partner information
- Venue profiles, courts, opening hours, availability, facilities, pricing, cancellation rules, team-member information, contracts, finance and payout context, and masked bank or payment-account details where shown.
- We use this information to operate venue listings, calendars, partner access, bookings, payments, finance views, promotions, announcements, reviews, player restrictions, and support.
Discovery, favorites, reviews, and promotions
We process search text and filters, venue and area browsing activity, saved venues or favorites, review ratings and text, promotion codes, discounts, and related timestamps or status values. This supports search results, saved venues, booking-verified reviews, eligible offers, venue trust, and discovery improvements. Venue managers may see reviews, ratings, promotion performance, and aggregated venue activity needed to operate their venue.
Photos and camera
We process profile, venue, and court photos that you choose to upload or capture. Uploading is optional. Photos are used to display profiles and venue or court listings, as applicable.
Device identifiers, notifications, and configuration
We process Firebase Cloud Messaging push tokens, Firebase installation IDs, device or app-instance identifiers, notification permission status, notification interactions, and remote configuration values. We use them to register devices, deliver and route service notifications, show update prompts, and manage operational app configuration.
Analytics, diagnostics, and crash data
We process product-interaction events, crash reports, performance data, request diagnostics, device and app metadata, and redacted error context. We use this information to understand feature usage, debug crashes, monitor reliability, improve performance, and protect the service.
We redact sensitive values before telemetry reaches analytics, logs, Sentry, or Crashlytics. We do not intentionally send passwords, bearer tokens, one-time passwords, full phone numbers, full card numbers, CVC codes, full bank-account numbers, or precise raw coordinates in telemetry.
How we use information
- Create, secure, personalize, support, and manage Athlits accounts.
- Show venues, courts, availability, prices, and booking status.
- Create, confirm, change, cancel, display, and support bookings.
- Support venue, team, payment, finance, review, and promotion tools.
- Send booking, account, reminder, and operational notifications.
- Prevent misuse, diagnose problems, and improve reliability.
How we share information
We do not sell personal data. We share information only as needed to operate Athlits, provide services you request, comply with law, enforce our Terms of Service, or protect Athlits, users, venues, or the public.
- Venues: venue managers and authorized team members receive booking and user information needed to provide and support the booked service and operate the venue.
- Service providers: providers processing data on our behalf include Firebase Analytics, Firebase Crashlytics, Firebase Messaging, Firebase Remote Config, Firebase App Installations, Sentry, hosting providers, mapping and location support, payment providers where available, and email or support tools.
- Apps you select: email, WhatsApp, browsers, maps, or payment apps you choose to open handle information under their own terms and privacy policies.
- Legal disclosures: we may disclose information when required by law or reasonably necessary to protect rights, safety, security, users, venues, or the public.
No advertising, sale, or cross-company tracking
Athlits does not show third-party advertising, sell personal data, or use your activity to track you across other companies' apps or websites.
Security
We use HTTPS for data in transit, secure storage for session tokens, role-aware access controls, telemetry redaction, and privacy safeguards for sensitive authentication, profile, booking, and payment-method flows. No security measure can guarantee absolute protection.
Data retention
We retain account, profile, booking, venue, payment-adjacent, support, security, and diagnostic data for as long as needed to provide Athlits and for legitimate operational needs. Some limited records may be kept after account deletion when required for legal or accounting obligations, fraud prevention, security, dispute resolution, or enforcing agreements. When retention is no longer necessary, information is deleted or de-identified in accordance with applicable requirements. Local app caches are cleared on sign-out, account changes, or deletion flows where applicable.
Your choices and account deletion
- You can deny or revoke location, camera, photo, and notification permissions through device settings, though this may limit related features.
- You can edit supported profile fields in the app.
- You can request access, correction, or deletion, or ask a privacy question, by emailing athlits@orayzen.tech.
- To request account deletion in the app, go to Profile → Delete account. You may also follow our web account-deletion instructions. Account data is deleted or de-identified subject to the limited retention described above.
Children
Athlits targets adults aged 18 and over and is not directed to children under 13.
Changes to this policy
We may update this policy. The "Last updated" date identifies the latest revision, and material changes may be communicated through the app or by email.
Contact us
Athlits is operated by Orayzen. Privacy inquiries: athlits@orayzen.tech.