Back to Facility

Privacy Policy

Last updated 25 September 2026

This policy covers the Facility website and the Facility mobile app. Both use the same account and the same data.

What we collect

  • Account details: name, email, phone number, an emergency contact name and phone, password (stored hashed), optional photo, bio, skill level, preferred sports and your language choice.
  • Optional payment details for organisers: a payment handle (for example an eSewa or Khalti id) and a payment QR image. The QR image is stored privately and shown only as described below.
  • Optional home area: a point on the map you save on your profile to sort games and venues by distance. Only you see it.
  • Activity: games you create or join, join requests and invitations, bookings and booking change requests, slot alerts, friends and saved crews, favourite venues, reviews, reports, chat messages within games, notifications and your notification preferences.
  • Payments between players: when a game has a fee, you may send the organiser a screenshot of your payment through the game chat. The screenshot is stored privately.
  • People you invite by email: when an organiser invites someone who has no account, we store that email address, a one time invitation link and whether it was used. Invited addresses can opt out of further invitations with the link in the email.
  • Venue data entered by venue managers: venue details, photos, opening hours, prices, and bookings taken at the counter, which may include the name and phone number of a customer who has no account.
  • Location: only when you tap "Near me", and only to filter games and venues. It is not stored.
  • Sign in with Google or Apple: your name, email and profile picture from that provider.
  • Push notifications: a device or browser token so we can deliver notifications you have turned on. Removed when you sign out or switch them off.
  • Technical: IP address and browser or device details in server logs and rate limit counters, kept for security and for a limited time. Crashes and server errors are sent to our error tracking service with the request details needed to fix them, never your password or session token.
  • Usage statistics: which pages of the website are visited. The visitor id is a hash that cannot be turned back into you, and rows are deleted after 90 days.

Why we use it

  • To run the service: show your games, reserve courts, handle booking changes between you and the venue, and let organisers, fellow players and venues contact you about a game or booking.
  • To notify you about your games, bookings, payments, friends and venue account, by email, push and in the app. You choose per category which channels are on.
  • To keep the platform safe: rate limiting, reports and blocks, attendance records, abuse prevention, account suspension. Admin actions are logged.
  • To improve the service, using the aggregated usage statistics described above.

Who sees it

  • Other players see your name, photo, skill level, bio, friend count, your reliability statistics (games played, no shows) and your presence in games you joined.
  • Players of a game you joined see each other's phone number and emergency contact, so that someone can be reached if a player is hurt.
  • Organisers of a paid game see who has paid, the screenshots you sent and your payment messages. Joined players of a paid game see the organiser's payment handle and QR. The handle is also printed in email invitations for that game.
  • Venues see the name, email and phone of the person who booked, so they can manage the booking, propose changes to it and record payment at the counter. Venue managers may use these details only for that booking.
  • Admins see reports, support messages and, when a payment is disputed, the payment screenshots. Every such access is logged.
  • We do not sell personal data. Email delivery, push delivery (Expo and browser push services), error tracking, map tiles, sign in providers and hosting providers process data on our behalf.

Your choices

  • Edit your details, payment details, home area, language and notification channels on your profile at any time.
  • Block a player to stop them from contacting you or joining your games. Report a player, venue or game to us.
  • Delete your account from your profile. Your personal details, photo, payment details and QR are wiped immediately, future bookings and games are canceled, and your sign in providers, devices and notifications are removed. Anonymised game and booking history remains so that other participants' records stay consistent.
  • Ask us for a copy of your data or for corrections at the address below.

App permissions

The mobile app asks for your location only for "Near me", your photo library only when you pick a profile picture, a venue photo, a payment QR or a payment screenshot, your calendar only when you tap "Add to calendar", and notifications only when you turn them on. Each can be refused and the rest of the app keeps working.

Retention and security

Data is stored on servers in the EU with encrypted connections and nightly backups. Backups are kept for 14 days. Payment screenshots are deleted 90 days after the game. Usage statistics rows are deleted after 90 days. Invitation links stop working once the game is over.

Contact

Privacy questions: privacy@facility.datatechinv.com