1) Who we are (Data Controller)

Controller: NoctuaLab

Contact email: dev.salayna@gmail.com

If you have questions or requests about your personal data, contact us at the email above.

2) Personal data we collect

2.1 Data you provide to us

• Account data: email address and/or phone number, authentication identifiers.
• Profile data: username, display name, avatar image (if you upload one), and optional profile fields (for example city/region and play preferences if enabled in the app).
• Content you submit: game/run descriptions or notes; messages sent to support.

2.2 Data collected automatically

• Device and app data: device identifiers, operating system, app version, language, and diagnostics/crash data.
• Usage data: pages/screens viewed, interactions (for example creating a game or RSVP), timestamps, and basic analytics events if enabled.

2.3 Location data

Hoop Hoot can use location information for:

• Court discovery: showing courts and games near you.
• Check-in validation: confirming you are within a defined distance (for example 250m) of a court during a defined time window.

Location settings:

• You can generally use court search and browse without sharing precise location (depending on features).
• If you deny location permission, some features (like distance-based check-in) may not work.

We do not sell precise location data and we do not display your precise location to other users.

2.4 Push notification data (OneSignal)

If you enable push notifications, we collect and store a push notification identifier (for example a OneSignal subscription/player identifier) associated with your account in order to:

• send you notifications (for example friend invites, game invites, reminders if enabled)
• measure delivery and opens at an aggregate level

3) How we use your data (Purposes)

We use personal data to:

• Provide and operate the Service (account creation, authentication, profiles).
• Display courts and games, enable RSVP and invite flows.
• Validate check-ins (distance + time window).
• Send push notifications if you opt in.
• Maintain security, prevent abuse, enforce policies.
• Improve the Service (debugging, performance, analytics).
• Provide customer support and respond to requests.

4) Legal bases (GDPR)

We process your data under the following legal bases:

• Contract: to provide the Service you request (accounts, games, RSVPs).
• Legitimate interests: to secure and improve the Service, prevent fraud/abuse, and maintain performance.
• Consent: where required (for example for certain device permissions such as location or push notifications, depending on your device settings).
• Legal obligation: if we must comply with applicable laws.

5) How we share your data

We may share personal data in the following cases:

5.1 With other users (within the app)

Depending on your app settings and participation:

• Your display name, username, avatar, and RSVP status may be visible to other users in the context of games you host or join.
• Game notes you create may be visible to invited users or to the public if the game is public.

We do not share your email address or phone number with other users.

5.2 Service providers (processors)

We use third-party service providers to operate the Service, including:

• Supabase (authentication, database, storage)
• Mapbox (maps)
• OneSignal (push notifications)

These providers process personal data on our behalf as processors (or as independent controllers in certain contexts) according to their own terms and privacy policies.

5.3 Legal and safety

We may disclose information if we believe in good faith that it is necessary to:

• comply with law, regulation, legal process, or governmental request
• protect the rights, property, and safety of Hoop Hoot, our users, or others
• investigate fraud, security, or technical issues

5.4 Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal data.

6) Data retention

We retain personal data for as long as needed to provide the Service and for legitimate business purposes, including:

• maintaining your account
• resolving disputes
• enforcing agreements
• complying with legal obligations

You may request deletion of your account and associated personal data (see Section 9). Some data may be retained where required by law or for legitimate interests (for example security logs).

7) International data transfers

Our service providers may process data outside of France/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data.

8) Security

We implement reasonable technical and organizational measures designed to protect personal data, including:

• access controls
• encryption in transit (HTTPS)
• least-privilege policies for database access
• monitoring and logging for abuse prevention

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9) Your rights (GDPR)

Depending on your location and applicable law, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact: dev.salayna@gmail.com.

You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

10) Children

Hoop Hoot is not intended for children under [INSERT_AGE]. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can take appropriate action.

11) Cookies and tracking (if you have a website)

If you operate a Hoop Hoot website, it may use cookies or similar technologies. Any such use will be described in a separate cookie notice or banner where required.

12) Changes to this policy

We may update this policy from time to time. We will post the updated version and update the "Last updated" date. Material changes may be communicated in-app or by other means.

13) Contact

For privacy questions, data requests, or concerns:

Email: dev.salayna@gmail.com