This policy explains what personal information TurfBuddy collects when you use the TurfBuddy player, owner, staff and HQ apps, why, and your choices.

What we collect

• Account: your mobile number, name and team name.
• Bookings and payments: the slots you book, amounts, payment method and the payment reference from the gateway. We never see or store your full card number, bKash PIN or OTP from the payment provider.
• Wallet and points: balances and every transaction.
• Community: posts, challenges, reviews, tournament entries and reports you make.
• Turf owners: business details, trade licence, national ID, payout account and the documents you upload. Staff: name, phone, role and the actions you take at the counter.
• Location (optional): only if you choose “Show distances”, a rounded location (about 100 m) is kept in a cookie on your device for 30 days to sort turfs by distance. It is not stored on our servers.
• Technical: sign-in cookies, language and theme choices, and server logs (IP address, browser) kept for security.

How we use it

• To run bookings and payments, and to send booking confirmations, receipts and sign-in codes by SMS.
• To let turfs see who has booked (team name and phone) so they can contact you about your booking.
• To pay turf owners, prevent fraud and abuse, handle disputes and support requests, and meet legal and tax duties.
• To send offers: a turf you booked may send you SMS campaigns, and we may send you news. You can opt out of marketing by contacting support.

Who we share it with

• The turf you book, and its staff, for that booking.
• Other players see only your name or team name on posts, challenges, tournaments and reviews, never your phone number.
• Service providers who process data for us: database and hosting (Supabase, Singapore region; Vercel), the payment gateway, and the SMS provider.
• Authorities, when the law requires it.

We do not sell personal information.

How long we keep it

Account data is kept while your account is open. Booking, payment and ledger records are kept for 6 years for accounting and tax purposes. Sign-in codes are removed from our messaging system once sent.

Security

Data is encrypted in transit. Access is limited by role: a player sees their own data, a turf sees its own bookings, and staff see only the turf they work at. Payout accounts and documents are visible only to the owner and TurfBuddy staff.

Your choices

You can see and correct your name and team name in the app. To get a copy of your data, close your account or delete your data (subject to the records we must keep by law), contact us. We reply within 30 days.

Children

TurfBuddy is not for children under 13.

Changes and contact

We will post updates here with a new date and tell you in the app about important changes.

TurfBuddy, Dhaka, Bangladesh. Email support@turfbuddy.app.