Privacy Policy

Last updated: September 9, 2026 · Version 3.0

This Privacy Policy explains what goEnpLAY! ("we", "us", the "App") collects about you, why, who else sees it, how long we keep it, and what you can do about it. goEnpLAY! is operated by Joemarie Amar (jomsoftware) in Bacolod City, Philippines, and processes personal data under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules.

1. Who is responsible

goEnpLAY! is the personal information controller for your account and everything you do in the app. Each club you book with is a separate controller for the records it keeps about you as its customer (see section 4). Our Data Protection Officer is Joemarie Amar, reachable at jomsoftware@gmail.com.

2. What we collect

You give us

• Account — name, email address, and a securely hashed password if you register with one.
• Social sign-in — if you sign in with Google or Facebook: your name, email, profile picture and the provider's account identifier. Never your Google or Facebook password. A provider-verified email counts as confirmed with us.
• Profile — photo, sports, playing level and rating, home area, and whether other players may find you.
• Bookings and payments — the venue, court, date and time you reserve; the payment reference, amount and status. Card and wallet details are entered with PayMongo and never reach us.
• Messages — what you write to a club's front desk, and in a game's roster chat.
• Reviews — your rating and comment on a venue, published under your name.
• Social features — connections you request or accept, players you block, teams you join, games you host or join, and reports you file about a message.
• Consent — when you accepted this policy, and which version.

We record as you use the app

• Attendance — games you joined and, if a host marks it, games you did not turn up to. Shown to you and to the clubs you play at; never to other players.
• Loyalty and referrals — points earned and spent at a club, and who referred whom.
• A player code — the QR a club scans at the desk to find your account.
• Push token — a device token so we can send booking updates. No contacts, microphone or camera access beyond the photo you choose to upload.
• Approximate location — only when you switch "Near me" on while browsing venues. Your device asks your permission first, and the app works exactly as before if you refuse. We round the position to about 100 metres before it leaves your phone, use it once to sort venues by distance, and hand it to nobody. We do not store it: it is not written to your account or to any record, and the only trace it leaves is the ordinary server log of the request, kept as long as our other operational logs.
• Your conversation with the in-app assistant — what you ask it and what it answers, kept as a thread you can scroll back through. You start it; nothing is recorded unless you write to it.
• Security log — when money moves on your account, when a club edits its notes about you, when you delete your account, and the IP address of the person who did it.

We run no analytics or advertising software in the app.

3. Why, and on what basis

• To run your bookings and payments and let a club serve you — performance of a contract with you.
• To keep the platform honest — fraud prevention, payment reconciliation, the security log — our legitimate interest, and where tax law applies, a legal obligation.
• To let other players find you, and to send promotional messages — your consent, which you give and withdraw in the app's settings.
• To sort venues by how far they are from you — your consent, which you give by switching "Near me" on and withdraw by switching it off or by removing the permission in your device settings.
• To answer your questions through the in-app assistant — your consent, which you give by writing to it and withdraw by not using it. It is switched off unless you open it, and it can offer actions but never take them: anything it proposes happens only when you tap to confirm.
• To send you transactional messages — booking confirmations, reminders, cancellations, a password reset — performance of a contract. You can turn off the courtesy ones; the ones about money and access always reach you.

4. Who else sees it

We do not sell your personal data. It is shared only with:

• The clubs you book with. A club sees your name, player code, your bookings and spend there, your attendance record there, and any membership or loyalty balance with them. Club staff can also write notes and tags about you as their customer. A club never sees your email address or your activity at other clubs. The club is responsible for what it writes, and must delete it when you delete your account.
• Other players. If you are findable, any player can see your name, photo, sports, level and area. Players in a game or team with you see the same, plus what you write in that thread.
• Our service providers, who process data only on our instructions: PayMongo (payments), Google and Facebook (sign-in), Expo (push delivery), our email provider (account emails), Slack (operational alerts, which carry reference numbers and never names), and Laravel Cloud on Amazon Web Services, which hosts the service.
• Anthropic, which runs the language model behind the in-app assistant, and only when you write to it. What we send is your message, the recent messages in that conversation, and whatever the assistant looked up to answer you — which can include your bookings with the venue, court, date and amount, your memberships and loyalty balance, and, if you ask about open games, the display name of the player hosting one. We never send your email address or your password. Anthropic processes it only to produce the answer, on our instructions, and does not use it to train its models.
• Authorities, where the law requires it or to protect our legal rights.

Where your data lives. The service is hosted outside the Philippines — today in the United States, on Laravel Cloud's Amazon Web Services infrastructure. That is where your data is, including while the app is being tested. If we move it to another region we will say so here. We remain responsible for it wherever it sits, and bind our providers by contract.

5. How long we keep it

• Your account and profile — for as long as the account exists.
• Bookings and payments — for as long as tax and accounting law requires, even after you delete your account; by then they no longer carry your name.
• The payment gateway's copy of your billing details — 90 days after a payment settles, then removed.
• Messages — 365 days, then removed. A message report — 365 days after it is decided.
• Push tokens — removed when you sign out, or after 60 days unused.
• Your assistant conversation — 365 days, like other messages. The record of which of your details the assistant looked up on a turn goes sooner, after 90 days. If you delete your account the whole thread is deleted, not anonymised — nobody else holds half of it, so there is nothing to keep.
• The security log — kept, because it is the record of decisions about your account. It records what happened, never the contents of a note or a message.

6. Your rights, and how to use them

• See and correct — your profile is editable in the app. For everything else we hold, including what clubs recorded about you, ask for a copy (below).
• Take a copy — email us and we will send one file with everything we hold about you, in JSON.
• Delete — Profile → Settings → Delete account, or email us. See how deletion works and what stays.
• Object or withdraw consent — turn off "Let other players find me" and promotional messages in the app; for anything else, email us.
• Complain — to us first, and to the National Privacy Commission (privacy.gov.ph) if we do not put it right.

Requests go to jomsoftware@gmail.com. We answer within 30 days and may ask you to confirm the request from the email address on your account.

7. Security

Connections are encrypted; passwords are hashed; card and wallet details never touch our systems; your profile photo is served through expiring links; staff who handle money or read notes about players must use two-factor sign-in; and a record is kept of who changed what. No method is perfect. If a breach puts you at real risk we will tell you and the National Privacy Commission within 72 hours of learning of it.

8. Children

The App is for players aged 13 and over, and a player under 18 needs a parent's or guardian's consent to use it. If you believe a child has given us data without that consent, tell us and we will remove it.

9. Changes

When this policy changes in a way that matters, the version number above changes and the app asks you to read and accept it again before you carry on.

10. Contact

For any privacy question or request: jomsoftware@gmail.com.