Privacy Policy

Information we collect

We process account and profile details such as your name, email, phone number, profile photo, country, gender, sport, time zone, skill level and playing hand. We also store sports and fitness-related records such as matches, scores, ratings and recent form, along with groups, friendships, clubs, availability, invitation referrals and XP. These records and your submitted content are linked to your account using your user ID.

When you use messaging, we process the messages you send and receive along with related data such as sender and recipient, timestamps, delivery and read status, and any attachments you choose to share.

We collect limited device, security and diagnostic information needed to operate, protect and improve LigaSet. When you choose a photo, the app accesses only the media you select.

Support requests include the contact details and issue information you submit, ticket status and timestamps. Requests sent while signed in are linked to your account so we can track the issue and follow up. We also retain match-removal requests and their outcomes to document changes to shared results.

Trainer profiles and bookings

Trainer applications and profiles include the professional details, biography, certifications, teaching locations, services and prices you submit. Published trainer information is visible to people browsing trainers. Booking participants can see the session details and information needed to arrange their session. We store requests, proposed times, approvals, cancellations and booking updates to operate that workflow and resolve disputes.

Payments and saved cards

When you pay for an in-person training session or save a card, Stripe processes your card details, cardholder name and any billing information you provide. Stripe also processes device, network and transaction information needed to operate payments and prevent fraud. Full card numbers and security codes are handled by Stripe; LigaSet does not store them in its database or logs.

LigaSet stores Stripe customer and payment identifiers, card brand, last four digits and expiry date, your default-card choice, and the version and time of your consent to save a card. These records are linked to your account. We also keep booking amounts, currency, payment and refund status, and transaction references to confirm bookings, process refunds, resolve disputes and meet applicable recordkeeping obligations.

Saving a card requires your consent and does not purchase a session. You confirm each purchase before we charge you. You can remove saved cards or change the default card in Payment methods. Payment processing and fraud prevention are described further in Stripe’s Privacy Policy.

How we use information

• Provide accounts, matchmaking, rankings, groups and invitations.
• Authenticate users, prevent abuse and protect the service.
• Send transactional messages and respond to support requests.
• Diagnose failures and improve reliability and usability.
• Measure app interactions and advertising performance as described below, subject to applicable device permissions.

Profiles, clubs and shared sports records

Other players can see profile information displayed in LigaSet, such as your name, photo, playing details, club links, ratings and recent match form. Matches and activity are shown according to the service’s visibility and blocking rules. Club invitation links identify the club and inviter and can be forwarded; joining records your membership and the referral used for any eligible XP reward.

Push notifications

When you enable notifications, we associate your device’s push token, platform, language and notification preferences with your account to deliver match, score, result-removal, friendship and chat updates. Expo, Apple and Google process the tokens and notification payloads needed for delivery. Chat notifications may include message previews that can appear on your lock screen. You can turn previews and notification types off in Preferences, or disable notifications in system settings, without losing access to the app.

Analytics and advertising measurement

Mobile builds with Meta App Events enabled share device identifiers and product interaction events, such as app installs and launches, with Meta for analytics and to measure and improve advertising performance. This may involve linking permitted device and event data with data from other apps or websites for advertising measurement. We do not send private message content or support-request text to Meta for this purpose.

On iOS, we request App Tracking Transparency permission and set advertiser tracking according to your choice. You can decline or change this permission in system settings and continue using LigaSet. Declining advertiser tracking does not disable the SDK’s other app-event measurement. Android advertising identifier controls are available in your device’s privacy settings. Agreement to the terms or this policy does not replace a separate system tracking permission.

Messaging

LigaSet provides messaging functionality between users. Messages and related messaging data may be processed and stored by our third-party messaging infrastructure provider, Stream, for the purpose of providing the messaging service, safety, moderation and abuse prevention.

Stream processes this data on our behalf under its own contractual and security obligations, and stores it on infrastructure it operates. Direct messages are available only to the people in the conversation. We do not read your private conversations routinely, and we do not use message content for advertising or to train machine-learning models. We access message content only when it is necessary to investigate a report, enforce our terms, resolve a technical fault, or comply with a legal obligation.

Reporting and moderation

LigaSet does not tolerate harassment, abuse, threats, spam, sexual content involving minors, or other objectionable behaviour. If someone sends you objectionable content, you can report the message from the chat itself, and block the sender to stop further direct messages. Muting a conversation controls notifications; it does not block the sender. You can also write to support@ligaset.app.

When we receive a report we review the conversation and any material you provide. We aim to act within 24 hours. Depending on what we find we may remove the content, warn the account, restrict its ability to message, or suspend or terminate it. We keep a record of reports and the action taken so we can recognise repeat behaviour; that record is retained even where the underlying messages are removed.

Service providers

LigaSet uses trusted providers to operate the service, including Clerk for authentication, Stripe for payment processing and fraud prevention, Stream for messaging, hosting and database providers, Apple and Google for optional sign-in, Expo and device push services for notifications, Meta for the measurement described above, and Sentry when production diagnostics are enabled. These providers process data under their own contractual and security obligations.

Retention, deletion and your choices

When account deletion starts, new card-saving and card-payment activity is blocked. We cancel outstanding payment and card-setup authorizations, delete your Stripe customer and its saved card details, and erase local saved-card and card-consent records before completing account deletion. If payment cleanup cannot be completed, the deletion request remains pending and is retried automatically; payment activity stays blocked.

Deletion does not itself refund completed purchases. Limited booking, payment and refund records, including provider transaction references, remain linked to a non-identifying account placeholder for refunds, disputes, fraud prevention and applicable legal recordkeeping. These references may still be linkable to transactions held by Stripe; they are not treated as fully anonymous data. Stripe may retain transaction records as required by its legal and regulatory obligations. We retain these records only as long as needed for those purposes. Contact us to request access to or deletion of retained payment records.

We retain information while your account is active and as reasonably needed for security, legal obligations and dispute resolution. You can edit profile information in the app and permanently delete your account from Settings. You may also use the account deletion page.

Deleting your account removes your profile details, photo, contact information, groups you own, friendships, club memberships, availability, posts you wrote, pending matches and your ratings. We request permanent deletion at Stream of the messages you sent and the direct conversations you took part in. Stream processes this request asynchronously. Your private status page confirms when required cleanup has completed; submitting the request is not confirmation of completion. Your sign-in account is deleted at Clerk. Payment, messaging, database and sign-in cleanup happen in separate steps. Unfinished steps retry automatically. Our completion target is within 7 days, with delays escalated after 24 hours. Completed steps cannot be undone. Status receipts expire 90 days after completion.

Confirmed match results are shared records. Deleting them would rewrite your opponents’ match history and ratings, so they are kept and unlinked from you, attached to a non-identifying placeholder that carries no personal information. Copies may remain in backups, security and moderation records where needed for recovery, safety, dispute resolution or legal obligations. These records are not used to restore your active profile.

Support tickets linked to the deleted account are erased. Other support tickets are automatically removed once resolved and more than 180 days old. Closed moderation reports are removed 180 days after resolution; copied content and free text are removed during account deletion. Open cases remain available for follow-up. Match-removal receipts may remain for dispute resolution. For access, correction or deletion of information in those records, contact us using the address below.

Security and stored preferences

LigaSet uses HTTPS for network requests and access controls for authenticated account operations. The website uses cookies and the mobile apps use device storage to maintain sign-in sessions and preferences such as language and appearance. No service can guarantee absolute security. Contact us if you suspect unauthorized account access.

Cleanup verifies removal of stored post and group images before marking deletion complete. Provider failures leave the request pending for retry. Third-party caches and backups may retain copies until their own expiration; these copies are not used to restore an active profile. Contact us if deleted content remains accessible so we can investigate and complete cleanup.

Contact

For privacy questions or access, correction or deletion requests, email support@ligaset.app.