Privacy Policy

1. Introduction

il3ab ("we," "our," or "us") operates two mobile applications for sports court booking in the Bekaa region of Lebanon: il3ab, used by players to discover and book courts, and il3ab Management, used by venue owners and platform administrators to manage venues, courts, bookings, and tournaments.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use either of these mobile applications. By using il3ab or il3ab Management, you agree to the collection and use of information in accordance with this policy.

2. Information we collect — il3ab (Player App)

Account information: When you create a player account, we collect your phone number (used for SMS-based authentication), full name, and an optional profile photo.

Location data: With your permission, we collect your device's approximate location to show you nearby sports courts. Location access is optional and can be revoked at any time through your device settings.

Booking data: We store information about your court bookings, including dates, times, courts booked, sport played, payment method selected, and booking status.

Match and chat data: If you join an open match or host one, we store the match participants and any messages exchanged in the in-app match chat.

Tournament data: If you register for a tournament, we store your team name, the names of your team members (provided by you), and your tournament results.

Device information: We collect device identifiers and push notification tokens to send you booking confirmations, match updates, and tournament updates.

Photos: If you upload a profile photo, it is stored securely in our cloud storage.

3. Information we collect — il3ab Management (Staff App)

The staff app is used by approved venue owners and platform administrators. Access requires a code and PIN issued by the platform administrator. We collect:

Staff account information: Full name, optional profile photo, and an internal staff identifier. Staff accounts do not require a phone number for authentication.

Venue and court data: Owners provide details about their venue (name, description, address, GPS coordinates, photos, amenities, operating hours) and the courts within it (name, sport types, hourly rate, surface, lighting, photos).

Booking management data: Owners can view, manage, and cancel bookings made on their venue's courts.

Walk-in customer data (manual bookings): Owners can register bookings on behalf of walk-in customers who do not have an il3ab account. For each manual booking, the owner enters the customer's name (required) and may optionally enter a phone number and internal notes. Owners are responsible for obtaining the customer's consent before entering this information. This data is visible only to the venue owner and platform administrators, is never shared with players or other venues, and is used solely to display the booking on the venue's calendar and contact the customer if needed.

Tournament management data: Owners can create and manage tournaments, including team registrations, brackets, and results.

Device information: We collect device identifiers and push notification tokens to send staff notifications about new bookings, cancellations, and platform updates.

4. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the il3ab and il3ab Management apps
• Process and manage court bookings, matches, and tournaments
• Show players nearby sports courts based on their location (with permission)
• Send push notifications about bookings, matches, tournaments, and platform updates
• Enable communication between players through the in-app match chat
• Allow venue owners to manage their venues, courts, and bookings
• Allow platform administrators to approve owner applications and moderate the platform
• Provide customer support

5. Information sharing

We do not sell, trade, or rent your personal information to third parties. We may share limited information in the following cases:

• Players to venue owners: When a player makes a booking, the venue owner can see the player's name, phone number, and booking details to facilitate the visit.
• Players to other players: If a player joins an open match, other participants in that match can see their name and exchange messages through the in-app chat.
• Walk-in customer data: Customer information entered by owners for manual bookings is visible only to that owner and to platform administrators. It is never visible to players or to other venues.
• Service providers: We use Supabase (Frankfurt, Germany) for our backend infrastructure, Expo for push notification delivery, and Vercel for our administrative web dashboard. These providers process data on our behalf and are bound by their own privacy policies.
• Legal requirements: We may disclose information if required by law or in response to valid legal requests.

6. Payment information

Neither il3ab nor il3ab Management directly processes or stores credit card numbers or financial account information. When paying via cash, no financial data is collected. When using Whish Money (when available), payment is processed entirely through the Whish Money platform, and their privacy policy governs that transaction. For manual bookings recorded by owners, no payment data is collected by our systems — only a flag indicating whether the customer has paid in cash is stored.

7. Data storage and security

Your data is stored securely on servers hosted by Supabase in Frankfurt, Germany (EU). We implement appropriate technical and organizational measures to protect personal information, including encryption in transit (TLS/SSL) and row-level security policies on our database.

Walk-in customer data entered by owners is protected by the same measures and is restricted to the venue owner and platform administrators through our database security policies.

However, no method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your rights

You have the right to:

• Access your data: View your profile and booking history within the app.
• Update your data: Edit your profile information at any time.
• Delete your account: Player accounts can be deleted from the Profile settings within the il3ab app. Staff accounts can be deactivated by contacting the platform administrator. Account deletion permanently removes your profile data. Some booking records may be retained for venue owner business records as required by applicable law.
• Walk-in customer data removal: If you are a walk-in customer whose information was entered into the il3ab Management app by a venue owner without your consent, or if you wish to have your information removed, please contact us using the details below and we will work with the relevant venue owner to remove your data.
• Disable location: Players can revoke location permissions through their device settings at any time.
• Disable notifications: Push notifications can be disabled through your device settings for either app.

9. Children's privacy

Neither il3ab nor il3ab Management is intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy at this URL and updating the "Last updated" date at the top of this page. You are advised to review this Privacy Policy periodically.

11. Contact us

If you have any questions about this Privacy Policy, or if you are a walk-in customer who wishes to exercise their data rights, please contact us at:

Email: marwan.shibli@gmail.com
WhatsApp: +961 70 325 638
Location: Bekaa, Lebanon