Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information — phone number, name, and email address when you create an account
• Profile details you choose to add — username, photo, sports and your own rating of your level, preferred language, gender, date of birth, address, and an emergency contact
• Payment information — processed securely through Stripe; we do not store your full card details. If you save a card, we keep its brand, last four digits, and expiry date so you can choose it next time
• Booking and membership data — court reservations, club memberships, programs, match participation, and the club policies or waivers you accept
• Location data — when you allow it, your location is used on your device to show nearby clubs and courts. It is not sent to or stored by Hurdl
• Friends and contacts — when you use friends, we keep the friend requests you send and receive, your friends list, the players you block, and any report you make about another player. Your contacts are used only if you choose “Find friends from your contacts” and allow access. The app then sends the phone numbers in your contacts, never their names, to Hurdl over an encrypted connection. We compare them with the verified phone numbers of Hurdl players and show you the players who match. The numbers are not hashed or made anonymous: Hurdl reads them only to make that check, does not store or log them, and discards them when the check ends. You need a verified phone number to check, and to hold the daily limit we keep a coded form of your own number, made with a secret key and not the number itself, for one day. Other players who have your number in their contacts can find you this way unless you turn off “Let people find me by phone number” in Settings. A contact who is not on Hurdl stays on your phone. Inviting opens your own messaging app, and we never contact them on your behalf
• Device and usage information — device type, operating system, app version, error reports, and how you use the Service (see section 9)

You need to give us a phone number or email address to create an account, and payment details to pay for a booking or membership. Some programs have age limits and need your date of birth to check them. Everything else is up to you. If you do not give us information we need, we may not be able to create your account or complete a booking.

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Verify your phone number and sign you in
• Process bookings and payments
• Send booking confirmations and reminders
• Check age limits for programs that have them
• Show relevant clubs and courts near you
• Help you find and add friends, including from your contacts when you choose to
• Tell you about changes to the Service and your account
• Detect and prevent fraud or abuse

3. Information Sharing

We share your information only in the following cases:

• With clubs — when you book, join, or buy from a club, that club receives your name, phone number, email address, and the details of your bookings, memberships, programs, payments, and the policies you accept at that club. The club sells to you directly, may add its own notes to its customer record, and handles your information under its own privacy policy
• With payment processors — Stripe processes your payments under their own privacy policy
• With service providers — who process data for us to run the Service: Convex (our database and backend), Vercel (our website), Cloudflare (photo storage), Twilio (sign-in codes), Resend (email), Apple (app notifications), PostHog (product analytics), Sentry (error reports), and OpenAI (tools that help club staff run their club, which may process the name, email, and phone number in a club’s customer list)
• With other players — anyone, including people who are not signed in, can see your name, username and photo, for example in a game’s player list. Unless you set your profile to Only me, they can also find you in player search and see your profile, including your sports, how many games you have played, and how many friends you have. A signed-in player who can see your profile also sees the first names of up to two friends you share and how many you share, leaving out friends whose profile is set to Only me. Only you and the other player see a friend request between you, and a player is not told when you decline their request, remove them as a friend, or block them. Nobody but you sees who you blocked. A player who has your phone number in their contacts can find you with “Find friends from your contacts”, unless your profile is set to Only me or either of you blocked the other
• With Hurdl staff, when you report a player — a report goes only to Hurdl staff, never to a club, and the player you report is not told who reported them
• As required by law — to comply with legal obligations or protect our rights

We do not sell your personal information to third parties.

4. Direct Marketing

We do not give your personal information to anyone else for their marketing. The only marketing we send is an email about a club’s launch, and only if you ask to be told when that club opens on Hurdl. Every such email has an unsubscribe link. Before we use your information for any other marketing, or give it to anyone for theirs, we will ask for your consent, and you can withdraw it at any time.

5. Where Your Data Is Stored

Our service providers store and process data outside Hong Kong, including in the United States. When you use Hurdl, your information is transferred to and handled in those places, which may not have the same data protection laws as Hong Kong.

6. Data Security

We take reasonable steps to protect your data from unauthorized access, loss, or misuse, and data sent between your device and Hurdl is encrypted. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your account information for as long as your account is active. You can delete your account at any time in Settings. When you do, we remove your profile details and your contact details from the clubs’ customer records, and sign you out everywhere. Booking and payment records are retained as required for legal and accounting purposes.

A friend request stays until it is accepted or cancelled. A declined request leaves the receiver’s list but stays with the sender, without saying it was declined, until they cancel it. A friendship stays until either player ends it, and a block until the player who made it lifts it. A report stays as the record of Hurdl’s review. If another player reports your profile, we keep the photo they reported until we have reviewed the report, even if you change or remove it. When you delete your account, we delete your friend requests, your friends list, your blocks, and every report you made. A report another player made about you is kept, with the name and username it recorded but without your photo, for one year after you delete your account so we can finish our safety review, and is then deleted.

8. Your Rights

You have the right to ask for a copy of the personal data we hold about you, and to ask us to correct it if it is wrong. You can see and correct most of your details yourself in Settings. To make a request, contact us using the details in section 12. We will reply within 40 days. If there is a fee for a copy of your data, we will tell you before we prepare it.

Depending on your location, you may also have the right to:

• Request deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data

9. Cookies and Analytics

Our website uses essential cookies for authentication and session management. We use PostHog to understand how the Service is used. It stores an identifier in a cookie and your browser’s local storage, and records the pages you visit and the buttons and links you click, linked to your account, name, and email address once you sign in. We use Sentry to find and fix errors. Its error reports can include a short recording of the screen around the error, with all text, images, and what you typed hidden.

10. Children's Privacy

The Service is not intended for children under 18, and we do not knowingly let anyone under 18 create an account. A club may add other people to its own customer records, such as family members on a membership. If you think we hold a child’s personal information without a parent’s or guardian’s permission, contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by other means.

12. Contact

Questions about this Privacy Policy, or a request to access or correct your data? Contact us at anson@hurdl.club or ayush@hurdl.club.