Privacy policy
Last updated 14 September 2026. This is a working draft written for the product as built; have a Philippine lawyer review it before launch.
This policy explains what CourtLot (“we”) collects when you use the app, why, and the choices you have. It is written to comply with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules.
1. What we collect
Account details: your name, email address and, if you add it, mobile number, received from our sign-in provider when you create an account.
Booking and game activity: the courts you book, the games you join or organise, attendance marked by organisers, and the reliability score derived from it.
Payment records: the amount, time and status of each QR Ph payment and the payment reference returned by our payment aggregator. We never see or store your bank or e-wallet credentials. If you request a cash-out we store the destination account you give us for that transfer.
Venue owner details: for court owners, the business permit or government ID shown on the application or at the verification visit, GPS coordinates captured at the court, and the bank account used for payouts.
Technical data: IP address, device and browser type, and server logs kept for security and debugging.
2. Why we use it
To run the service: confirming bookings, settling payments, paying venues, refunding wallets, and notifying you about games you are part of.
To keep the platform honest: verifying venues in person, showing organisers a joiner's reliability score, and investigating reports of courts that are not as listed.
To meet legal obligations, including tax and accounting records for payments and payouts.
We do not sell personal data and we do not use it for advertising.
3. Who we share it with
Venues see the name of the player who booked and, for games, the names on the roster. Organisers see the names and reliability scores of players who join their game.
Service providers who process data on our behalf: our sign-in provider, our payment aggregator (for QR Ph collection and disbursements), our database and file hosting, and our email provider. Each is bound by contract to use the data only to provide the service.
Authorities when required by law, or to protect the safety of players and venues.
4. How long we keep it
Payment and payout records are kept for ten years to meet Philippine accounting and tax rules. Booking history is kept while your account exists. Verification documents for venues are kept while the venue is listed and for two years after.
You can ask us to delete your account. We will delete or anonymise everything except records we are legally required to keep.
5. Your rights
Under the Data Privacy Act you may access, correct, or ask us to delete your personal data, object to processing, and request a copy in a portable format. Email [support email] and we will respond within fifteen working days.
You may also lodge a complaint with the National Privacy Commission.
6. Security
Data is encrypted in transit and at rest. Payment collection and disbursement are handled by a BSP-supervised aggregator; we hold no card or bank credentials. Access to venue verification documents is limited to platform staff.
7. Contact
Data Protection Officer: [name], [support email], [business address].