This Privacy Policy explains how Pay to Play (“we”, “us”, “our”) collects, uses, discloses, and protects your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using the Pay to Play mobile application (“the App”), you consent to the collection and use of your information as described in this policy.
We use Stripe to process payments. We do not store your full credit card number, expiry date, or CVV. We store only:
If you are a session organiser, Stripe may collect additional identity and business information as part of its Know Your Customer (KYC) onboarding process. This information is held by Stripe, not by us.
We collect personal information:
We collect and use your personal information for the following purposes:
| Purpose | Information used |
|---|---|
| Creating and managing your account | Name, email, phone, profile photo |
| Facilitating session organisation and attendance | Session details, attendance status, waitlist data |
| Processing payments and pre-authorisations | Stripe identifiers, card display data (brand, last four) |
| Splitting costs between session attendees | Payment amounts, attendee counts, pricing model |
| Sending push notifications | Device token, notification preferences |
| Enforcing cancellation and payment policies | Cancellation timestamps, cutoff status |
| Improving app stability and fixing bugs | Error reports, crash data, performance metrics |
| Preventing fraud and ensuring security | Authentication data, transaction logs |
We will not use your personal information for purposes other than those outlined above without your consent, unless required or authorised by law.
We may disclose your personal information to the following third parties:
Stripe, Inc. processes all payments on our behalf. When you add a payment method or make a payment, your payment details are transmitted directly to Stripe. Stripe’s handling of your data is governed by the Stripe Privacy Policy.
We use Expo’s push notification service to deliver notifications to your device. Your device push token and notification content are transmitted to Expo for delivery. Expo’s handling of your data is governed by the Expo Privacy Policy.
If error tracking is enabled, crash reports and related diagnostic data may be sent to Sentry. Sentry’s handling of your data is governed by the Sentry Privacy Policy.
Our backend infrastructure is hosted on Supabase. Your data is stored in Supabase-managed databases and storage. Supabase’s handling of your data is governed by the Supabase Privacy Policy.
If you sign in with Google or Apple, authentication tokens are exchanged with the respective provider. Their handling of your data is governed by their respective privacy policies.
When you join a session, other participants (and the session organiser) can see your display name and profile photo. Sessions shared via a share link may expose participant names and avatars to anyone with the link.
We may disclose your personal information if required to do so by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Some of the third-party services we use (Stripe, Expo, Sentry, Supabase) may store or process your data outside of Australia, including in the United States. Where your data is transferred overseas, we take reasonable steps to ensure the overseas recipient handles your information in accordance with the APPs.
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include:
No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
We retain your personal information for as long as your account is active or as needed to provide you with the App’s services. Specifically:
When your data is no longer required, we will take reasonable steps to destroy or de-identify it.
Under the Australian Privacy Principles, you have the right to:
You may request access to the personal information we hold about you. We will respond to your request within a reasonable period (generally within 30 days).
If you believe the personal information we hold about you is inaccurate, incomplete, or out of date, you may request that we correct it. You can update your display name, profile photo, and notification preferences directly within the App.
You may request that we delete your account and associated personal information. Some information may be retained where required by law (e.g. financial transaction records).
You can manage your notification preferences within the App’s settings. You can also disable push notifications at the device level through your device’s system settings.
Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
The App does not use cookies. Where error tracking is enabled via Sentry, diagnostic data is collected automatically during app usage. No advertising trackers or analytics platforms are used within the App.
The App is not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or by other reasonable means. The “Last updated” date at the top of this policy indicates when the most recent changes were made.
Your continued use of the App after any changes to this policy constitutes your acceptance of those changes.
If you have any questions about this Privacy Policy, wish to make a complaint, or would like to exercise any of your rights described above, please contact us at:
Email: [email protected]
If you are not satisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner (OAIC):