Privacy Policy

1. Introduction

Welcome to Nice Play ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy explains how Nice Play collects, uses, discloses, and safeguards your personal information when you use our mobile application and website (collectively, the "Service").

By using Nice Play, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using Nice Play:

• Account Information: Email address, password (securely hashed), first name, last name, display name, bio, and location (city/region)
• Profile Information: Profile picture, timezone, sports interests, skill levels, and bio
• Content You Create: Posts, comments, replies, event descriptions, event recaps, and reactions
• Social Interactions: Friend connections, group memberships, event attendance, props (praise badges) you give to others
• Event Information: Event titles, descriptions, start/end times, locations (address and coordinates), attendee limits, and skill level requirements
• Saved Locations: Venue names, addresses, coordinates, descriptions, amenities, and photos

2.2 Location Data

We collect and process location information in the following ways:

• Event Locations: Precise latitude and longitude coordinates for events you create or attend, along with venue addresses and names
• Saved Venues: Coordinates and addresses for locations you save for future use
• Device Location (Mobile App): With your permission, we access your device's location to show nearby courts and calculate distances to events. This is only accessed when you use location-based features and is not tracked continuously

Note: We do not track your location history or movement patterns. Location data is only used for the specific features you engage with.

2.3 Device and Usage Information

• Device Information: Device type, operating system, device identifiers, and push notification tokens
• Log Data: IP address, browser type, pages visited, time and date of visits, time spent on pages, and other diagnostic data
• Camera and Photos (Mobile App): With your permission, we access your camera and photo library solely for uploading profile pictures and event photos

2.4 Information from Third Parties

We integrate with the following third-party services:

• Mapbox: Provides geocoding (converting addresses to coordinates) and map display. We send addresses you enter and coordinates to Mapbox for these features
• Open-Meteo: Provides weather forecasts for events. We send event coordinates and times to this service (no API key required; free public API)
• Supabase: Our database and authentication provider. All data is stored securely on Supabase's infrastructure
• Expo Push Notifications: Manages push notifications on mobile devices. We send your device token to Expo when delivering notifications

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: Enable account creation, event organization, social interactions, and core platform functionality
• Communicate with You: Send notifications about events, friend requests, mentions, props, and other platform activity via push notifications and email
• Improve User Experience: Display nearby venues, show weather forecasts for events, calculate distances, and provide relevant timezones
• Safety and Security: Detect and prevent abuse, enforce our Terms of Service, moderate content, and protect users from harmful behavior
• Analytics and Insights: Understand platform usage patterns through internal analytics (e.g., number of active users, events created, props given). We do not use third-party analytics services
• Legal Compliance: Comply with legal obligations, resolve disputes, and enforce our agreements

4. How We Share Your Information

4.1 Information Shared on the Platform

Certain information is visible to other users based on your privacy settings:

• Public Profile: Your display name, avatar, bio, and general location are visible to all users
• Posts and Reactions: Posts, comments, and reactions (likes, emojis) are visible to members of groups where you share them
• Events: Public events are visible to all group members. Private events are only visible to the creator, attendees, and invited users
• Props (Praise): Props you give and receive are visible on user profiles
• Group Membership: Your membership in public groups is visible to other users

4.2 Service Providers

We share information with third-party service providers who assist in operating our Service:

• Supabase: Database hosting, authentication, and file storage
• Resend: Email delivery service for notifications
• Mapbox: Geocoding and map services
• Expo: Push notification delivery on mobile devices

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Requests from law enforcement or government authorities
• Protection of our legal rights or the safety of our users

4.4 Business Transfers

If Nice Play is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account
• Posts and Content: When you delete a post, it is marked as deleted but may be retained for audit and moderation purposes. Permanently deleted after 90 days
• Events: Event data is retained indefinitely for historical records unless you delete the event
• Notifications: Stored until you delete them or for up to 1 year
• Moderation Logs: Retained indefinitely for safety and compliance purposes

After account deletion, we will permanently delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

6. Your Privacy Rights and Choices

6.1 Access and Update

You can access and update your account information at any time through your profile settings in the app or website.

6.2 Delete Your Account

You can delete your account at any time through the app's profile settings (Profile tab → Delete Account button) or through the website profile settings. Upon deletion:

• All your personal data will be permanently removed within 90 days
• You can recover your account within 30 days by contacting support@niceplay.gg
• After 30 days, account deletion is irreversible

6.3 Notification Preferences

You can control which notifications you receive (push and email) through your notification settings. You can disable notifications for specific types of activity while keeping others enabled.

6.4 Location Permissions

You can control location access through your device settings. Disabling location will prevent the app from showing nearby venues and calculating distances, but will not affect your ability to create or join events.

6.5 Camera and Photo Permissions

You can revoke camera and photo library access through your device settings. This will prevent you from uploading new profile pictures or event photos but will not affect existing images.

6.6 Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format. Contact us at support@niceplay.gg to request your data.

6.7 Rights for European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at privacy@niceplay.gg.

6.8 Rights for California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of your personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Exercise your privacy rights without discriminatory treatment

To exercise these rights, contact us at privacy@niceplay.gg.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest (database encryption)
• Authentication: Secure authentication via Supabase Auth with industry-standard password hashing
• Access Controls: Row-level security (RLS) policies ensure users can only access data they're authorized to see
• Regular Security Audits: We regularly review and update our security practices
• Secure Infrastructure: Hosted on Supabase's secure cloud infrastructure with SOC 2 Type II compliance

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

8. Children's Privacy

Nice Play is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@niceplay.gg. We will take steps to delete such information from our systems.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer data, including personal information, to the United States and process it there. By using Nice Play, you consent to the transfer of your information to the United States.

For users in the European Economic Area (EEA), we ensure adequate protection of your data through standard contractual clauses approved by the European Commission.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Analytics and Tracking

Nice Play does not use third-party analytics services such as Google Analytics, Mixpanel, or Segment. We only collect internal analytics data stored in our own database for administrative purposes, including:

• Total and active user counts
• Number of events created and attended
• Props given and received
• Posts and interactions

This data is aggregated and used solely to understand platform usage and improve our Service. We do not track individual user behavior for advertising or marketing purposes.

12. Do Not Track Signals

We do not currently respond to "Do Not Track" (DNT) signals from web browsers because we do not engage in tracking for advertising purposes. Since we don't use third-party analytics or advertising services, DNT signals do not apply to our Service.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification for material changes
• Displaying an in-app notification

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

15. Export Compliance and Encryption

Nice Play uses standard encryption technology (HTTPS/TLS) to secure data transmission between your device and our servers. This is the same encryption technology used by banks and e-commerce websites.

We do not implement any proprietary or non-standard encryption. All encryption is provided by industry-standard protocols and our infrastructure providers (Supabase, Vercel).

Note for Apple App Store Review: Nice Play uses standard HTTPS encryption for network communications and does not implement any additional encryption algorithms. No Export Compliance documentation is required under U.S. law for this type of encryption use.