Privacy Policy

1What we collect

• Account details: the e-mail address you sign in with (we only send a one-time code - there is no password), plus the nickname, profile picture, short bio and city you choose. If you sign in with LINE, Apple or Google we receive only the account identifier they give us (and the e-mail and name, where they provide them). We never see your password with them.
• What you create around sessions: the sessions you host or join (time, venue, capacity, level, fee notes), sign-ups and check-ins, court draws, scores and match reports, post-match ratings, and in-app messages.
• Settlement and ledger entries: who owes what for each session and whether it has been paid, waiver and who-fronted-it markers, use of passes and dues, and the income and spending lines in a club ledger.
• Photos you choose to upload: camera and photo library are used in exactly three places - setting a profile picture, submitting certificates for verification, and uploading your own payment QR code. We do not ask for those permissions anywhere else.
• Push identifier: after you accept this policy, the app obtains your device's push identifier (Push ClientID) along with device model and OS version. Nothing is obtained before you accept.
• Logs: IP address, timestamp and request records, used for security and troubleshooting.

We do not collect: your location, contacts, microphone, health or fitness data, advertising identifiers (IDFA / GAID), or any payment account, card number or balance.

⚠️ About location: the app can show you where a venue is on a map. That works by handing the venue's coordinates to the map app on your phone - it does not read where you are. There is no feature anywhere in Waball that obtains your location.

2How we use it

• Showing sessions to people who might join, and sharing sign-ups, check-ins, draws and scores with the people in that session.
• Sending the sign-in code by e-mail.
• Calculating how a fee is split, and producing settlement sheets and club ledgers.
• Working out your level from match results, your credit score from attendance and settling up, and your points from taking part.
• Human review of certificates you submit, to decide whether to show the corresponding badge.
• Handling reports and disputes: checking session and settlement records, and where necessary reading the reported conversation.
• Security and abuse prevention: sign-in rate limits, detecting unusual requests.

We do not sell your information, do not use it for advertising or profiling, and do not use your data to train any AI model.

3What other users can see (the section that matters most)

Waball is something several people use together, and most of what you create is visible to the others in that session. Please keep this in mind before you post:

• Sessions: title, time, venue, capacity, level and fee notes. Set to "public" they are visible to every signed-in user; set to "club only" they are visible to that club's members. Do not put a street number, phone number, passport number or residence card number in the description or in a photo - send those in a direct message instead.
• Your public profile: nickname, picture, bio, city, your level in each sport, credit score, match history and win rate, and whether you are verified (the status only - never the document itself).
• Visible to people in the same session: your sign-up and check-in status, which group you were drawn into, the score and report of every game you played, and post-match ratings.
• The settlement sheet: who owes what and whether it is paid, visible to everyone in that session. This is one of the reasons this product exists - the money should be in plain sight.
• A payment QR code you upload: visible to people in that session who need to pay you. ⚠️ It is an image; we do not read, recognise or store any payment account inside it.
• Club ledger: open to every member of the club by default, including dues, passes and monthly income and spending. That default is deliberate: the single most common reason an amateur club breaks up is that nobody can see where the money went. Admins can narrow the visibility.
• In-app messages: visible only to the people in that conversation (or the session's group chat). Our staff may read a conversation when handling a report, and every such access is logged.

Not shown to other users: your e-mail address, the certificates you submit for verification (only our reviewers see those), and your device information and logs.

4About money: we never handle funds

This has its own section because it determines a whole category of data we do not collect.

• Waball provides no payment function. There are no in-app purchases.
• Session fees, club dues and passes are settled entirely in person - in cash, or with whatever payment app you already use.
• We record only the fact of who owes what and whether it was paid. We do not hold, transfer or process any funds.
• As a result we neither collect nor store bank accounts, card numbers, payment-platform accounts or balances. A payment QR code you upload is, to us, an image and nothing more.

⚠️ If anything claiming to be Waball asks you to enter a bank account number or a payment password, it is not us. Stop, and contact support@wamate.net.

5Third-party services

We share your personal information with no one else, except where the law requires it or where it is necessary to protect someone's life, physical safety or property.

6Where it is kept, and for how long

• Servers and data are located in Tokyo, Japan.
• While your account exists, your profile and content are kept.
• After you delete your account: e-mail address, external sign-in links, sign-in tokens, profile picture, bio, push identifier and notification preferences are erased immediately. The sessions you took part in, scores, settlement sheets and ledger lines are kept, but your nickname shows as "Deleted user" and those records no longer point to you. We keep them because they also belong to the other people in that session; removing them outright would leave unexplained gaps in someone else's match record and accounts.
• Security and operational logs are kept for 12 months.
• Copies on backup media are overwritten by rotation within 30 days at most.

The full list of what is deleted, what is kept, and how to do it yourself is at Delete your account and data.

7Your rights, minors, and changes

• Access and correction: profile fields can be changed at any time under My page > Edit profile.
• Deletion: you can delete your own account at any time under My page > Settings > Delete account. It takes effect immediately with no human review. You can also request it by e-mail - see Delete your account and data.
• Withdrawing consent: you can turn off camera, photos and notifications in your system settings. Those features then stop working; nothing else is affected.
• Complaints: if you disagree with how we handle your personal information, contact support@wamate.net.

Minors: this service is intended for adults. If you are under 18, please use it with the consent and guidance of a parent or guardian. We do not knowingly collect personal information from minors; if we find an account belongs to a minor without guardian consent, we delete the associated information.

If this policy changes we will update the date at the top of this page. For significant changes to what we collect or why, we will also say so in the app. Questions: support@wamate.net.