Privacy Policy

Account information: your name, username, email address, phone number, password, and profile picture.

Booking and academy data: reservations you make, the stadiums and turfs you interact with, and — if you use academy features — guardian and participant records linked to your account.

Payment records: transaction history and amounts processed through the payment method configured by the stadium or platform. We do not store your card details ourselves; these are handled by our payment processor.

Verification data: one-time codes (OTP) sent to confirm your email or phone. Codes are stored only briefly, in hashed form, and expire automatically.

Device and notification data: push-notification tokens and device type, used to deliver booking updates and alerts.

Location data: the city and address of stadiums you search for or book — we do not track your device's live location.

Usage data: standard technical logs (IP address, browser/app version, timestamps) used for security and troubleshooting.

To create and secure your account, process bookings, and facilitate payments between you and stadium owners.

To send transactional communications: booking confirmations, verification codes, and service updates.

To send marketing or promotional emails only if you have opted in (you can turn this off anytime in your profile settings).

To maintain the security of the platform, prevent fraud, and comply with legal obligations.

Stadium owners and their staff can see the booking, academy, and contact information relevant to reservations made at their stadium — this is necessary to deliver the service.

Payment processors, to complete transactions on our behalf.

Infrastructure and hosting providers who store data on our behalf, under contractual confidentiality obligations.

We do not sell your personal data to third parties.

Where a sports academy manages participants who are minors, the participant's data is linked to and managed by their guardian's account. Guardians are responsible for the accuracy of the information they provide about participants in their care.

We retain your account data for as long as your account is active.

You can delete your account at any time from within the app (Profile → Delete Account) for both business and consumer accounts. When you do, we immediately revoke your access, remove your linked devices and connected accounts, and anonymize your personal information (name, email, username, phone). Some transaction records may be retained in a de-identified form where required for accounting or legal compliance.

You may access and update most of your information directly from your profile.

You may request deletion of your account at any time, as described above.

You may opt out of marketing emails at any time via your notification preferences.

To exercise any other data-protection right, contact us at hello@shoot.tn.

Passwords and verification codes are stored using one-way hashing, never in plain text. Data is transmitted over encrypted connections. Access to production data is restricted to authorized personnel.

The Shoot dashboard uses a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

Questions about this policy or your data can be sent to hello@shoot.tn.