Legal

Privacy policy

Last updated: June 2025

1. Who we are

iBall is a Nigerian sports technology platform operated by iBall Technologies Ltd, registered in Lagos. References to "we", "us" and "our" mean iBall Technologies Ltd. For questions about this policy, contact privacy@iball.app.

2. Information we collect

Phone number — primary account identifier, verified via SMS OTP.
Name and optional profile photo.
Email (optional) — for receipts and account recovery.
City, neighbourhood and approximate location — populates your LOA feed and leaderboard tier.
Real-time GPS — only while you are checking in to a match, to verify on-field presence.
Payment information — tokenised by Paystack. iBall never stores raw card data.
Match data — bookings, attendance, scores, ELO updates, peer reviews.

3. How we use your information

To create and manage your iBall account.
To process bookings, splits, refunds and settlements.
To match you with public matches in your geo-radius.
To verify attendance and compute ELO rankings.
To send transactional and operational notifications (match invites, payment status, score updates).
To detect fraud, abuse and disputes; and to comply with Nigerian law.

4. Payments and Paystack

All card and bank transfer transactions are processed by Paystack. Card details are tokenised by Paystack and never touch iBall's servers. Each turf owner has their own Paystack subaccount; the pitch rate routes directly to that subaccount on booking confirmation.

5. Location data

We use your coarse location (city/area) to populate the LOA map. We use precise GPS only at the moment of match check-in, to verify you are within 200 metres of the facility. We do not track your location continuously.

6. Sharing your information

We share limited information with:

Other players in a match you join — name, profile photo, ELO and position.
Turf owners — booking confirmations, attendance, contact info for matches at their facility.
Marshals — rosters and check-in status for matches they officiate.
Paystack — for payments processing.
Service providers (hosting, SMS, analytics) under written data-processing terms.
Authorities, where required by Nigerian law.

7. Data retention

Account information is retained while your account is active and for up to 7 years after closure for tax and dispute resolution. You can request deletion earlier — see Section 9.

8. Security

Passwords (where set) are hashed with bcrypt at 12 rounds. JWTs expire after 30 days. All traffic uses TLS. We follow industry-standard practices but no system is perfectly secure — report any vulnerability to security@iball.app.

9. Your rights

You can request access to, correction of, or deletion of your data at any time by emailing privacy@iball.app. We will respond within 30 days.

10. Changes to this policy

We will notify you in-app of material changes at least 14 days before they take effect. Continued use of iBall after the effective date constitutes acceptance of the updated policy.