Privacy policy
Last updated: 12 September 2026
In short
- We collect only what the service needs: your name, phone number and your bookings.
- Your card details never reach us.
- We don't sell your data and we don't hand it to anyone for advertising.
- A venue owner sees only your booking — name, phone, hour.
- You can delete your account yourself, from the app.
What we collect
- Name, phone number, email if you add one. For your account. The password isn't stored in readable form — it is hashed, so not even we can read it.
- Your bookings: which pitch, which hour, how much, payment method, status, number of players.
- Payment outcome: amount, date, success or failure. Your card number, expiry date and CVV are never sent to us.
- Approximate location — only when you open the map or “nearby”, and only if you allow it. We don't keep location history. If you decline, you search by district and everything still works.
- Notification identifier — so a booking confirmation can reach your phone.
- Technical logs — IP and request time. They exist to stop abuse and are deleted shortly after.
Why we use it
Only for these:
- Creating, confirming and showing you your booking.
- Taking payment and issuing a refund when needed.
- Delivering notifications about your booking.
- Answering the messages you send us.
- Preventing fake bookings.
We don't build advertising profiles, we don't target you with ads based on your behaviour, and we don't sell your data to anyone.
Who sees it
- The venue owner — your name, phone number, the booked hour and the amount, so they can receive you. They cannot see your bookings at other venues.
- Epoint — transaction details during online payment. They collect and process the card details directly.
- The notification service — your device token, so push notifications can reach you.
- An authority — only on a lawful official request.
How long we keep it
- Account details — for as long as your account exists.
- Booking and payment records — for a period after the transaction, for accounting and disputes.
- Technical logs — briefly, then deleted automatically.
Deleting your account
In the app: Profile → delete account. No email exchange, no support ticket, no waiting period.
Deletion removes your account and your contact details. Financial records for completed payments may remain for the period the law requires, in a form that does not identify you — that is an accounting requirement, not your profile.
If you need help with it: info@mtap.az
Your rights
- Ask what we hold about you.
- Ask for wrong details to be corrected — name and email you can change in the app anyway.
- Ask for your account and data to be deleted.
- Withdraw notification and location permission at any time in your phone settings.
Security
All traffic between the app and the server runs over an encrypted connection (HTTPS) and passwords are stored hashed. That said, no system on the internet is perfectly secure — if you notice something suspicious, tell us and we will take it seriously.
Children
The service is not intended for anyone under 16. If we learn that we hold data belonging to someone under 16, we delete the account and the data.
Changes
This text may be updated. The new version goes on this page, the date above changes, and significant changes are announced inside the app.
Contact
Anything privacy-related: info@mtap.az