Privacy Policy
Maidan is the futsal home for Afghanistan. This policy explains, in plain language, what information the app collects, why, who we share it with, and the controls you have over it. We try to collect only what the app needs to work.
01Who we are
“Maidan,” “we,” “us,” and “our” refer to the team operating the Maidan mobile application and the website at maidan-app.com. If you have a question about this policy or about your data, email info@maidan-app.com.
02How you sign in
You create a Maidan account with your phone number. To confirm the number is yours, we send a one-time code to it over WhatsApp, which you enter once during sign-up. After that, you log in with your phone number and a password you set. If you forget your password, the reset code is also sent over WhatsApp.
Email is optional. You can add an email address to your profile as a contact detail, but it is not used to sign in.
03What we collect
We collect the information you give us to set up and use your account:
- Account details. Your phone number, full name, city, and playing position.
- Optional profile details. Email address, date of birth, profile photo, short bio, height, and weight — only if you choose to add them.
- Teams. The teams you create, join, or captain, and your role on each.
- Match and stats data. Results of matches you play or score — goals, cards, and other events — and the player and team statistics built from them.
- Bookings. The courts you request, their dates and times, and their status.
- Venue owners. If you list a venue: its name, address, phone number, opening hours, prices and photos, and the verification documents you upload so we can confirm the venue is yours — for example a business licence and a national ID card or passport. Verification documents are private: only you and the Maidan team reviewing them can open them.
- Device and notification data. A push notification token for your phone, its platform (iOS or Android), and the app language, so we can deliver notifications in your language.
- Support messages. If you contact us, we keep your message so we can reply.
We do not collect precise GPS location, payment-card numbers, or biometric data, and we do not read your contacts or messages. The app opens your photo library only when you pick a photo to upload, and saves an image to it only when you choose to save a share card. Apart from the identity document a venue owner chooses to upload for verification, we do not collect government identity numbers.
04How we use your information
We use the information above to:
- Create your account, verify your phone number, and keep you signed in.
- Run the core product — teams and rosters, matchmaking and challenges between teams, court discovery and booking, live scoring, and player and team statistics.
- Show your profile and stats to other players according to your privacy settings (see below).
- Send you notifications about challenges, invites, and bookings.
- Diagnose crashes and fix bugs so the app stays reliable.
We do not sell your information, and we do not use it for third-party advertising.
05Your privacy controls
Maidan is a social app, so some of your profile is visible to other players by default. You control how much, and our servers enforce your choices — not just the app’s screens:
- Profile visibility. Choose who can see your profile — anyone on Maidan, only your teammates, or only you.
- Per-field toggles. Separately choose whether to show your phone number, your date of birth, and your match stats on your profile.
Your email address is never shown to other players, and your phone number and date of birth are shown only when you switch them on and your profile visibility allows the viewer. Someone who already knows your full phone number can find your name to invite you to a team, but your number is never displayed to them. Your password is never shown to anyone. You can change these settings at any time in the app.
06Photos and documents
Profile photos, team logos, venue photos and venue verification documents are uploaded by you and stored in our file storage (Supabase). Profile photos, team logos and venue photos are public so they can be shown in the app; verification documents are not. When you delete your account, your profile photo and the photos and documents of the venues you own are deleted from storage.
07Service providers we rely on
To run Maidan we use a small number of infrastructure providers. They process data on our behalf, only for the purposes below:
- Supabase — hosts our database, handles account authentication, and stores uploaded photos.
- Twilio — delivers the WhatsApp verification and password-reset codes to your phone number.
- Firebase (Google) — delivers push notifications and receives crash reports from the app.
These providers operate on global cloud infrastructure, which may store and process data in countries other than your own.
08Deleting your account
You can delete your account at any time from inside the app, under Settings → Delete Account. If you can’t use the app, you can ask us to delete it instead — see maidan-app.com/delete-account.
Deleting your account removes your profile, photos, team memberships, bookings, notifications, statistics, device tokens, and any venues you own together with their photos and documents. The results of matches you played stay part of the other teams’ history, but the goals, cards and other events you were part of are no longer linked to you. If you captain a team, hand the captaincy to a teammate first. We may keep limited records where the law requires it.
09How long we keep it
We keep your account and profile data for as long as your account is active. When you delete your account, we delete your account data straight away, subject to the narrow exceptions described above. Deletion requests sent to us by email are completed within 30 days. Crash reports are kept by Firebase for up to 90 days.
10Security
We protect your information with standard safeguards, including encryption in transit (TLS) and scoped access to our database. No system is perfectly secure, but we work to keep your data safe and will act promptly if we ever become aware of a problem that affects it.
11Children
Maidan is not directed at children under 13. If we learn that we have collected information from a child under 13 without a parent’s consent, we will delete it.
12Changes to this policy
We may update this policy as the app evolves. When we make a material change, we will revise the “Last updated” date above. Continuing to use Maidan after a change means you accept the revised policy.
13Contact us
Questions about your privacy? Reach us at info@maidan-app.com.