Privacy Policy

1. Who we are

SportTek is a sports venue booking service for Pakistan (padel, futsal, cricket, and similar courts). This policy covers the SportTek mobile app, the venue owner panel, and the SportTek API.

OctaBit Logics (Lahore, Pakistan) operates SportTek as its technology partner. Payments, where live, are onboarded under OctaBit Logics. Contact: info@octabitlogics.com · +92 321 535 3105.

2. What we collect

We collect only what the product needs to create an account, hold a court, notify you, and settle payment. SportTek does not use email or passwords. Login is a phone number plus a one-time code.

• Phone number in +92 format — account identifier and WhatsApp delivery address (Feature Book F-01; Module 3).
• Name, and optional preferred sports, on first login.
• Approximate location, only if you grant it, so the venue list can sort nearest. If you refuse, we fall back to a default city area (Feature Book F-03).
• Bookings: venue, court, date, time, duration, price in paisa, payment method, and booking reference.
• Device push token, platform, and app version so we can send Firebase (FCM) notifications. Tokens are deleted on logout (Module 8).
• WhatsApp message ids and delivery errors for login codes and booking notices.
• Venue-owner data: venue WhatsApp, panel login, hours, prices, photos, and bank details when a venue takes deposits.
• Payment events from Safepay (when that gateway is live): amount, status, and reference — not full card numbers on our servers.

3. How we use it

We use this data to run SportTek, not to sell a marketing list.

• Send a WhatsApp one-time login code. The code is stored hashed, not in plaintext (Module 3).
• Create and manage bookings, including holds, deposits, cancellations, and no-shows.
• Send transactional WhatsApp and push messages: booking confirmed, reminder, cancellation, deposit result, and a morning summary to the venue (Module 8).
• Send deal alerts over push only. SportTek’s product rule is that deal alerts are not WhatsApp marketing (Module 16).
• Show venue owners their own bookings and player first name / phone so they can receive the player at the desk.
• Prevent abuse: OTP resend limits, lockouts, and session revocation.
• Keep the service up (backups, security, crash reports).

4. WhatsApp

WhatsApp is how SportTek delivers login codes and booking notices. Messages go through Meta’s WhatsApp Cloud API from SportTek’s business number.

A booking confirmation includes venue, court, date, time, price, and reference so you can show it at reception or forward it. That is intentional (Feature Book F-08 / Module 8).

Meta processes those messages under its WhatsApp Business terms. We do not use WhatsApp to blast deal marketing from the SportTek product.

5. Who else sees it

We do not sell personal data. We share it only as needed to run the service.

• The venue you booked — so staff know who is on the court.
• Meta (WhatsApp Cloud API) — to deliver login and booking messages.
• Google Firebase — push notifications and crash reporting.
• Safepay — card or wallet checkout when online payment is enabled, under OctaBit Logics.
• Cloud host and object storage used to run api.sporttek.pk and venue photos.
• A split-payment link shows venue, court, time, total, and first names only. It does not include phone numbers, user ids, or the booking reference (Module 19).
• Authorities if Pakistani law requires it.

6. How long we keep it

Account and booking records stay while you use SportTek and as long as we need them for disputes, refunds, and tax. OTP codes expire and are hashed. Push tokens are removed on logout. If you ask us to close an account, we delete or anonymise what we no longer need to keep.

7. Your choices

You can update your name and profile in the app, log out (which drops that device’s push token), or log out of all devices. You can turn off SportTek WhatsApp or push preferences where the app offers them, except messages we must send to complete a booking you already made.

To see, correct, or delete your data, email info@octabitlogics.com from a reachable number we can match to the account, or write to OctaBit Logics, Lahore, Pakistan.

8. Security

Access tokens can be revoked on the server. Venue staff only see their own venue. Money is stored as integer paisa. Times are stored in UTC and applied as Asia/Karachi for the booking day. We cannot promise that any internet service is perfectly secure.

9. Children

SportTek is for people who can make a booking. We do not knowingly create accounts for children. If you believe we have a child’s phone number, contact us and we will remove it.

10. Changes

If this policy changes in a material way, we will update this page and the date below. Continued use after that date means you accept the updated policy.