This Privacy Policy explains what information the Renala Indoor Sports & Cafe app ("RISC", "the app", "we", "us") collects, why we collect it, who we share it with, and the choices you have. The app is published by DevSquare for Renala Indoor Sports & Cafe, Renala Khurd, Okara, Punjab, Pakistan.
By creating an account or using the app, you agree to this policy.
| Data | Why we need it |
|---|---|
| Mobile phone number | This is your login. We verify it with a one-time SMS code (OTP) and use it to identify your bookings and to contact you about them. |
| Name | Shown on your booking so staff at the arena know whose slot it is. |
| Email address (optional) | Only if you choose to provide it, for booking correspondence. |
| Payment receipt screenshot | You upload a screenshot of your bank/mobile-wallet transfer so an admin can verify your advance payment. We also store a cryptographic fingerprint (hash) of the image so the same receipt cannot be submitted twice. |
| Reviews and ratings | Displayed in the app if you choose to leave one. |
| Support messages | Messages you send to arena staff through in-app chat. |
| Data | Why we need it |
|---|---|
| Booking records | Date, time slot, court, amount paid, amount outstanding, booking status, and any coupon applied. |
| Push notification token (FCM) | A device token issued by Firebase Cloud Messaging so we can send you booking confirmations, payment confirmations, match reminders and schedule changes. |
| Basic device information | Device model, operating system version and app version, reported by Firebase so we can support and debug the app. |
| Permission | Used for |
|---|---|
| Internet / network access | Required to load bookings and talk to our servers. |
Notifications (Android 13+ POST_NOTIFICATIONS) | Booking, payment and match-reminder alerts. You may decline; the app still works. |
| Camera | Only when you tap to capture a payment receipt. |
| Photos / media | Only when you tap to pick an existing receipt screenshot. We access only the file you select. |
| Vibrate | Notification feedback. |
Run at startup (RECEIVE_BOOT_COMPLETED) | Restores scheduled local reminders after the phone restarts. |
We do not use your data for automated decision-making that produces legal effects, and we do not use it for advertising.
The app runs on Google Firebase. Your data is stored and processed by the following Google services under Google's own security and privacy terms:
See Google's privacy policy at policies.google.com/privacy. Data may be stored on Google servers outside Pakistan. Apart from these providers, we do not share your personal data with anyone, except where we are legally required to do so, or where it is necessary to establish or defend a legal claim.
Traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Access to booking and payment data is restricted by Firebase Security Rules and by server-side Cloud Functions, so a user can read and write only their own records; administrative access is limited to authorised arena staff accounts. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.
To request deletion of your account and associated personal data, email devsquare900@gmail.com from the address you registered with, or send us your registered mobile number. We will verify the request and delete your profile, receipts, reviews and messages within 30 days. Booking and payment records required for accounting are retained in anonymised or legally-required form.
The app is intended for people aged 13 and above and is not directed at children under 13. Minors should book through a parent or guardian. If you believe a child under 13 has given us personal data, contact us and we will delete it.
We may update this policy. The "Last updated" date at the top will change, and material changes will be announced in the app. Continued use after an update means you accept the revised policy.