Privacy Policy
1. Introduction
MADD – Badminton ("MADD", "we", "us") is an app for organizing badminton sessions: managing players, queues, courts, cost-sharing, payments and feedback within a group. Session data is stored in the cloud and kept in sync for everyone taking part. This policy explains what information we collect, how we use and store it, and how we protect it. It applies to the MADD apps for iOS and Android and to madd-badminton.com.
2. Who we are
MADD is operated by an individual developer, Isariya Kijdarapong, based in Thailand — not a company. You can reach us at isariya.p@st.econ.tu.ac.th.
3. Information we collect
3.1 Account information
You can scan a room's QR code and join as a guest without registering. In that case we create an anonymous account and the nickname you enter is used only inside that room. If you register, we collect:
- Display name (nickname) and MADD ID
- Email address and date of birth
- Full name and phone number (optional)
- Profile photo (optional)
Passwords are handled only by Firebase Authentication. We never see or store your password.
3.2 Session and activity data
Player lists, queues, court assignments, game counts, rankings and timestamps created while you use a room.
3.3 Payment information between users
Organizers may upload a payment QR code so players can pay their share. Players may upload images of bank-transfer slips, which can contain account names, partial account numbers and transaction details. These images are visible to the organizer of the room. MADD does not process, receive or hold these payments.
3.4 User-generated content
Reviews, ratings and messages you send. Messages are visible only to their recipients and are deleted automatically when storage limits are exceeded.
3.5 Notifications
A device token from Firebase Cloud Messaging, used to send you push notifications.
3.6 In-app purchases
Subscriptions and one-time purchases are processed by Apple (App Store) or Google (Google Play). We receive and store a record of your purchase and plan status, but never your card number or other payment details.
3.7 Analytics
Firebase Analytics collects usage events, device type and approximate region so we can understand how the app is used and improve it.
3.8 Camera and photo library
The camera is used only to scan QR codes. The photo library is used when you choose a profile photo, scan a QR code from an image, save a QR poster, or share a transfer slip. We do not access your photos in the background.
3.9 Account recovery on Android
On Android, a small recovery token may be stored with Google Block Store so your account can be restored after you reinstall the app on the same Google account.
4. How we use information
- To create and manage your account
- To run sessions: players, queues, courts and rankings
- To calculate cost-sharing and let organizers verify payments
- To deliver messages and push notifications
- To provide paid features and manage your plan and quota
- To analyze usage and improve the app
- To keep the service safe and enforce our Terms of Service
5. How information is shared
We do not sell your personal information and we do not use it for cross-app advertising or tracking. We share information only:
- With people in your session — your nickname, profile photo, game data and, where relevant, payment slips are visible to the organizer and/or other participants of rooms you join.
- With service providers — Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics, App Check), which stores and processes data on our behalf.
- With Apple and Google — to process purchases through the App Store and Google Play, and (on Android) for Block Store account recovery.
- When required by law — if we must comply with a legal obligation or protect the rights and safety of users or others.
6. User-generated content, reporting and blocking
You can report abusive or inappropriate content in the app. Reporting temporarily blocks the sender and removes the content from your view. We review reports and may remove content or restrict accounts that break our Terms.
7. Data retention and deletion
We keep your information for as long as your account is active. You can delete your account at any time from the Profile menu in the app. Deleting your account removes the personal data linked to it, except records we must keep to meet legal obligations. Data you contributed to other people's sessions (for example, game history) may remain in those sessions without your personal details. You can also ask us to delete your data by emailing us.
8. Children
MADD is intended for users aged 13 and over and is not directed at children. If you are under the age of majority where you live, you should use MADD only with the consent of a parent or guardian. If you believe a child under 13 has given us personal information, please contact us and we will delete it.
9. Security
We use Firebase Authentication, Firebase App Check and encrypted (HTTPS) connections to protect your information. No method of storage or transmission is completely secure, but we work to protect your data using reasonable measures.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. These rights include those under Thailand's Personal Data Protection Act (PDPA) and, for users in the EEA or UK, the GDPR and UK GDPR. You can edit most information in the app or contact us to exercise any of these rights. You may also lodge a complaint with your local data protection authority.
11. International users
MADD is available in multiple countries. Your data is stored on Google Firebase infrastructure and may be processed in countries other than your own, which may have different data protection laws. We rely on Google's safeguards for such transfers.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, let you know in the app. Continuing to use MADD after an update means you accept the revised policy.
13. Contact
Isariya Kijdarapong
Email: isariya.p@st.econ.tu.ac.th