Masar Privacy Policy

Initial policy text for review. Review and complete operator and privacy contact details, effective date, and verified processing arrangements.

1. Who is responsible

This policy describes personal information handled through the Masar sports website and mobile application. Responsible operator: [INSERT LEGAL OPERATOR NAME AND ADDRESS]. Privacy contact: [INSERT PRIVACY CONTACT]. Effective date: [INSERT DATE].

2. Information we handle

Depending on your role and the features you use, information may include your name, phone number, email, account role, sports selections, profile photos, biography, date of birth, gender, nationality, location, physical measurements, sporting experience, performance information, professional qualifications, licences, organizational details, affiliations, and social links.

We also handle documents submitted for verification, uploaded images or other media, posts, community messages, reports, and support requests where those features are used. Authentication and service operation may involve installation identifiers, device labels, credentials, IP addresses, session information, and technical/security logs. Do not submit personal or health information that is unnecessary for your intended use.

3. Why information is used

Information is used to authenticate users, create and manage accounts and sports profiles, display permitted content, review qualifications and affiliations, support community and event features, respond to requests, investigate abuse, and maintain service security. Where required by applicable law, the operator must identify and communicate the appropriate legal basis for each purpose, including any additional basis required for sensitive information.

4. Public profiles and private submissions

Information you place in public profiles, galleries, news, or community spaces may be visible to other users or website visitors according to the feature's visibility rules. Avoid putting identity documents or confidential details in public areas. Verification submissions are intended for authorized review rather than public profile display; review the feature's instructions before uploading.

5. Who may receive information

Information may be accessed by authorized administrators, recipients of content you share, and service providers needed for hosting, authentication, message delivery, storage, and support. It may also be disclosed where legally required or necessary to protect users and investigate misuse, subject to applicable safeguards. Before publication, the operator must verify and disclose any additional recipients, purposes, or transfer arrangements that apply.

6. Service messages and optional marketing

Verification codes and necessary account/service notices are distinct from promotional SMS, WhatsApp messages, or calls. Marketing choices must be respected separately from legal acceptance. Change promotional preferences through available settings or support; opting out of marketing does not prevent necessary authentication or service messages.

7. Storage, security, and retention

Access controls and other appropriate safeguards are used to protect information, but no online service can guarantee absolute security. Information should be retained only as necessary for the stated purposes and applicable obligations, then deleted or de-identified as appropriate. Before publication, the operator must confirm the actual retention schedule, backup handling, processing locations, and safeguards for any international transfers. This draft does not promise a specific deletion period or hosting country.

8. Your choices and requests

You can update information using available profile controls and contact the privacy contact to request access, correction, deletion, account closure, or other rights available under applicable law. Requests may require identity verification. Some information may need to be retained for legal or security reasons; applicable limits should be explained when responding. Removing content from Masar may not remove copies independently retained by other users.

9. Children and sensitive information

Users who cannot independently consent under applicable law require the appropriate parent or guardian involvement. Do not upload a child's information without authority. Health-related details and identity or qualification documents require particular care; collect and disclose only what is needed and authorized. Contact the privacy contact with concerns about a child's information or an unauthorized submission.

10. Local storage, third parties, and updates

The clients may store authentication credentials, installation identifiers, and preferences on your device or browser to support sign-in and service operation. External links and independent third-party services have their own privacy practices. Any additional analytics or tracking tools must be assessed and disclosed before use, with consent where required. Material policy changes should be communicated appropriately. For questions or complaints, contact [INSERT PRIVACY CONTACT]; you may also exercise any right to complain to the competent authority under applicable law.