Privacy Policy
1. Who we are
Birge is an app for amateur games, together. It is built and run by a private individual, the owner of the Birge project ("we"). There is no company behind the project. The project is currently non-commercial; if that changes, we will update these documents and warn you in advance.
Contact us about anything concerning your data: team@playbirge.com.
By continuing to sign in to Birge (the "Continue with Google" and "Get code" buttons on the sign-in screen) you agree to this policy, including the transfer of part of your data outside the Republic of Kazakhstan (section 5). If you do not agree, please do not use the app.
2. What data we collect
Account and sign-in
- your email address: you enter it when you sign in with a code sent by email; when you sign in with Google, we receive the email of your Google account;
- when you sign in with Google, your Google account ID and the name from it; we only suggest that name as your profile name, and you can change it;
- sessions: the sign-in token is stored in our database only as a hash, together with the creation date and the date of last use;
- the code from the email is stored as a hash for 10 minutes, together with an attempt counter.
Sign in with Apple is not available in the app yet. If it appears, we will update this policy.
Profile
- your name (up to 30 characters), as you entered it;
- city and country;
- your level in a sport (beginner, amateur, advanced);
- the app language.
Games
- games you created or take part in, and your participation status (request, in the game, cancelled, etc.);
- match scores, places and results;
- the title, time, place, note and fee of a game you created;
- venues you added (name and address).
If an organizer adds you to a game as a guest, the organizer types your name and level. The organizer is responsible for having your consent. A guest without an account can ask us to remove their name by writing to us.
Notifications
- your device's push token (Firebase Cloud Messaging), the device platform (iPhone or Android) and the app language on it;
- the texts of the notifications we send you, and when they were sent.
Technical data
- IP address: to rate-limit requests (protection against code guessing and spam); it may also end up in the technical logs of the server and the hosting;
- technical error records.
Actions inside the app
The server records actions in games: joining and participant status changes, game status changes, every score change (with the old and new value), opening the "Share" sheet and opening a game link. We do not use third-party analytics or advertising services and do not embed advertising SDKs in the app. The app contains Google SDKs for sign-in and for notifications (Firebase); they send Google the technical device and app-installation identifiers they need to work.
We do not ask for or collect precise location, your phone contacts, photos, or payment data. The app does not take entry fees for games: that is an arrangement between players.
3. Why we use the data
- signing you in and protecting against abuse;
- showing games, rosters, matches and results to their participants;
- notifications about changes in games you take part in or organize;
- resolving score disputes using the change log;
- improving the product: we look at aggregate numbers (for example, how many games were played to the end) and do not build advertising profiles;
- complying with the law.
We do not sell data and we do not show ads.
4. What others see
- In games you created or joined, other participants see your name, level, participation status and score.
- An organizer sees the requests to join their game: the name and level of the people who applied.
- Open games are visible to other users in your city, together with the organizer's name.
- A game link page (playbirge.com/m/…) shows the game's title, time, venue and status. It shows no names of participants or of the organizer.
- A venue you added is visible only to you. If we make it shared, other users in your city will see its name and address.
- Other players do not see your email.
- Only we have full access to the data, for supporting and administering the service.
5. Who else processes data
We use services of other companies. Each receives only the part of the data it needs to work:
- Zoho Corporation (ZeptoMail) sends the sign-in code email; it receives your email address and the code. Its data center is in the United States.
- Google provides Google Sign-In and push notifications (Firebase Cloud Messaging). When you sign in, Google learns that you signed in to Birge. For notifications Google receives the device token and the notification text.
- Apple delivers push notifications to iPhones.
- Cloudflare provides DNS for the domain and the playbirge.com website; it sees the IP addresses of site visitors.
- A hosting provider in the Republic of Kazakhstan, where the server and database run (section 6).
- An error-monitoring service (Sentry): we may connect it to investigate errors; it would receive technical error data and a user ID, without names or emails.
Google, Apple, Zoho, Cloudflare and Sentry operate outside the Republic of Kazakhstan, including in the United States. This is a cross-border transfer of data. By agreeing to this policy, you consent to that transfer. We pass on only what the service needs to work.
6. Where and how long we keep data
- The server and database are hosted by a hosting provider in the Republic of Kazakhstan.
- Account data is kept while you use the account. We do not delete inactive accounts automatically.
- A session lasts 90 days after its last use and then stops working. When you sign out, the session and the device linked to it are deleted immediately.
- Database backups are kept for no longer than 14 days. Deleted data may remain in them until that period ends.
- Technical server logs are kept for a limited time: up to 30 days.
7. Deleting your account
You can delete your account yourself: "Profile" → "Delete account". Then:
- your name is replaced with "Игрок удалён" ("Deleted player");
- your email, sign-in methods, sessions, notification devices, levels and city are deleted;
- unsent notifications are deleted, and in already created "New request" texts your name is replaced with "Deleted player";
- your requests to join upcoming games are withdrawn and your sign-ups cancelled; a game you organize is cancelled with the note "The organizer deleted their account", or, if it is already in progress and at least one match has been played, finished with results;
- in past games an anonymized "Deleted player" row remains with its score and place, so that other players' tables and results do not break;
- records of actions in games remain, but point to the anonymized record.
The same email can later be used for a new account.
8. Your rights
You can:
- find out what data we hold about you and get a copy;
- correct data: name, city, level and language can be changed in the app's profile;
- delete data by deleting your account in the app;
- withdraw consent to data processing by deleting your account or by writing to us (Birge cannot be used without consent);
- complain about the processing of your data to the authority of the Republic of Kazakhstan responsible for personal data protection.
For this, write to team@playbirge.com. We will reply within the time limits set by law, and we will try to do so as quickly as we can.
9. Children
Birge is for people aged 16 and over. Users aged 16 to 18 may use Birge only with the consent of a parent or legal representative; by continuing to sign in, the user confirms that such consent exists. We do not automatically check age in the app. We do not knowingly collect data from anyone under 16.
If we learn that a user is under 16, or that a user aged 16 to 18 has no consent from a parent or legal representative, we will delete the account. A parent or legal representative can also ask us to do so by writing to team@playbirge.com.
10. Security
Sign-in tokens and codes are stored as hashes, the connection to the server is protected with HTTPS, and access to the database is restricted. No system is fully secure; if a breach affecting you occurs, we will tell you.
11. Changes to this policy
We may change this policy. We will announce significant changes in the app or by email in advance. The date and version are at the top of the page. If you keep using Birge after a change, you agree to it.
12. Contact
The owner of the Birge project, team@playbirge.com