2. Privacy Policy

Published legal document
Publication status: published
Version: 1.1-beta.1
Effective date: August 23, 2026

This Privacy Policy explains how Interwebx LLC, a Florida limited liability company and operator of PlayGoOn (“PlayGoOn,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use PlayGoOn websites, mobile applications, and related services.

This Policy becomes effective on the publication date shown above. Acknowledgment confirms only that this Policy was presented and does not constitute blanket consent to optional data processing. Any optional data-processing consent requires a separate, explicit action. This Policy describes processing that occurs when a user chooses to use the corresponding PlayGoOn feature. If actual practices change, PlayGoOn will update product disclosures or this Policy as appropriate before the changed processing begins.

1. Scope

This Policy applies to services controlled by Interwebx LLC under the PlayGoOn brand. It does not govern independent Clubs, Trainers, booking systems, external payment providers, social networks, or other third parties when they act under their own privacy policies.

Early Access is for adults age 18 and older. Minor accounts and youth participation are not supported. When a user enters a date of birth for an age-restricted feature, PlayGoOn processes it in a restricted compliance record and calculates eligibility server-side. Date of birth is not placed in a public profile or Trainer application.

2. Information we collect

Information currently associated with the Service

• Account and contact data: name, display name, email, phone number, Firebase Authentication identifiers and authentication records, city, state, language, and communication preferences.
• Profile and availability data: photo or avatar, biography, sports, skill levels, experience, availability, preferred locations, service area, booking links, and court, slot, or precise coordinates associated with availability when a feature stores them.
• Activity data: games, groups, tournaments, invitations, attendance, waitlists, results, favorites, and activity preferences.
• Communications and content: messages, comments, reports, reviews, support requests, images, descriptions, and other content submitted through the Service.
• Club and Trainer information: when you use the corresponding features, PlayGoOn processes Club listings, locations, courts, sports, booking links, memberships, invitations, roles, and member-visible Trainer or coaching profile information according to product and access rules.

Feature-specific information

• Age-eligibility data: when required for an age-restricted feature, date of birth is processed server-side to determine adult eligibility and is stored separately from public profiles and Trainer applications.
• Trainer application data: when you apply as a Trainer, we collect legal and display names, verified account email, optional contact details, business information, biography, experience, sports, skill levels, services, pricing, availability, languages, training locations, booking information, application status, and applicant-visible review communications.
• Qualification and certification data: we collect qualification names, issuing organizations, credential identifiers, issue and expiration dates, declarations, supporting evidence, and review status. A public Trainer profile contains only approved, non-sensitive display information; it does not contain document files or private credential identifiers.
• Qualification evidence: every Trainer applicant must provide at least one qualification document for review. Formal certification is optional, but an applicant who declares a certification must provide evidence supporting that claim. During the initial beta, PlayGoOn does not request or collect government-issued identity documents, selfies, liveness data, or biometric templates as part of Trainer onboarding.
• Club application data: Club creation remains limited to invited or approved Founding Clubs. The website Club application preview does not submit information. If server-controlled onboarding is enabled, application data may include Club name and type, address, website, representative details, sports, courts, surfaces, indoor or outdoor status, hours, booking links, descriptions, logos, authority or ownership verification, memberships, invitations, and roles.
• Legal acceptance and Privacy Policy acknowledgment records: when a legal action is required, PlayGoOn retains a separate server-controlled record for each accepted document and the acknowledged Privacy Policy, including account ID, role or context, application ID and revision when applicable, document ID and version, effective date, content hash and archive reference, server timestamp, explicit action, application version, and status information needed to preserve the record’s legal history.
• Payment data: PlayGoOn does not currently process activity, Club, or Trainer payments and does not currently collect payment-card data. If integrated payments are introduced, this Policy and the applicable terms must be updated before collection.

Information collected automatically

• Device and technical data: device type, operating system, application version, browser, language, time zone, network information, update-request information, and operational diagnostics generated by enabled services.
• Operational activity data: timestamps, feature-created records, notification-delivery records, diagnostics produced by services you use, and other information needed to operate requested features.
• Security data: login attempts, authentication events, suspected abuse signals, reports, moderation actions, and audit records.
• Location data: approximate location derived from an address, IP address, selected area, Google Maps or Google Places result; and precise device or court coordinates when a feature requires them and you grant any required device permission. Availability and slot records may store precise coordinates.
• Push-notification data: Expo push tokens, notification preferences, message metadata, and delivery responses used to route notifications through Expo’s push service.
• Local device data: authentication or session state, onboarding or preference state, and other limited information stored on the device through AsyncStorage.
• Cookies and similar technologies: website session, preference, and security technologies. PlayGoOn does not use advertising technologies. If PlayGoOn uses a disclosed site-measurement service, the corresponding website notice and controls describe that processing.

Information from other sources

We may receive authentication and profile information from Google Sign-In, Sign in with Apple, and Firebase Authentication; place, address, map, and coordinate information from Google Maps and Google Places; push-delivery information from Expo; and information from Clubs, Trainers, users who invite or report you, and public sources.

Current platform providers and processing

• Google and Firebase: Firebase Authentication supports email, Google, and Apple sign-in flows; Cloud Firestore stores account, profile, availability, activity, message, Club, membership, moderation, notification-token, and related application data; Firebase Storage stores avatars and other media; and Cloud Functions performs server-side operations. Google Maps and Google Places process map, search, address, and coordinate requests.
• Expo: Expo Updates and EAS support app builds and updates. Expo Notifications and Expo’s push service process push tokens and notification-delivery requests.
• Device storage: AsyncStorage stores limited application state on the user’s device. Operating-system location controls govern device-location permission.
• Website services: Cloudflare provides website hosting, security, Turnstile, and Pages Functions. Resend processes delivery of messages submitted through the website contact form.

Firebase/Google, Expo, Apple, Cloudflare, and Resend may process the categories of information described above under their applicable service terms and privacy documentation when their respective features are used. If a material provider or data flow changes, PlayGoOn will update the applicable notice before the changed processing begins when required.

3. Qualification evidence review

When a Trainer applicant submits qualification evidence, the files are uploaded to private, access-controlled storage. PlayGoOn checks that an upload belongs to the authenticated applicant and the applicable application before it may be used in a review. Technical upload requirements are presented in the upload interface.

Qualification files are screened for malware before they are made available for ordinary application review. Files identified as unsafe or unsuitable for review may be rejected or isolated from ordinary reviewer access while PlayGoOn investigates and addresses the security issue.

Access to private application information and qualification evidence is limited to specifically authorized PlayGoOn personnel or contractors who need it for application review, security, support, or legal compliance. Those reviewers must be subject to confidentiality obligations and least-privilege access requirements. Approval is controlled by PlayGoOn; an upload, certification declaration, or automated screening result does not grant Trainer capabilities.

4. How we use information

We may use personal information to:

• provide accounts, profiles, discovery, games, groups, tournaments, messaging, maps, and available Club and Trainer features;
• personalize recommendations and show relevant nearby activities;
• communicate through in-app and push notifications about service, security, invitations, reminders, and support;
• detect fraud, abuse, safety risks, policy violations, and technical problems;
• investigate reports, enforce agreements, and protect users, PlayGoOn, and the public;
• operate, troubleshoot, secure, and improve the Service using operational data;
• comply with law, legal process, accounting, insurance, and recordkeeping duties; and
• create aggregated or deidentified information that is not reasonably linkable to an individual.

We use age-eligibility, application, qualification, verification, and legal-interaction information only when a user enters the corresponding controlled onboarding flow. PlayGoOn payment processing is not part of this Trainer application workflow.

5. How we disclose information

We may disclose information:

• To signed-in users, participants, and the public: signed-in users may read member-visible profile information, avatars, availability, and other information permitted by the Service’s access controls. Public content and public Club or activity information may be visible without the same membership relationship and may be viewed, copied, or shared by others.
• To activity participants and administrators: for invitations, rosters, attendance, safety, coordination, and enforcement.
• To Clubs, Trainers, and organizers: when you request, join, or interact with their services, subject to appropriate notice and controls.
• To authorized application reviewers: private Trainer application information and qualification evidence when specifically authorized personnel or contractors need it to make, support, or assess a review decision, subject to confidentiality and least-privilege requirements.
• To service providers: Firebase/Google for authentication, Firestore, Storage, Cloud Functions, Google Maps, Google Places, and Google sign-in; Apple for Apple sign-in; Expo for builds, updates, push tokens, and notification delivery; and Cloudflare and Resend for the website and its contact form.
• For legal and safety reasons: when reasonably necessary to comply with law, respond to lawful process, protect rights or safety, investigate fraud or abuse, or enforce agreements.
• In a business transaction: during a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.
• At your direction or with consent.

PlayGoOn does not sell personal information for money and does not authorize cross-context behavioral advertising or targeted advertising. Product disclosures identify analytics, diagnostics, email, or measurement providers when those services process personal information.

6. Public and shared information

Signed-in users may be able to read profile information, avatars, availability, games, groups, memberships, and other member-visible information according to the Service’s access controls. Public profile, Trainer, Club, game, or group information may be visible more broadly. Private or limited-visibility settings reduce exposure but cannot guarantee that authorized recipients will not copy or disclose content.

Some stored Club media may be readable by a broader set of authenticated users than Club members. PlayGoOn does not describe that media as member-only unless the applicable access controls limit it to Club members.

Avoid posting home addresses, government-issued identification, medical information, financial information, or other sensitive data in public profiles, messages, games, or groups. PlayGoOn does not request government-issued identification for the initial Trainer beta.

7. Location choices

You can control device-location permission through operating-system settings. Some discovery, availability, court, slot, or map features may not work without it. Google Maps and Google Places may receive search text, addresses, map positions, coordinates, IP address, and related technical information when those services are used. PlayGoOn does not sell precise location data.

The Service may store a location a user types or selects, an approximate discovery location, a court or Club location, and precise coordinates attached to availability or slot records. Those coordinates may be shown to signed-in users when product access rules permit. PlayGoOn does not claim that exact location is never stored or shown.

8. Data retention

We retain information only as long as reasonably necessary for service delivery, account administration, safety, fraud prevention, legal compliance, disputes, and enforcement. Retention depends on the type of information, whether an account remains active, why the information was collected, legal requirements, sensitivity, security needs, backup cycles, and the need to establish, exercise, or defend legal claims.

Retention practices include:

• active account and profile data are retained while needed to provide the account;
• account deletion removes substantial account-linked data from active systems, but deletion may not be complete or immediate in backups, historical records, shared records, or every Club-membership record;
• shared messages, games, groups, tournament results, moderation records, and records needed for safety, fraud prevention, legal compliance, disputes, or enforcement may remain, be detached from the deleted account, or be anonymized where appropriate;
• copies may remain temporarily in backups until they are overwritten or deleted through normal backup cycles, and no fixed backup-deletion period is promised;
• legal-acceptance and Privacy Policy acknowledgment records are retained as needed to prove the applicable agreement or acknowledgment and comply with law;
• security, audit, report, and enforcement records are retained according to severity, repeat-abuse prevention, investigation, and legal needs;
• unconfirmed, abandoned, or failed uploads that have not completed security screening are scheduled for deletion after 2 days;
• quarantined or infected files are retained for incident investigation for no more than 30 days and are then scheduled for deletion independently of application holds;
• qualification evidence that has passed security screening may remain while an application is active and is scheduled for deletion 90 days after approval, rejection, withdrawal, or another final resolution;
• a verified account-deletion request applies to private qualification evidence, subject to the retention schedule, legal or security holds, normal backup cycles, and records that must be retained for legal, fraud-prevention, security, safety, or dispute purposes;
• a legal or security hold authorized by PlayGoOn may postpone deletion of qualification evidence that has passed security screening; and
• deidentified data may be retained when it cannot reasonably be linked back to a person.

PlayGoOn applies the specific verification-upload periods above together with purpose-based retention for other records. Backup deletion timing is not guaranteed. Historical legal interactions, security records, applicant-visible events, shared records, and records required for legal obligations may remain after account deletion. This Policy does not promise complete or immediate deletion from every backup or shared historical record.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including authentication and database and storage access controls. No system is completely secure. Authorization for database records and stored objects is enforced separately; a private Club label does not by itself make all associated media private.

Private qualification-evidence storage is access controlled and encrypted at rest using the storage provider’s default server-side encryption. Access to that evidence is limited to the applicant for authorized upload actions and to specifically authorized personnel or contractors for the purposes described in this Policy.

10. Your choices and rights

Depending on location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal information; withdraw consent; opt out of legally defined sale, sharing, targeted advertising, or profiling; limit certain uses of sensitive personal information; and appeal a denied request.

Submit privacy requests, appeals, and account-deletion requests to support@playgoon.com. Send the request from the email associated with the account when possible. We may verify identity and authority before acting. Authorized agents may submit requests where allowed. We will not discriminate for exercising applicable rights.

Account settings may allow you to edit profile information, manage visibility, control notifications, and request account deletion. Deletion is not a promise that shared, historical, backup, moderation, safety, or legally necessary records disappear immediately. Service communications may use in-app, push, or email delivery as disclosed when the corresponding feature is used.

11. U.S. state-specific disclosures

Privacy rights and required disclosures vary by state and apply when statutory thresholds and conditions are met. PlayGoOn will honor applicable rights and provide any supplemental notice required for categories, purposes, sources, recipients, retention criteria, sensitive data, appeals, or legally defined sale, sharing, or targeted advertising. Florida privacy and security requirements, including applicable breach-response obligations, will apply according to their terms.

Additional privacy rights and disclosures apply when required by the law governing a particular user or processing activity.

12. Adults-only service

The Service is intended only for adults age 18 and older. We do not knowingly support participation by anyone under 18. Where age eligibility is required, date of birth is processed and eligibility is calculated server-side. Users must complete the then-current eligibility, legal-acceptance, and Privacy Policy acknowledgment requirements presented for an affected feature before using it.

If we learn that personal information was collected from a person under 18 in conflict with this restriction, contact support@playgoon.com. We will investigate and take appropriate deletion, restriction, safety, and legal steps. Minor accounts, parental accounts, youth teams, school programs, and youth participation are not supported in this release.

13. International users

The Service is operated from the United States. A targeted launch outside the United States requires updated notices and controls addressing controller identity, lawful bases, cross-border transfer requirements, regulator contacts, and regional rights before that launch.

14. Changes to this Policy

We may update this Policy. We will post the updated version and effective date and provide additional notice when required. If consent is required for a new use, we will seek it before that use.

15. Contact

Interwebx LLC, operator of PlayGoOn
3020 Girvan Drive
Land O’ Lakes, FL 34638
Support, privacy requests, security reports, safety reports, appeals, legal notices, and account deletion: support@playgoon.com