Privacy Policy

Tournwa is a sports competition management platform operated from Dubai, United Arab Emirates. For the purposes of data protection law, Tournwa is the data controller for the personal data described in this policy, except where we process data on behalf of an organizer, club, academy, school or federation that uses our platform to run its own competitions — in those cases that organization is the controller and we act as its processor.

You can reach us about anything in this policy at hello@tournnwa.com, or by post at Dubai, United Arab Emirates.

We collect the following categories of personal data:

• Account data — the name, email address and profile picture associated with your Tournwa account, and a password if you register with one. If you sign in with Google, this data comes from your Google account as described in section 4.
• Contact and enquiry data — when you request a demo or contact us through a form on this website, we collect your first and last name, email address, phone number, organization name, organization type and the content of your message.
• Competition data — information you or your organization add to run a competition: team and player entries, categories, fixtures, results, scores, standings and rankings. Some of this data is published publicly as part of a tournament by the organizer that created it.
• Transaction data — records of registrations, entry fees and subscriptions. Card details are entered directly with our payment providers and are never stored on Tournwa systems.
• Technical and usage data — IP address, device and browser type, language, pages viewed, referring page, and interactions with the Services, collected through cookies and similar technologies as described in section 7.
• Communications data — your preferences for notifications and marketing messages, and a record of the messages we have sent you.

We do not knowingly collect data from children under 13. Where a minor participates in a competition, their entry is submitted and consented to by a parent, guardian, school or club, which is responsible for obtaining that consent.

We use personal data only to operate and improve the Services:

• To provide the Services — creating and securing your account, publishing and running competitions, managing registrations, generating draws and fixtures, and displaying live scores, standings and rankings.
• To process payments — taking registration fees and subscription payments, issuing receipts and handling refunds and chargebacks.
• To communicate with you — sending match reminders, schedule changes, results and service notices, and responding to your enquiries and demo requests.
• To improve and secure the Services — understanding which features are used, diagnosing faults, and detecting and preventing fraud, abuse and unauthorised access.
• To meet legal obligations — keeping accounting records and responding to lawful requests from competent authorities.

Where the law requires a legal basis, we rely on performance of our contract with you, your consent (which you may withdraw at any time), our legitimate interest in operating and securing the Services, and compliance with legal obligations.

Tournwa offers 'Sign in with Google' as a convenience so you do not need to create and remember a separate password. This section describes specifically how Tournwa accesses, uses, stores, shares and deletes Google user data.

What we access

If — and only if — you choose to sign in with Google and grant permission on Google's consent screen, we receive the following from your Google account:

• Your name — used to identify you inside the platform, on your athlete or organizer profile, and in team and fixture listings.
• Your email address — used as your unique account identifier, to sign you in, and to send you service communications such as fixture changes and results.
• Your profile picture — used as your avatar in the app. This is optional and you can replace or remove it at any time.
• Your Google account identifier — an opaque ID used solely to link your Google sign-in to your existing Tournwa account so you reach the same account each time.

We request only the basic profile and email scopes needed for authentication. Tournwa does not request, access or store any other Google user data — we do not read your Gmail, Google Drive files, Google Calendar, contacts or any other Google service.

How we store and protect it

Google profile data is stored in our access-controlled production database, encrypted in transit with TLS and encrypted at rest. Access is limited to the small number of Tournwa personnel who need it to operate and support the platform. Tournwa never receives or stores your Google password.

How we share it

We do not sell Google user data and we do not transfer it to third parties, except to the infrastructure providers listed in section 6 that host the platform on our behalf under contract, and where we are legally required to disclose it. Your name and profile picture are visible to other participants and organizers within competitions you join, because that is the function of the platform.

How to revoke access and delete it

You can disconnect Tournwa from your Google account at any time at myaccount.google.com/permissions. To delete the Google user data we hold, delete your Tournwa account in the app settings or email hello@tournnwa.com. We erase it within 30 days, except where we must retain a limited record to meet a legal or accounting obligation.

We do not sell your personal data. We share it only in these situations:

• With competition organizers — when you register for a tournament or league, the organizer running it receives the entry details needed to administer your participation.
• Publicly, as part of a competition — names, team affiliations, fixtures, results and rankings may appear on public tournament pages, because published results are the purpose of the platform.
• With service providers — the hosting, payment, analytics and communication providers listed in section 6, who process data on our instructions under contract and may not use it for their own purposes.
• For legal reasons — where disclosure is required by law or necessary to protect the rights, safety or property of Tournwa, our users or the public.
• In a business transfer — if Tournwa is involved in a merger, acquisition or sale of assets, personal data may transfer to the successor entity under the terms of this policy.

We rely on a small number of vetted providers to run the Services: cloud hosting and database infrastructure; payment processors, including Stripe, for handling card payments; product analytics, provided by PostHog, to understand feature usage and diagnose faults; and email and messaging providers for service communications. These providers are bound by contract to process personal data only on our instructions and to protect it appropriately.

Some of these providers operate outside the United Arab Emirates. Where personal data is transferred abroad, we ensure an appropriate level of protection through recognised safeguards such as standard contractual clauses.

We use cookies and similar technologies that are strictly necessary to run the site — keeping you signed in, remembering your language preference and securing forms — and analytics cookies that help us understand how the Services are used.

Our analytics provider, PostHog, records page views, feature interactions and, on parts of the website, anonymised session replays that capture navigation and clicks. These recordings are used solely to diagnose usability problems and faults; input fields are masked so that text you type is not captured. We do not use these tools to build advertising profiles.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Services from working.

We keep personal data only as long as we need it. Account data is kept while your account is active and deleted within 30 days of your deletion request. Competition records, including results and standings, are retained as part of the historical record of the event and may remain visible after your account is closed, in a form that minimises personal data where possible. Transaction records are kept for the period required by tax and accounting law. Enquiry and demo request data is kept for up to 24 months from our last contact.

We encrypt data in transit using TLS and encrypt data at rest. Administrative access to production systems is restricted to authorised personnel, protected by strong authentication and logged. Passwords are stored only as salted cryptographic hashes and are never recoverable in plain text. We monitor for unauthorised access and maintain a process for responding to security incidents, including notifying affected users and the relevant authorities where required by law.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@tournnwa.com.

Subject to applicable law, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies, the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — have inaccurate or incomplete data corrected.
• Deletion — request erasure of your personal data and your account.
• Restriction and objection — ask us to limit how we use your data, or object to processing based on our legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — withdraw consent at any time where our processing relies on it, without affecting processing already carried out.
• Opt out of marketing — unsubscribe from marketing emails using the link in any such message. Service messages about competitions you have entered will continue.

To exercise any of these rights, email hello@tournnwa.com. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We may update this policy as the Services evolve or the law changes. The 'last updated' date at the top of this page always reflects the current version. If a change materially affects how we handle your personal data, we will notify you by email or through the Services before it takes effect.