Maylay — Privacy Policy

Last Updated: June 27, 2026 · Maylay Sports Inc.

1. Introduction

Maylay ("the App," "we," "us," or "our") is operated by Maylay Sports Inc. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Maylay mobile application. By creating an account, you agree to this Privacy Policy and our Terms of Service, into which this Privacy Policy is incorporated by reference.

This policy complies with the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and Apple's App Store privacy requirements.

2. Information We Collect

Account & Identity

• Full name, email address, username, and password (hashed — never stored in plain text)

• Date of birth (used to verify age eligibility and, where you choose to set age preferences, to match you with players in your preferred age range)

• Profile photo and bio

• Biological sex (optional — used only for profile display and matchmaking)

Precise Location Data

GPS location is collected only with your explicit permission, used to find nearby games and players, calculate distances, and display your approximate area to matched athletes. Your precise coordinates are never shared directly with other users. You may revoke location permission at any time in your device settings.

Camera & Microphone

• Camera: profile photos, post media, and video calls

• Microphone: audio during in-app video and audio calls

We do not access your camera or microphone in the background.

Video & Audio Calls

Real-time calls are powered by Agora. Calls are not recorded or stored by Maylay Sports Inc. Streams are transmitted in real time and not retained after a call ends.

User-Generated Content

• Posts, photos, videos, and media you upload

• Chat messages and group conversations

• Game listings and event descriptions

Sports & Skill Data

• Favorite sports, skill levels, availability, and preferences

Usage & Diagnostics

• App interaction data and session timestamps

• Crash reports and error logs via Sentry

• Device type, OS version, and app version

3. How We Use Your Information

• Match you with nearby athletes, games, and events

• Display your profile and availability to other verified users

• Enable messaging, group chats, and video calls

• Send push notifications about nearby games and activity

• Verify your identity and maintain account security

• Detect and prevent fraudulent or prohibited activity

• Comply with legal obligations and enforce our Terms of Service

• Analyze crash reports and usage patterns to improve the performance and stability of the Service

We do not use your data for behavioral advertising or ad targeting.

4. Data Sharing & Third Parties

We Do Not Sell Your Data

Maylay Sports Inc. will never sell, rent, trade, or auction your personal data, location history, communications, or any other information to third parties.

Trusted Infrastructure Providers

Supabase — Database & auth — Account data, messages

Agora — Video & audio calls — Streams (not recorded)

Sentry — Crash reporting — Device info, error logs

Apple APNs — Push notifications — Device push token

Legal Disclosures

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Maylay Sports Inc., our users, or the public.

Business Transfers

If Maylay Sports Inc. undergoes a merger or acquisition, we will provide at least 14 days' notice before your data becomes subject to a materially different privacy policy.

5. Data Retention & Deletion

Delete your account anytime via Settings → Account → Delete Account.

• Your profile, personal data, location records, and media uploads are deleted within 30 days

• Messages you sent to other users remain in their chat threads, permanently stripped of your identifying information and attributed to "Deleted User"

• Residual encrypted backups deleted within 90 days

• Accounts inactive 24+ months are automatically purged

6. Data Security

• Encryption of data in transit (TLS/HTTPS)

• Passwords hashed — never stored in plain text

• Role-based access controls on internal data access

• Row-level security policies on our database infrastructure

No electronic transmission is 100% secure. In the event of a data breach, we will notify you as required by applicable law.

7. Children's Privacy

Maylay is for users 18 years of age or older. We do not knowingly collect data from anyone under 18. If we discover data from a minor, we will delete it immediately. Contact: support@maylay.org

8. Your Privacy Rights

California Residents (CCPA/CPRA)

• Know what personal data we collect, use, and disclose

• Request a copy of the personal data we hold about you

• Request deletion of your personal data

• Correct inaccurate personal data

• Opt out of the sale of personal data (we do not sell your data)

• Non-discrimination for exercising your privacy rights

All Users

• Access and review the personal data we hold about you

• Correct inaccurate data through your in-app profile settings

• Withdraw consent for location/camera/mic via device settings

• Delete your account and all associated data via in-app Settings

9. Push Notifications

You may opt out of push notifications at any time through your device's notification settings or within the App's alert preferences.

10. Governing Law

This Privacy Policy is governed by the laws of the State of California. Disputes will be resolved through binding individual arbitration administered by JAMS under its Streamlined Arbitration Rules and Procedures.

11. Changes to This Policy

We will notify you via in-app notification or email at least 14 days before material changes take effect.

12. Contact Us

Maylay Sports Inc. — Data Privacy Team

Email: support@maylay.org

© 2026 Maylay Sports Inc. All rights reserved.