Privacy Policy

DINKSO (“we”, “us”) is operated byDINKSO, an unincorporated undertaking based in Hong Kong. We are the data user responsible for the personal data described in this policy.

Questions, or any request to access or correct your data, should go tohello@dinkso.app. This is the channel for access and correction requests under the Personal Data (Privacy) Ordinance, and we answer it.

We collect only what the app needs to work:

• Account details — your email address, name, username, and the sign-in method you choose (Google, Apple, or a one-time email code). Sign-in is handled by WorkOS; we never see or store your Google or Apple password.
• Player profile — your DUPR rating and DUPR ID if you enter them, a short bio, and your membership tier and player number.
• Photos — your avatar and your PlayerCard action shot, if you upload them. Background removal on your action shot runs entirely on your own device; the photo is not sent anywhere for that step. We strip embedded EXIF metadata (including any camera GPS tag) from every uploaded image before storing it.
• Location— your home court, district and country. If you use the “detect my location” button we also store the approximate latitude and longitude this produces, so we can show you nearby sessions. You can decline this and type your district instead.
• Activity— the clubs you join, sessions you create or join, waitlist positions, and payment status recorded by an organiser (for example “paid” or “unpaid” for a session fee). We do not process the payment itself and never hold your card details.
• Referrals— if you arrive via another player’s invite link, we record who referred you.

Providing your email and username is obligatory — the app cannot create an account without them. Everything else is voluntary; if you leave it out, the related feature simply shows less information (for example, without a district we cannot suggest sessions near you).

• To create and operate your account and PlayerCard.
• To show you clubs, sessions, and players relevant to your area and level.
• To let club organisers manage rosters, waitlists, and session payment status.
• To keep the service secure — including rate limiting to prevent abuse.
• To respond to you when you contact us.
• To send you service messages (for example a sign-in code, or notice that a session you joined was cancelled). These are not marketing and you cannot opt out of them while you hold an account.

We will not use your personal data for a new purpose unrelated to the above without first obtaining your consent.

DINKSO is a community app, so some information is visible to others by design. Please treat the following as public:

• Your PlayerCard — username, name, photo, DUPR rating, district, tier and player number. A PlayerCard you share generates a public link that anyone holding it can open without signing in.
• Your membership of a public club, and your presence on the participant list of a session you join, visible to other players.

Your email address is never shown to other users, and neither are your stored coordinates. Private clubs and private sessions are visible only to their members.

We do not sell your personal data. We share it only with service providers who process it on our instructions, and only as needed to run the app. Because these providers operate outside Hong Kong, using DINKSO involves transferring your data overseas:

• Supabase — database and photo storage. Hosted in Singapore.
• WorkOS — authentication and sign-in codes. United States.
• Vercel — application hosting and delivery. United States.
• Photon (komoot GmbH) — the location search box. When you type in it, what you type is sent to Photon in Germany to return matching place names. Your account identity is not sent with it.
• Upstash — abuse-prevention counters. No profile data.

We may also disclose personal data where required by law, or to establish, exercise or defend legal claims.

We will not use your personal data in direct marketing unless you have given us separate, explicit consent — and we do not provide your personal data to any third party for their own marketing.

If you do consent, we may use your name, email address and district to send you news about DINKSO features, events, leagues, and subscription offers. You may withdraw that consent at any time, free of charge, by using the unsubscribe link in any such message or by emailing hello@dinkso.app. We will stop on receiving your request.

We keep your profile for as long as your account is open. If you ask us to delete your account, we remove your profile, photos, and personal identifiers within [RETENTION PERIOD — e.g. 30 days], except where we must keep something longer to comply with a legal obligation or to resolve a dispute. Records of past sessions may be retained in a form that no longer identifies you.

Data is encrypted in transit. Access to the database is restricted by row-level security policies, and all writes go through authenticated server-side endpoints rather than directly from your browser. Uploaded images are re-encoded and stripped of embedded metadata. We rate-limit sensitive endpoints to frustrate automated attacks.

No system is perfectly secure. If a breach affects your personal data we will notify you and the Privacy Commissioner where appropriate.

Under the Personal Data (Privacy) Ordinance you have the right to:

• ask whether we hold personal data about you, and receive a copy;
• ask us to correct data that is inaccurate;
• withdraw consent to direct marketing at any time.

Most of your profile can be corrected instantly in the app under Profile → Edit. For anything else, contact hello@dinkso.app. We respond to data access requests within 40 days as required by the Ordinance. We may charge a reasonable fee for complying with a data access request, as the Ordinance permits.

If you are unhappy with our response you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).

DINKSO is not intended for children under 13. We do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

We use a small number of strictly necessary cookies to keep you signed in and to remember your theme and language choice. We do not use advertising cookies, and we never sell your data.

We use two service providers to keep DINKSO working and to understand which parts of it need improving:

• PostHog — product analytics. It records which screens you visit and which controls you tap, so we can see where the app is confusing. It is configured not to record your screen, and not to read the text on it — so payment details, names and receipts are not collected. You can turn this off at any time in Preferences → Usage analytics. That setting applies to the device you set it on.
• Sentry — error reporting. When something breaks it sends us the technical details of the failure, together with your DINKSO account identifier so we can tell whether a problem affects one person or everyone. It is configured not to collect your IP address, and it does not record your screen.

Both providers act as our data processors, may store data outside Hong Kong, and may only use it to provide the service to us. Neither receives your payment details or your uploaded payment proofs.

If we change this policy we will update the date at the top and, for significant changes, tell you in the app before they take effect.

DINKSO（「我們」）由 DINKSO 營運，是一個位於香港、 未有註冊成立法人的營運單位。就本政策所述的個人資料而言，我們是資料使用者。

如有查詢，或欲查閱或改正您的個人資料，請聯絡我們的資料保障主任：hello@dinkso.app。

我們只收集應用程式運作所需的資料：

• 帳戶資料 — 電郵地址、姓名、用戶名稱，以及您選用的登入方式 （Google、Apple 或一次性電郵驗證碼）。登入由 WorkOS 處理，我們不會看到或 儲存您的 Google 或 Apple 密碼。
• 球員檔案 — 您自行輸入的 DUPR 評分及 DUPR ID、簡介，以及 會員級別和球員編號。
• 相片 — 您上載的頭像及 PlayerCard 動作相。動作相的去背處理 完全在您的裝置上進行，該步驟不會將相片傳送至任何地方。所有上載圖片在儲存前 均會移除 EXIF 中繼資料（包括相機的 GPS 標記）。
• 位置 — 您的主場、地區及國家／地區。如您使用「偵測我的位置」 功能，我們亦會儲存所得的大約經緯度，以便顯示附近的球局。您可拒絕此功能， 改為自行輸入地區。
• 活動紀錄 — 您加入的球會、建立或參加的球局、候補位置，以及 主辦者記錄的付款狀態（例如球局費用「已付」或「未付」）。我們不會處理付款本身， 亦不會持有您的信用卡資料。
• 推薦 — 如您經其他球員的邀請連結加入，我們會記錄推薦人。

提供電郵地址及用戶名稱屬必須，否則無法建立帳戶。其餘均屬自願；如不提供，相關功能只會顯示較少資訊（例如未填地區， 我們便無法為您推介附近的球局）。

• 建立及營運您的帳戶和 PlayerCard。
• 向您顯示與您所在地區及水平相關的球會、球局和球員。
• 讓球會主辦者管理名單、候補及球局付款狀態。
• 保障服務安全，包括以流量限制防止濫用。
• 回覆您的查詢。
• 向您發送服務訊息（例如登入驗證碼，或您已參加的球局被取消的通知）。 此類訊息並非推廣訊息，在您持有帳戶期間不可選擇退出。

未經您同意，我們不會將您的個人資料用於與上述無關的新目的。

DINKSO 是社群應用程式，部分資料按設計可供他人查看。請視以下資料為公開：

• 您的 PlayerCard — 用戶名稱、姓名、相片、DUPR 評分、地區、 級別及球員編號。您分享 PlayerCard 時會產生公開連結，任何持有該連結的人無需登入亦可開啟。
• 您在公開球會的會籍，以及您所參加球局的參加者名單。

您的電郵地址絕不會向其他用戶顯示，所儲存的座標亦然。 私人球會及私人球局只有其成員可見。

我們不會出售您的個人資料。我們只會與按我們指示處理資料的服務供應商分享， 且僅限營運所需。由於這些供應商在香港境外運作，使用 DINKSO 涉及將您的資料 轉移至香港境外：

• Supabase — 資料庫及相片儲存，位於新加坡。
• WorkOS — 身份驗證及登入驗證碼，位於美國。
• Vercel — 應用程式寄存及分發，位於美國。
• Photon（komoot GmbH） — 位置搜尋功能。您輸入的文字會傳送至 位於德國的 Photon 以取得相符的地名，但不會連同您的帳戶身份傳送。
• Upstash — 防濫用計數，不含個人檔案資料。

我們亦可能在法律要求下，或為確立、行使或抗辯法律申索而披露個人資料。

除非取得您另行給予的明確同意，我們不會將您的個人資料用於直接促銷； 我們亦不會將您的個人資料提供予任何第三者作其促銷用途。

如您同意，我們可能使用您的姓名、電郵地址及地區，向您發送有關 DINKSO 功能、 活動、聯賽及訂閱優惠的資訊。您可隨時免費撤回同意，方法是使用任何該等訊息中的 取消訂閱連結，或電郵至 hello@dinkso.app。我們收到您的要求後會即時停止。

您的個人檔案會在帳戶開立期間一直保留。如您要求刪除帳戶，我們會在[保留期限 — 例如 30 日]內刪除您的個人檔案、相片及個人識別資料， 惟法律責任或處理爭議所需者除外。過往球局的紀錄可能以無法識別您身份的形式保留。

資料在傳輸過程中加密。資料庫存取受行級安全政策限制，所有寫入均經由已驗證的 伺服器端端點進行，而非直接由您的瀏覽器寫入。上載的圖片會重新編碼並移除 內嵌中繼資料。我們亦對敏感端點設有流量限制以阻截自動化攻擊。

沒有系統是絕對安全的。如發生影響您個人資料的外洩事故，我們會在適當情況下 通知您及私隱專員公署。

根據《個人資料（私隱）條例》，您有權：

• 查詢我們是否持有您的個人資料，並索取副本；
• 要求改正不準確的資料；
• 隨時撤回直接促銷的同意。

大部分個人檔案資料可在應用程式內「個人檔案 → 編輯」即時更正。其他事宜請聯絡hello@dinkso.app。我們會按條例規定於 40 日內回覆 查閱資料要求。就處理查閱資料要求，我們可能按條例准許收取合理費用。

如您不滿意我們的回覆，可向香港個人資料私隱專員公署投訴（pcpd.org.hk）。

DINKSO 並非為 13 歲以下兒童而設，我們不會在知情下收集其個人資料。 如您認為有兒童向我們提供了個人資料，請與我們聯絡，我們會予以刪除。

我們只使用少量絕對必要的 cookie，以維持您的登入狀態並記住您的主題及語言選擇。我們不使用廣告 cookie，亦絕不出售您的資料。

我們使用兩項服務供應商，以維持 DINKSO 正常運作並了解哪些部分需要改善：

• PostHog — 產品分析。它記錄您瀏覽了哪些畫面、點按了哪些控制項， 讓我們知道應用程式在哪裡令人困惑。它已設定為不會錄影您的畫面， 亦不會讀取畫面上的文字，因此不會收集付款資料、姓名或收據。 您可隨時在「偏好設定 → 使用分析」關閉此功能。 該設定只適用於您設定時所用的裝置。
• Sentry — 錯誤報告。當程式出錯時，它會把故障的技術細節連同 您的 DINKSO 帳戶識別碼傳送給我們，讓我們判斷問題只影響一位用戶還是所有人。 它已設定為不會收集您的 IP 位址，亦不會錄影您的畫面。

兩者均以我們的資料處理者身分行事，可能在香港以外地方儲存資料， 並只可為向我們提供服務而使用該等資料。兩者均不會取得您的付款資料或您上載的付款證明。

如本政策有所修訂，我們會更新頁首日期；如屬重大修訂，會在生效前於應用程式內通知您。