HomeCourt (“HomeCourt”, “we”, “us”) is operated by JSQRD TECH SOLUTIONS OPC (SEC Registration No. 2026090268422-05), based in Butuan City, Agusan del Norte, Philippines. This Privacy Policy explains what personal data we collect through homecourt.ph and every club's booking site running on our platform (e.g. yourclub.homecourt.ph), why we collect it, who we share it with, and the rights you have over it under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
1. HomeCourt's role: platform operator, not always the club
HomeCourt is booking software that sports clubs (“Clubs”) use to run their own courts. This creates two different relationships, and it matters which one applies to your data:
- Data you give to a specific Club — e.g. booking a court, joining Open Play, or sending a payment screenshot on a Club's own subdomain — is collected on that Club's behalf. The Club decides what it does with its own customer data (pricing, confirming bookings, contacting you about your reservation); we process it as the platform the Club runs on, storing it in that Club's own separate database. If you have a question about a specific booking, the Club is usually the right first contact.
- Your HomeCourt player account — the one sign-in you use across every Club on the platform (through our mobile app or “Continue with Google/Facebook”), plus the optional HomeCourt wallet — is ours directly. We are the party responsible for that data.
2. What we collect
a. If you sign up your Club
Club/business name, your name, email, phone number, password, and any logo or brand colors you upload, when you register an instance at /signup.
b. If you play at a Club
- As a guest: name, email and/or phone number entered at checkout, and the specific booking details (court, date, time, price).
- As a registered player: the above, plus your password (or Google/Facebook sign-in identifier if you use social login), profile photo, and — because a HomeCourt player account works across every Club — your booking history at each Club you've visited, so you can see it in one place in the app.
- Payment proof: if a Club collects payment manually (GCash, Maya, bank transfer) rather than through an online gateway, you may upload a screenshot of your payment as proof. These images can show a wallet account name, number and balance, and are treated as sensitive — only that Club's staff and admins can view them, through a protected endpoint, not a public file link. Where a Club uses automatic checking, the image is also read by Google Cloud Vision to pick out the amount and reference number (see section 4). Screenshots are deleted automatically after a fixed period (see section 5).
- Dinky AI: if you chat with Dinky, our AI assistant, on a Club's site or on homecourt.ph, the messages you type are processed to answer you. Email addresses and phone or account numbers are removed before they leave our servers, and we do not keep the conversation.
c. HomeCourt wallet (only if a Club has this feature enabled)
If enabled, your wallet balance, top-up history and points are tied to your platform-wide player account, not to any one Club, because the wallet is spendable at any Club that accepts it.
d. Automatically, when you use our sites
Standard server logs (IP address, browser type, pages requested) for security and troubleshooting. On homecourt.ph itself (not on Club booking sites) we also count each visit by the site that referred it — a search engine, an AI assistant, a social network — and the page it landed on, without storing anything that identifies you. See our Cookie Policy for what, if anything, is stored in your browser.
3. Why we process this data
- To create and run your Club's booking site, or your player account.
- To process and confirm bookings, payments, and refunds.
- To send booking confirmations, receipts/invoices and payment-related notices by email, and reminders and alerts by browser notification. SMS is used only for password-reset codes and walk-in queue alerts.
- To respond to support requests, including through live chat.
- To detect and prevent fraud, abuse, and to keep the platform and its Clubs secure.
- To comply with legal and tax obligations.
These are our legal bases under the Data Privacy Act: performance of a contract (creating your account, taking your booking), legitimate interests (fraud prevention, service improvement), and consent (e.g. optional marketing, live chat, cookies where applicable).
4. Who we share it with
We do not sell personal data. We share it only as needed to run the service:
- The Club you book with — a Club sees the bookings, contact details and payment proofs of its own customers.
- Payment processors — any online payments are processed by a third-party payment processor; HomeCourt does not receive your full card or e-wallet credentials. See our Refund & Billing Policy for exactly which payments HomeCourt itself is a party to.
- SMS delivery — password-reset codes and walk-in queue alerts are sent through Semaphore, a Philippine SMS gateway, which processes your phone number solely to deliver that message.
- Cloud hosting — our servers, databases and backups run on a cloud infrastructure provider, which stores the data on our behalf.
- Email delivery — confirmations, receipts and account emails are sent through an email delivery provider, which processes your address and the message solely to deliver it.
- OpenAI — powers Dinky AI. It receives the messages you type (with emails and phone/account numbers removed) and the club information needed to answer, and we instruct it not to store them.
- Google — Google Cloud Vision reads payment screenshots for automatic checking where a Club uses it; Google Maps shows and looks up Club locations; and Google sign-in, if you choose it. Facebook sign-in likewise, if you choose it.
- Cloudflare Turnstile — checks that a Club signup on homecourt.ph is made by a person, not a bot.
- Browser push services (Google, Apple, Mozilla, Microsoft) — deliver notifications to your device if you turn them on.
- Have I Been Pwned — when you choose a password we check it against known data breaches. Only the first five characters of a one-way hash of the password are sent, never the password or your email.
- Live chat support (Crisp) — if you start a conversation with us through the chat widget, the content of that conversation is handled by Crisp, our live-chat provider, under its own privacy terms. It only loads if you accept cookies — see our Cookie Policy.
- Law enforcement or regulators, only where legally required.
Transfers outside the Philippines
Several of the providers above (OpenAI, Google, Cloudflare, the push services, and possibly our hosting and email providers) process data outside the Philippines. As Section 21 of the Data Privacy Act requires, we remain responsible for your data when it is transferred, share only what each provider needs, and use providers bound by contract to protect it.
5. How long we keep it
- Payment screenshots are deleted automatically 90 days after they are uploaded — long enough to settle a disputed payment, and no longer. The record that a payment was made and accepted stays; only the image goes.
- Bookings, receipts and invoices are kept as the Club's and our accounting records for as long as Philippine tax law requires, even after an account is deleted — without your contact details.
- Your account is kept until you delete it.
- Dinky AI conversations are not kept.
- If a Club closes its instance, its data is retained for a transition period in case the Club wants to reactivate, and is otherwise deleted.
6. Your rights
Under the Data Privacy Act of 2012, you may:
- Ask what personal data we (or a Club) hold about you;
- Ask us to correct inaccurate data;
- Ask us to delete data we no longer have a lawful reason to keep;
- Object to or withdraw consent for a specific use (e.g. marketing);
- Ask for a copy of your data in a portable format; and
- Lodge a complaint with the National Privacy Commission if you believe your rights have been violated.
You can do the two most common ones yourself: on a Club's site, open My Dashboard → Profile → Your data to download everything that Club holds about you, or to delete your account. Deleting removes your name, email, phone, photo and payment screenshots and stops you signing in; the Club keeps its record of past bookings and receipts, without your contact details, as tax law requires. If you sign in with your HomeCourt account you can delete it at every Club at once.
For anything else, email our Data Protection Officer at admin@homecourt.ph. If your request concerns a specific booking, we may need to coordinate with that Club, since they may also independently hold your data.
7. Security
Each Club's data is stored in its own separate database, isolated from every other Club. Passwords are stored hashed, never in plain text. Payment proof images are accessible only to authenticated Club staff/admin accounts through a protected endpoint, and Club payment credentials are encrypted. Connections to every HomeCourt site are encrypted (HTTPS). If a breach of personal data occurs that is likely to put you at risk, we will notify you and the National Privacy Commission as the Data Privacy Act requires. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we take reasonable and appropriate technical and organizational measures to protect your data.
8. Children's privacy
HomeCourt is not directed at children under 18. If you believe a child has provided us personal data without appropriate consent, contact us and we will take steps to remove it.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above; continued use of the platform after a change means you accept the revised policy.
10. Contact us and our Data Protection Officer
JSQRD TECH SOLUTIONS OPC (SEC Registration No. 2026090268422-05), Butuan City, Agusan del Norte, Philippines
Data Protection Officer: admin@homecourt.ph