Privacy Policy

Last updated 26 September 2026

Courtsy (“we”, “us”) runs the Courtsy app, which lets people book and host tennis sessions on private condominium courts in the Klang Valley, Malaysia. This policy explains what personal data we collect, why, who can see it and the choices you have. It is written to meet Malaysia’s Personal Data Protection Act 2010 (PDPA).

What we collect

• Your email address — to sign you in with a one-time code. It is never shown to other people.
• Your profile — the name, photo, short bio and skill level you choose to add.
• What you do in the app — courts you list, sessions you open or book, invites, messages in booking chats, reviews you write or receive, and reports or blocks you make.
• Support requests — what you send us through Help & support, with your email, the booking it’s about if you choose one, and your device type and app version so we can help faster.
• Technical data — our hosting provider records basic request logs (such as IP address and time) to keep the service secure and working.

What we don’t collect

• Your location is not sent to us. If you allow location access, your phone uses it only to sort courts by distance. It is never stored on our servers.
• We don’t ask for your phone number — messages happen in the booking chat.
• We don’t ask for your home address or which condo you live in. When you list a court, the condo name you pick is shown so players know where to go.
• We don’t use advertising or third-party tracking.
• Payments aren’t switched on yet, so we hold no card or bank details. We will update this policy before that changes.

Who can see what

• Everyone signed in can see your name, photo, bio, skill level, the courts you list and reviews about you.
• People in the same booking — the host, the booker and invited friends — can see that booking and its chat.
• Courtsy admins can see what’s needed to review reported content, approve listings and keep people safe.
• If you block someone, you and they can no longer see each other’s courts or sessions, book with each other or send invites.

Why we use it

To run the service: signing you in, showing courts and sessions, making bookings, letting hosts and players talk, showing reviews, handling reports and preventing abuse. We rely on your consent and on the need to provide the service you asked for. We don’t sell your data.

Services we use

• Supabase — database, sign-in and photo storage. Your data may be stored on servers outside Malaysia.
• Resend — sends your sign-in code emails.
• OpenStreetMap (Photon by Komoot) — when a host searches for a condo, the text they type is sent to this service to suggest matching places.

How long we keep it

We keep your data while you have an account. When you delete your account we remove your name, photo, bio and skill level, delete reviews written about you, cancel your upcoming bookings and hosted sessions, and delete your sign-in, so your email can no longer log in. Past bookings, messages and reviews you wrote stay so other people’s records make sense, but they show as “Deleted user”. See Delete your account.

Your choices and rights

• Edit your profile at any time in the app under Account.
• Delete your account in the app: Account → Delete account.
• Under the PDPA you can ask to see or correct the personal data we hold about you, or withdraw consent. Send a request through Help & support or email support@courtsy.my, and we’ll respond within 21 days.

Age

Courtsy is for people aged 18 and over.

Security

Data is sent over encrypted connections, and access rules in our database limit each person to what they are allowed to see. No system is perfectly secure, so please don’t share anything in chats you wouldn’t want others to see.

Changes

If we change this policy we’ll update the date above, and tell you in the app if the change is significant.

Contact

Questions or requests: Help & support, or support@courtsy.my.