Phillin is operated by Ashtro, a New Zealand studio. This policy explains what we collect, why we collect it, and your rights. We collect the minimum needed to match players with games. Privacy questions: privacy@phill.in.
What we collect
• Profile: name, email, phone, city, date of birth, gender, experience level, sports and chosen avatar.
• Activity: games joined and organised, check-ins, ratings given and received, XP history and streaks.
• Device: your notification token (so we can send push notifications) and whether permissions like camera and notifications are enabled.
• Usage statistics: anonymous counts of pages viewed, time spent, app opens and the site that referred you. These use a random identifier, not your name.
• Beta requests: if you ask for beta access on our website we store the name, email, phone and city you give us.
• Location: none. Phillin has no location features. Checking in is a simple QR scan and no GPS data is collected or stored.
Why we collect it
Gender and experience exist solely to match you to spots (many leagues have gendered spots and skill tiers). Your phone number lets organisers contact you about a game you joined. Email is used for sign-in, verification and service emails. Usage statistics help us understand how Phillin is used. We do not use advertising trackers and we do not sell your information.
What others see
Your public profile shows your name, avatar, level, XP total, reliability and streaks. Organisers of games you join can see your phone number so they can contact you about the game. Your XP transaction log, email, date of birth and other details are private.
Who processes your data
Phillin runs on trusted service providers who store and process data on our behalf: Supabase (database and sign-in, hosted in Sydney, Australia), Resend (email delivery), Expo and Google Firebase (push notification delivery), and Expo hosting for our website. This means your information may be processed in Australia and the United States. Each provider is bound by its own security and privacy obligations, and we only share what each service needs to function.
How long we keep it
Your information is kept while your account exists. When you delete your account, your profile and personal data are permanently deleted. Anonymous usage statistics are kept with no link to deleted accounts, and detailed time-on-site records are deleted after 12 months.
Security
Data is encrypted in transit, stored with access controls, and protected by row level security so players can only reach what they are allowed to see.
Your rights
You can view and edit your profile at any time in the app, and delete your account and all associated data (Profile, Edit, Delete my profile). Deletion is permanent. Under the New Zealand Privacy Act 2020 you can ask us for a copy of your personal information and ask us to correct it: email privacy@phill.in. If you are not happy with our response you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Age
Phillin is for people 18 and over. We do not knowingly collect information about children.
Browser storage
Our website uses no advertising cookies. It stores one random identifier in your browser for the anonymous usage statistics described above.
Changes
We may update this policy from time to time. Significant changes will be flagged in the app or by email.
Last updated: 13 August 2026.