Privacy
Last updated 5 October 2026
This policy says what personal information Come Play SA holds about you, why, who sees it, and how to have it removed. It is written to South Africa’s Protection of Personal Information Act (POPIA).
1. Who is responsible
Come Play SA, a business whose company registration is in progress, of Johannesburg, South Africa, is responsible for your information. Questions, requests and complaints about it go to us at info@comeplaysa.co.za, and are handled by one of the founders.
2. What we collect, and why
| What | Why | Do you have to give it? |
|---|---|---|
| Your name | So the club knows who booked | Yes, to book |
| Your mobile number | So the club can reach you if something changes, and to sign you in with a code | Yes, to book |
| Names of the people you play with | Labels for splitting the cost. We never contact them | No |
| Your email address, if you sign in with Google | To recognise you when you sign in again | Only if you use Google sign-in |
| Display name and username | So friends can find and add you | Username is optional |
| Friends, groups and games you join | To run those features | Only if you use them |
| Your bookings: court, time, price, split and whether it is paid | To keep the booking and let the club manage it | Yes, to book |
| A device token, in the app | To send notifications, only if you allow them | No |
| Club staff: email address and password | To sign club staff in. Passwords are held securely by our sign-in provider and we never see them | Club staff only |
Our hosting providers also record technical details, such as IP addresses, in their logs. We use these only to run and secure the service.
We do not collect your ID number, date of birth, home address, location or contacts. We do not take card payments, so we never see card details. There is no advertising, analytics or tracking software on the site or in the app.
3. Signing in with Google
You can sign in with your Google account instead of a code sent to your phone. If you do, Google asks your permission to share three things with us, and only these:
- Your name, which becomes the name on your bookings. You can change it at any time in your account.
- Your email address, which identifies your account so the same Google account always signs you in to the same Come Play SA account.
- Your profile picture’s web address, which our sign-in provider stores with your account record. We do not display it or use it for anything.
We do not ask for, and cannot see, your Google password, emails, contacts, calendar, files or anything else in your Google account. We do not keep any key that would let us act in your Google account after you have signed in.
We use this Google information only to sign you in and to show your name on your bookings. We do not sell it, use it for advertising, or share it with anyone other than the service providers in section 6, who store it for us. The club whose court you book sees your name, as it would for any booking. It does not see your email address.
Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
You can stop Google sharing with us at any time from your Google Account, under Third-party apps and services. That stops future sign-ins with Google; to delete what we already hold, ask us as described in section 10.
4. Who sees it
- The club whose court you book sees your name and mobile number. That is the point of the booking.
- Other players see only what you share. A booking’s receipt or pay link shows the court, time, price and each person’s share, but never your mobile number. Members of a group see your name and username.
- Our service providers store and process it for us, under contract, and may not use it for anything else. They are listed below.
- Nobody else. We do not sell or rent your information, share it with advertisers, or send you marketing without your consent. We will disclose it only where the law requires us to.
5. Text messages
We use your mobile number to send you text messages (SMS) of two kinds, and no others:
- Sign-in codes, only when you ask for one by entering your number to sign in.
- Booking messages: that a booking you made is confirmed, or that someone has added you to their booking.
These are part of the service you asked for, not marketing. We do not charge you for them. If you would rather not receive booking messages, write to info@comeplaysa.co.za and we will stop them; sign-in codes are only ever sent when you request one.
We do not send marketing text messages. If we ever do, it will only be to people who have chosen to receive them:
- You will opt in separately, with a box that is not ticked for you. Agreeing to these terms, signing in or booking will never sign you up.
- Saying no will not affect your bookings, your account or the messages above.
- Every marketing message will say it is from Come Play SA and how to stop them, for example by replying STOP, and you can opt out at any time.
- We will keep a record of when and how you opted in.
Your mobile number is never sold, rented or shared with anyone else for their own marketing. Text messages are delivered for us by Twilio, which may use your number only to deliver them.
6. Where it is stored
Some of our providers are outside South Africa, so your information is sent abroad. We only use providers bound to protect it to a standard at least equal to POPIA.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in, including Google sign-in | Ireland |
| Render | Runs our booking service | Germany (Frankfurt) |
| Vercel | Runs the website | United States, with servers worldwide |
| Confirms who you are, only if you choose to sign in with Google | United States, with servers worldwide | |
| Twilio | Sends text messages: sign-in codes and booking messages | United States |
| Expo | Delivers app notifications | United States |
7. Cookies
The website uses two kinds of cookie, and no others:
cp_bookingsremembers bookings made from your browser, and holds the secret that lets you cancel them.- Sign-in cookies keep you signed in, and are set only if you sign in.
Neither is used for advertising or tracking, and neither is shared.
8. The app
The app collects the same information as the website, for the same reasons. Instead of cookies, it keeps the secret that lets you cancel a booking in your phone’s secure keychain, and your sign-in in the app’s own storage on your phone. The only permission it asks your phone for is to send notifications, and you can refuse it.
9. How long we keep it
- Bookings are kept for as long as the club needs them for its accounts and tax records.
- Your account, including anything Google shared with us, is kept until you ask us to delete it, and then deleted.
- A device token is removed when you sign out.
10. Your rights
Under POPIA you may ask what we hold about you, ask us to correct it or delete it, and object to how we use it. Write to our Information Officer at info@comeplaysa.co.za and we will reply within 30 days.
We may keep a booking record after you ask us to delete it, where a club must keep it for its tax records. We will tell you if that applies.
You can also complain to the Information Regulator.
11. How we protect it
Your information travels encrypted. Our database only lets each person reach their own records, and each club only its own bookings. Players sign in with a one-time code or with Google, never with a password we hold, so there is no password of yours to leak.
12. Children
You must be 18 or older to book or hold an account. We do not knowingly collect information about children. If you think we have, tell us and we will delete it.
13. Changes
We will update this policy when the product changes, and tell you before a change that matters to you takes effect. The date at the top says which version is current.