Privacy Policy

1. Who we are

The controller of personal data described in this Policy is Duelstone LTD (“Duel Sport”, “we”, “us”), a company registered in the United Kingdom, with its registered office at 30 Churchill Place, London E14 5RE. We operate the Duel Sport application and the website at duelactive.com.

Write to help@duelactive.com for privacy requests, account help, and everything else. One inbox.

2. Scope

This Policy covers the iOS and Android apps, the public website (including this Privacy Policy and Terms of Use), and related customer support. It does not cover third-party websites or apps we do not control, even if we link to them.

3. Data we collect

We collect only what we need to run matching, accounts, safety, payments, and the features you choose to use.

• Account data: phone number, password (stored as a hash, never in plain text), nickname, optional profile fields (such as avatar and gender), and a public user ID.
• Authentication: one-time SMS codes; Sign in with Apple, Google, WeChat, or Meta when you choose those methods.
• Usage and match data: matches you join or create, confirmations, check-ins, ratings you give or receive, ranks, tasks, and similar activity needed to run the product.
• Location: approximate or precise location when you allow it, so we can show nearby players and venues. You can refuse or later disable location in system settings; some nearby features will then be limited.
• User content: highlight videos, photos, captions, comments, and reports you submit. Clips may include other people on court.
• Device and log data: app version, OS, language, coarse device identifiers needed for security and crash diagnosis, IP address, and request timestamps.
• Payments: if you buy goods or coaching, payment is processed by Stripe and/or Apple Pay / Google Pay. We receive payment status, last-four / method type, and amount. We do not store full card numbers.
• Communications: support emails and in-app reports you send us.

4. How we use data

We use personal data to:

• Create and secure your account, send SMS codes, and keep you signed in.
• Match you with nearby players of similar skill, confirm matches, and operate ranks, tasks, and highlights.
• Process orders and refunds when paid features are enabled.
• Detect abuse, no-shows, fraud, and illegal content; enforce our Terms and Community guidelines.
• Respond to support and privacy requests.
• Improve the product with aggregated or de-identified analytics. We do not use your highlight videos to train public generative models without a separate notice.
• Comply with law and store-review requirements (including a public account-deletion path).

5. Legal bases (where they apply)

Depending on your region, we rely on: performance of a contract (providing the app you asked for); consent (for example SMS, optional location, optional marketing); legitimate interests (security, fraud prevention, product improvement that does not override your rights); and legal obligation (tax, lawful requests, retention required by law).

If you are in the EEA, UK, or a similar regime, you may withdraw consent at any time without affecting prior lawful processing. If you are in mainland China, we process personal information according to the Personal Information Protection Law (PIPL) and related rules, including separate consent where required (for example, sharing with overseas processors).

6. Sharing and processors

We share data with service providers who process it on our instructions, not to sell it. Current and planned processors include:

• Stripe — payment processing when you pay in the app.
• Twilio — SMS delivery for one-time verification codes.
• S3-compatible object storage (self-hosted MinIO in our current production setup, or a cloud object store if we migrate) — highlight videos, images, and similar media.
• Apple — Sign in with Apple, App Store, Apple Pay, and push (APNs) when those features are enabled.
• Google — Sign in with Google, Google Play, Google Pay, and push (FCM) when those features are enabled.
• Other sign-in providers you choose (for example WeChat or Meta), only for that login.

7. International transfers

Our servers and some processors may be located in a different country from you. Where a transfer law applies (including PIPL cross-border rules and GDPR Chapter V), we use appropriate safeguards such as contractual clauses and, where required, a separate consent or security assessment. Media you upload may be stored in the region where we operate the product.

8. Retention

We keep account and match history while your account is active and as long as needed for safety, disputes, tax, and legal claims. After you delete your account, sign-in stops immediately (soft delete). Residual backups and legal records are removed or anonymized on a compliance schedule, unless a law requires a longer hold (for example an open payment dispute).

Highlight videos you delete in-app are removed from public view; copies in backups expire with the backup cycle.

9. Security

We use HTTPS, hashed passwords, parameterized database queries, and access controls. No method of transmission is perfectly secure. If we become aware of a breach that affects you, we will notify you and regulators as required by law.

10. Your rights

Subject to your region, you may request access, correction, deletion, restriction, portability, or to object to certain processing. You may also lodge a complaint with a data-protection authority. In the United Kingdom that authority is the Information Commissioner’s Office (ICO) at https://ico.org.uk/. To exercise rights, email help@duelactive.com from the address or phone associated with your account when possible so we can verify you.

11. How to delete your account

In the app: open Settings → Delete account and confirm. You will be signed out immediately. This is the path Apple and Google require us to provide inside the app.

If you cannot open the app, email help@duelactive.com with the phone number on the account. We may ask you to verify ownership before deletion.

12. Children

Duel Sport is not directed at children under 13 (or the equivalent minimum age in your country, such as 14 where that rule applies). We do not knowingly collect personal data from children under that age. If you believe we have, contact help@duelactive.com and we will delete it.

You must be old enough under local law to use the app. Accounts we identify as under 18 are limited to friendly matches: they cannot stake points. Parents or guardians who need help should use the same privacy inbox.

13. Other people in your videos

Highlight videos are often first-person or sideline footage of a real match. Other players may appear. You must have the right to share what you upload, and you should tell people on court if you are recording. We may remove clips after a valid likeness or privacy complaint. We may later ask for on-camera consent records for certain recording modes; if we do, we will update this Policy.

14. Cookies and the website

The marketing website may set a locale cookie so we can remember the language you picked, and standard technical cookies needed to run the site. We do not run third-party advertising pixels on the legal pages. You can block cookies in your browser; language detection may then fall back to your browser settings.

15. Changes

If we update this Policy, we will change the date at the top of this page. Material changes may also be announced in the app. Continued use after an update means you accept the revised Policy, except where a law requires a new consent.

16. Contact

Duelstone LTD, 30 Churchill Place, London E14 5RE, United Kingdom

Help: help@duelactive.com

This Policy is published at https://duelactive.com/privacy (English, default) and localized URLs such as https://duelactive.com/zh/privacy.