Privacy Policy

Welcome to Hayyna (هيّنا). This Privacy Policy explains how we collect, use, and protect your personal information when you use our community sports booking application and related services.

By using Hayyna, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Hayyna is a community sports booking platform designed for residential compounds and gated communities across Bahrain and the GCC region. We help residents book sports facilities, organise matches, and connect with their neighbours.

2. Information We Collect

Information you provide directly:

• Phone number (used for login via OTP verification)
• Full name and display name
• Profile photo (optional, uploaded by you)
• Villa or unit number within your community
• Email address (optional)

Information collected automatically:

• Booking history (facilities booked, dates, times)
• Community membership details (which community you belong to, your role)
• App usage data (screens visited, features used)
• Device push notification token (when you enable notifications)

Information from third parties:

• Phone verification data from Twilio Verify (our SMS provider)

3. How We Use Your Information

We use the information we collect to:

• Verify your identity and authenticate you via phone OTP
• Create and manage your account
• Process and manage your facility bookings
• Send booking confirmations and reminders
• Enable community features (match creation, player invites)
• Allow community admins to manage residents and facilities
• Show your profile to other members of your community
• Send you push notifications about your bookings (if enabled)
• Improve our app and services
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share your information only in these limited circumstances:

Within your community:

• Your name and profile photo are visible to other members of your residential community
• Your booking information may be visible to community administrators
• If "show booker name" is enabled by your admin, your name appears on booked time slots

Service providers:

• Supabase - our database and authentication provider (data stored securely)
• Twilio Verify - our SMS OTP provider (receives your phone number to send verification codes)
• Expo/EAS - our app build and push notification service
• Netlify - hosts our invite landing pages

Legal requirements:

• We may disclose information if required by law or to protect rights and safety

5. Data Storage and Security

Your data is stored securely on Supabase servers in the Asia Pacific region. We implement industry-standard security measures including:

• Row Level Security (RLS) ensuring users can only access their own data
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure authentication via phone OTP
• Profile photos stored in secure, access-controlled storage buckets

6. Your Rights

You have the right to:

• Access - request a copy of the personal data we hold about you
• Correction - update or correct your personal information via the Profile screen
• Deletion - request deletion of your account and associated data
• Portability - request your data in a portable format
• Opt-out - disable push notifications at any time in your device settings

To exercise these rights, contact us at hayyna.app@gmail.com

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Booking records are retained for up to 2 years for community management purposes. You may request deletion of your account at any time.

8. Children's Privacy

Hayyna is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

9. Push Notifications

If you enable push notifications, we collect your device's push notification token to send you booking reminders and community updates. You can disable notifications at any time through your device settings or within the app.

10. Third-Party Services

Our app uses the following third-party services, each with their own privacy policies:

• Supabase - supabase.com/privacy
• Twilio - twilio.com/legal/privacy
• Expo - expo.dev/privacy

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this policy. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: