Introduction
Welcome to IQON ("we," "our," or "us"). We operate a global platform consisting of mobile applications (iOS and Android), SMS messaging services, automated messaging AI Agents (WhatsApp and Fleming/Telegram), and web administration platforms (collectively, the "Service") designed to facilitate sports facility and court bookings, instructor/coach scheduling, and tournament management.
We respect your privacy and are committed to protecting your personal data in accordance with global privacy standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and mobile carrier compliance frameworks.
1. Information We Collect
We collect information to provide, improve, and secure our Service.
A. Information You Provide Voluntarily
- Account & Profile Data: Name, email address, phone number, password, profile picture, skill levels, and sports preferences.
- Booking & Event Data: Details regarding the courts or facilities you book, instructors/coaches you schedule, and tournaments or activities you register for or manage.
- Payment & Financial Data: When making payments via our apps, SMS, or AI Agents, you provide billing details. All financial transactions are processed securely by our third-party provider, Stripe. We do not store or see your full credit card or bank details on our servers.
- Communications & AI Agent Discussions: Messages, inquiries, or conversational inputs sent to us directly, via SMS, or through our WhatsApp and Telegram AI Agents.
Note on Payment Security: IQON does not directly store or process your complete financial numbers on our servers. All payments are processed securely by our third-party payment processor, Stripe, adhering strictly to PCI-DSS standards.
B. Information Collected Automatically
- Device & Usage Data: IP address, device type, operating system, unique device identifiers, browser type, and interaction data.
- Log Files: Our servers, hosted on Amazon Web Services (AWS), automatically log operational data when you use the Service.
C. SMS & Third-Party Messaging Platform Data
- SMS: When you utilize our SMS service for password reset codes or engage in discussions with our SMS AI Agent, we collect your mobile phone number and the contents of the messages exchanged.
- WhatsApp & Telegram: If you interact with our AI Agents on these platforms, we receive your phone number (WhatsApp), username/ID (Telegram), and the text of your commands or messages to process your requests and send Stripe payment links.
2. Legal Basis for Processing (For EEA/UK Users)
If you reside in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:
- Performance of a Contract: To fulfill your facility bookings, instructor lessons, and tournament registrations.
- Your Consent: Where you have given clear consent (e.g., opting into SMS or AI Agent messaging).
- Legitimate Interests: To improve our services, maintain security, and prevent fraud.
- Legal Obligation: To comply with tax, accounting, or legal requirements.
3. How We Use Your Information
We use the collected data worldwide to:
- Process and manage sports bookings, instructor/coach schedules, and tournament brackets.
- Securely process payments and prevent fraud via Stripe.
- Allow facility owners, club administrators, and instructors to manage their schedules, users, and locations.
- Send transactional text messages, including password reset verification codes.
- Facilitate automated, two-way conversational discussions via our SMS, WhatsApp, and Telegram AI Agents.
- Monitor, analyze, and optimize app performance on our AWS cloud infrastructure.
4. Data Sharing and Global Disclosures
We do not sell, rent, or trade your personal data. We only share your data with:
- Facilities, Clubs & Instructors: Shared exclusively with the specific venue or coach you book with to ensure service delivery.
- Service Providers: Trusted global vendors operating under data processing agreements: Amazon Web Services (AWS), Stripe, Inc., Meta Platforms, Inc. (WhatsApp Business API), Telegram Messenger Inc., and Telecommunications/SMS Gateways.
- Legal Compliance: If required by law, subpoena, or government authorities globally.
Mobile Carrier Compliance — SMS Opt-In Data and Consent: No mobile information or phone numbers will be shared with third parties or affiliates for marketing or promotional purposes. All the above data categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5. International Data Transfers
Our Service operates globally, and your information may be transferred to, stored, and processed in countries outside of your home region (including the United States), where our AWS servers or service providers are located. When we transfer data across borders, we utilize appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Security and Retention
Security: We protect your data using robust technical and organizational measures on AWS, including encryption in transit (SSL/TLS) and at rest.
Retention: We retain your data only as long as your account is active or as needed to provide you with the Service, resolve disputes, and comply with legal obligations.
7. Your Global Privacy Rights
Regardless of your country, we grant you the following rights regarding your data:
- Access & Portability: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate profile details inside the app.
- Deletion ("Right to be Forgotten"): Request that we delete your account and personal history.
- Opt-Out of Messaging: Stop AI Agent communications or text messages at any time by replying STOP to any SMS/WhatsApp message, or blocking the AI Agent on WhatsApp/Telegram.
Regional Notices:
- EEA/UK Residents: You have the right to object to processing, restrict processing, or lodge a complaint with your local Data Protection Authority.
- California Residents (CCPA): We do not "sell" or "share" personal information for cross-context behavioral advertising. You have the right to request disclosure of categories of data collected and request deletion without discrimination.
8. Children's Privacy
Our Service is a general audience platform. We do not knowingly collect personal data from children under 13 (or 16 in the EEA) without explicit, verifiable parental consent. If we discover a child has provided us with data, we will purge it immediately.
9. Changes to This Privacy Policy
We may update this policy to reflect global regulatory changes or new features in IQON. We will notify you of changes by updating the "Effective Date" at the top of this page, and through in-app or AI Agent notifications for major updates.
10. Contact Us
If you have questions about this Privacy Policy, please contact us:
Email: privacy@iqon.live