About this policy
Xpandedge Pty Ltd operates DuoRally. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
Questions about this policy or your information can be sent to contact@xpandedge.com.au.
Information we collect
We collect the information needed to create accounts, organise groups and run racquet-sport sessions.
- Account information: name, email address, gender, profile details, authentication identifier and account status.
- Group information: squad membership, invitations, join requests and Owner, Admin or Member roles.
- Player information: display name, gender, skill level, availability, RSVP and attendance status. Organisers may add guest players.
- Play information: match assignments, partners, opponents, sit-outs, scores, results, statistics and leaderboard positions.
- Session information: sport, venue, courts, dates, duration, settings and organiser actions.
- Technical information: device and browser information, IP address, authentication/session data, diagnostics, security events and product usage.
- Communications: information you provide when you contact us for support, access, correction or a complaint.
We do not sell personal information.
How we collect information
We collect information directly when you create an account, join a squad, RSVP, enter a score or contact us.
We also receive information from organisers who add members or guest players, from authentication providers you choose to use, and automatically through Firebase, analytics, application logs, cookies and local device storage. Local storage may remember preferences or a public player-board selection on that device.
If you provide another person's details, you must have their authority and make them aware that DuoRally will use those details to organise and record the session.
How we use information
- authenticate users and maintain accounts
- create and administer squads, roles, invitations and sessions
- generate court assignments, rotations and future games
- record scores, calculate results and display leaderboards
- keep public player boards and score links updated
- support mixed games and balanced session formats as DuoRally adds those options
- provide support, investigate problems and prevent misuse
- secure, maintain and improve DuoRally
- produce aggregated product insights that do not reasonably identify an individual
- comply with legal obligations and resolve disputes
DuoRally uses availability, previous assignments and optional skill information to suggest upcoming games. Organisers can change players, courts and future assignments. The generator does not make decisions about a person's eligibility, employment, credit, health care or other legal rights.
Overseas processing
DuoRally uses cloud providers with operations outside Australia. Personal information may be stored or processed in the United States, the United Kingdom and other locations where Google, Firebase, Vercel or their approved service providers operate.
Where the Australian Privacy Principles apply, we take reasonable steps in relation to overseas handling as required by APP 8. Provider locations and infrastructure can change; contact us for current information relevant to your request.
Security, retention and data breaches
We use reasonable technical and organisational safeguards designed to protect personal information from loss, misuse, interference and unauthorised access, modification or disclosure. No internet service can guarantee absolute security.
We retain information while it is reasonably needed to operate DuoRally, maintain playing records, secure the service, resolve disputes and meet legal obligations. Information may remain for a limited period in backups and audit records after it is removed from active use.
We assess suspected data breaches and, where the Notifiable Data Breaches scheme applies, notify affected people and the Office of the Australian Information Commissioner when an eligible breach is likely to cause serious harm.
Access, correction and deletion
You can ask to access or correct personal information we hold about you, or request deletion of your account and associated information, by emailing contact@xpandedge.com.au. We may verify your identity before acting on a request.
We will respond within a reasonable period. Some information may need to be retained for security, legal, dispute-resolution or legitimate recordkeeping purposes. If we cannot complete a request, we will explain why where required and tell you about available complaint options.
Service and marketing communications
We may send operational messages needed for your account, security or sessions. These are service communications, not marketing.
We will send commercial electronic messages only with your consent or where otherwise permitted by the Spam Act 2003 (Cth). Those messages will identify the sender, include contact details and provide a working unsubscribe method. We will action unsubscribe requests within five working days.
Children and young players
DuoRally is not designed for unsupervised use by children. A parent, guardian or responsible organiser should supervise use by a person under 18. Organisers must not enter a minor's personal information without appropriate parent or guardian authority.
Privacy questions and complaints
Email contact@xpandedge.com.au with enough detail for us to understand and investigate your concern. We aim to acknowledge complaints promptly and respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. You can also read the Australian Privacy Principles.
Changes to this policy
We may update this policy when DuoRally, our providers or legal obligations change. The current version will be published here with an updated date. We will provide reasonable notice in the service when a change materially affects how we handle personal information.