Privacy Policy
Last updated: September 8, 2026
Verification data
1. Data Controller
Harsh Gautam operates the athzi.com platform under the Athzi brand and is the data controller responsible for your personal data in accordance with the General Data Protection Regulation (GDPR) and Polish data protection law (Ustawa o ochronie danych osobowych).
Contact: support@athzi.com
2. Data We Collect
We collect the following personal data:
• Account data: name, email address, username, date of birth, country
• Profile data: city, bio, favorite sports, skill level, avatar photo
• Verification data: selfie photos submitted through the optional selfie-and-gesture flow; this is not identity verification
• Usage data: messages, posts, game participation, bookings, reviews
• Technical data: IP address, browser type, device info, cookies
• Location data: city/area you provide (we do not track GPS location without consent)
3. Legal Basis for Processing
We process your data based on:
• Contract performance (Art. 6(1)(b) GDPR) — to provide our services, manage your account, and facilitate bookings
• Legitimate interest (Art. 6(1)(f) GDPR) — to improve our platform, prevent fraud, and ensure safety
• Consent (Art. 6(1)(a) GDPR) — for optional features like photo verification, marketing communications
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with Polish and EU law
4. How We Use Your Data
Your data is used to:
• Create and manage your account
• Connect you with other players and coaches
• Facilitate game organization and coach bookings
• Send notifications about games, messages, and bookings
• Record completion of the optional selfie-and-gesture flow, without verifying legal identity or matching faces
• Improve our platform and user experience
• Prevent fraud and ensure platform safety
5. Data Sharing
We share your data with:
• Other users: your public profile, posts, and reviews are visible to other users
• Service providers: hosting (Vercel), database (Supabase), image storage
• Legal authorities: when required by Polish or EU law
We do not sell your personal data to third parties. We do not share your data with advertisers.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account:
• Profile data is deleted within 30 days
• Messages are anonymized
• Posts and reviews may be retained in anonymized form
• A non-reversible cryptographic hash of your email is kept for up to 30 days so we can show a clear error if you try to log in after deletion; this hash cannot be used to recover your email address
• Backups are purged within 90 days
We may retain certain data longer if required by law.
7. Your Rights (GDPR)
Under GDPR, you have the right to:
• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability — receive your data in a structured format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time (Art. 7(3))
To exercise these rights, contact us at support@athzi.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
8. Cookies
We use essential cookies to:
• Keep you logged in
• Remember your language preference
• Ensure platform security
We do not use advertising or tracking cookies. No third-party analytics cookies are used without your consent.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
• Encryption in transit (TLS/SSL)
• Encrypted database storage
• Row-level security policies
• Regular security reviews
No method of transmission over the Internet is 100% secure. If you discover a security vulnerability, please contact security@athzi.com.
10. International Transfers
Your data is primarily stored in the EU. Where data is transferred outside the EEA (e.g., to service providers), we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Children
Athzi is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Athzi after changes constitutes acceptance of the updated policy.