MITI Privacy Policy

This Privacy Policy applies to the MITI ecosystem, including the main MITI consumer mobile app, MITI administrative mobile apps such as Padel Console, related backend APIs, QR services, push infrastructure, and the MITI website.

MITI uses one shared backend and one shared account system across multiple applications. If you use both a consumer MITI app and an administrative MITI app, your data is processed within the same platform, subject to role-based access controls and scope restrictions.

1. What products and scenarios this policy covers

This policy covers the consumer MITI app, user profiles, the social feed, stories, chats, matches, tournaments, bookings, notifications, QR flows, and supported sports or lifestyle categories inside MITI.

It also covers MITI administrative apps, including Padel Console, used by court owners, staff, top managers, and other authorized roles to manage courts, slots, bookings, invitations, staff access, and administrative activity history.

2. Data we collect

• Account data: email address, username, full name, city, app language, and password in hashed form.
• Profile data: avatar, bio, public handle, social links, category profiles, achievements, rankings, MMR, profile frames, and gameplay statistics.
• User content: posts, stories, comments, likes, chat messages, uploaded media, and attachments.
• Sports and category data: matches, invitations, tournaments, bookings, clubs, courts, time slots, results, match history, category participation, and status data.
• Administrative data: assigned roles, access to clubs and courts, staff memberships, booking queues, approval messages, court confirmations, audit history, and operational actions performed in admin tools.
• Technical data: device name, device id, push token, IP address, user-agent, safety logs, QR scan events, and basic crash/error telemetry.

3. App permissions that may be used

• Camera: only if you choose to use the QR scanner or create content that requires camera access.
• Photos and media library: only if you choose media for an avatar, post, story, or other user content.
• Notifications: only if you allow push notifications for messages, invitations, content activity, booking events, and important account or system updates.
• Local device storage: for cache, session restore, startup performance, and stable UI behavior.

4. How we use data

• To create and maintain your account, authenticate you, and protect active sessions.
• To show your profile, social features, content, subscriptions, and interactions with other users.
• To run chats, push notifications, QR flows, and deep links to in-app content.
• To manage matches, invitations, tournaments, court bookings, confirmations, clubs, and admin workflows.
• To prevent fraud, abuse, spam, technical failures, and security incidents.
• To support category profiles, achievements, rankings, match history, and user progression.

5. Public data and restricted-access data

Some data is public or semi-public within MITI, such as your avatar, display name, handle, bio, public posts, stories, selected category profile elements, achievements, open matches, and interactions that you choose to create inside the platform.

Administrative access data, staff operations, booking queues, internal responses, audit entries, and operational fields are available only to users with the relevant role and only within the club, court, organization, or scope assigned to them.

6. Push notifications and device tokens

If you allow notifications, MITI may store a device push token and platform metadata to send notifications about messages, match invitations, content activity, reminders, and important account or system events.

You can disable notifications in your device settings. Related tokens are removed or disabled when you log out or delete your account.

7. QR codes and scan events

MITI may generate QR codes for user profiles, clubs, courts, and other supported objects. QR resolution is performed through MITI backend services.

When a QR code is scanned, MITI may log the scan event, the scanning user, time, entity type, and scan source so the correct object can be resolved, abuse can be prevented, and security history can be maintained.

8. Administrative apps, role-based access, and audit history

If you use a MITI administrative app or are assigned an administrative role, MITI may process the data necessary to manage courts, time slots, staff, bookings, invitations, confirmations, and related operational workflows.

Administrative actions may be logged, including who performed the action, when it was performed, what club, court, booking, or operational object it related to, and what result was recorded. This is used for security, operational control, and dispute handling.

9. Sharing of data

• With other MITI users only within the profile, content, match, chat, and interaction flows that you choose to use.
• With infrastructure providers that help operate MITI, such as hosting, storage, database, delivery, and push notification providers.
• When required by law or reasonably necessary to protect MITI, users, court owners, clubs, or sports facilities.

10. Where data is processed and how we protect it

MITI's primary server infrastructure is currently located in Dubai, United Arab Emirates. Some third-party service providers, such as push delivery providers or other technical vendors, may process limited technical data in other regions when necessary to operate the service.

MITI uses reasonable technical and organizational safeguards, including access control, session protection, role-based permissions, security logging, and separation of administrative scopes.

11. Data retention

MITI keeps data for as long as necessary to provide the service, comply with legal obligations, protect the platform, and maintain technical history.

Some technical, safety, booking, financial, or anti-abuse records may be retained longer when required for security, fraud prevention, legal compliance, accounting, or dispute handling.

12. Account deletion

You can initiate account deletion directly inside the MITI mobile app without sending an email request. After deletion is initiated, active sessions are revoked, the account is deactivated, and profile data and social links are anonymized or cleared.

If your account is also used in a MITI administrative app, deletion also ends access to your administrative roles and related workflows.

Certain records, including limited safety logs, booking records, tournament records, financial records, chat history context, and minimal technical history, may be retained in a reduced or anonymized form where required for legal, security, accounting, or anti-fraud purposes.

13. Your controls

• Edit your profile and social links.
• Manage posts, stories, comments, likes, and in-app visibility settings.
• Manage available public profile elements where a feature allows it.
• Control device notification permissions.
• Request account deletion from inside the app.

14. Sale of personal data

MITI does not sell your personal data to third parties.

Contact