LEGAL
U.S. Privacy Policy
Version 2.0 | Effective July 13, 2026 | Last updated July 13, 2026
This Privacy Policy applies to Kachiball's website, mobile applications, venue dashboard, waitlist, communications, and related services in the United States.
Who we are
Kachiball, Inc. is a Delaware corporation. In this Policy, “Kachiball,” “we,” “us,” and “our” refer to Kachiball, Inc. The “Service” means our website, mobile applications, venue dashboard, booking and payment features, communications, and related services.
This Privacy Policy explains how we collect, use, disclose, retain, and protect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household (“Personal Information”). It applies to website visitors, waitlist members, players, account holders, and representatives of sports venues.
This Policy is a notice about our practices; it is not a request for blanket consent. When applicable law requires consent—for example, for precise location, certain marketing communications, or a materially different use of data—we will request it separately.
This Policy does not govern information that a sports venue (“Venue”) collects directly from you outside the Service, information processed in an employment context, or third-party websites and services. Venues are independent businesses and may provide their own privacy notices.
1. Notice at Collection and Privacy at a Glance
This Section 1 is our U.S. Notice at Collection, including for California residents. The table summarizes the categories of Personal Information we may collect, why we collect them, and our typical retention approach. The details in the rest of this Policy control if there is a conflict.
Category
Examples
Primary purposes
Typical retention
Identifiers and account information
Name, email, phone number, age-confirmation or date-of-birth information, username, account ID, authentication and session data.
Create and secure accounts; verify eligibility; provide support; communicate about the Service; prevent fraud.
Account life plus up to 90 days in backups; security records may be kept longer as described in Section 8.
Profile and preferences
Optional photo, preferred language, sports interests, preferred Venues, accessibility or communication preferences you choose to provide.
Personalize discovery; display your profile; improve recommendations and usability.
Account life, or until you edit or delete the information.
Booking and commercial information
Searches, selected Venue and court, date and time, price, mandatory fees, taxes, cancellations, refunds, promotions, booking history, ratings and reviews.
Provide and manage bookings; process payments and refunds; customer service; accounting; dispute resolution; improve the Service.
Booking and payment records are generally retained for 7 years; reviews as described in Section 8.
Payment and payout metadata
Payment token, card brand, last four digits, expiration month/year, billing postal code, transaction ID and status; Venue payout-onboarding status.
Process charges, refunds, fraud checks, payouts, receipts, and accounting.
Token while saved or account is active; transaction records generally 7 years. Stripe may retain data under its own policy.
Device and internet activity
IP address, device and browser type, operating system, app version, cookie or device identifiers, push token, screens viewed, clicks, crash and diagnostic logs.
Operate the Service; remember preferences; analytics; security; debugging; prevent abuse.
Typically 12–24 months, with shorter periods for some logs and longer periods where needed for security or law.
Location information
Approximate location inferred from IP; city, ZIP code, or address you enter; precise device location only with your permission.
Show nearby Venues; sort results; provide location-based functionality; detect fraud and protect security.
Precise location is not used for advertising and is not retained beyond the session except limited operational or security logs, generally no more than 30 days, unless you save a location.
Communications and user content
Support messages, feedback, reports, reviews, ratings, photos you upload, and records of consent to Terms or Venue waivers.
Respond to requests; publish and moderate content; maintain evidence of agreements; protect users and Venues.
Support records generally 3 years; consent and waiver records generally 7 years or the applicable legal period.
Venue business information
Venue name, address, contacts, listings, availability, pricing, amenities, representative title, tax or payout status supplied through payment providers.
Onboard and support Venues; publish listings; manage bookings, payments, refunds, and compliance.
Relationship plus 7 years for transaction, tax, and contract records.
Inferences
Likely sports or Venue preferences derived from your searches and bookings.
Personalize and improve the Service; measure usage; prevent fraud.
Generally while the account is active or until the underlying data is deleted.
Sensitive Personal Information
Account login credentials and precise geolocation, when enabled. We do not use this information to infer sensitive characteristics.
Authentication, security, and providing nearby results at your request.
Only as long as reasonably necessary for those limited purposes.
Sale, sharing, targeted advertising, and financial incentives
As of the Effective Date, Kachiball does not sell Personal Information, does not share Personal Information for cross-context behavioral advertising, does not process Personal Information for targeted advertising, and does not offer a financial incentive or price difference in exchange for Personal Information. We will update this Policy and provide any required opt-out controls before changing those practices.
Your rights. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of Personal Information and to appeal certain decisions. Submit a request through the in-app privacy settings or email privacy@kachiball.com. See Sections 10 and 11.
2. Personal Information We Collect
2.1 Information you provide
Account and eligibility information. Name, email address, mobile number, password or authentication data, age confirmation, and, if needed, date of birth. We recommend collecting only the minimum age information necessary to confirm that an account holder is at least 18.
Profile and preferences. Optional profile photo, language, sports interests, preferred Venues, notification settings, and other preferences.
Booking information. Sport, Venue, court or field, date, time, participants or guest count when supported, booking notes, cancellations, refunds, and booking history.
User Content. Ratings, reviews, photos, feedback, support communications, safety reports, and other content you choose to submit.
Consent and waiver records. The version of the Terms, Privacy Policy acknowledgment, Venue waiver or policy you accepted, together with date, time, account identifier, and related technical records such as IP address.
Venue information. If you represent a Venue, business and listing details, pricing, availability, amenities, representative information, and information needed to administer the Venue relationship.
2.2 Payment information
Payments and Venue payouts are processed by Stripe or another payment provider identified at checkout or onboarding. When Stripe-hosted payment components are used, full payment card numbers and card security codes are transmitted directly to Stripe and are not stored by Kachiball. We may receive a payment token and limited metadata such as card brand, last four digits, expiration month and year, billing postal code, transaction identifier, payment status, refund status, and fraud or risk signals. Payment providers process information under their own terms and privacy notices.
2.3 Location information
You may search by city, ZIP code, address, or current location. With your device permission, we may collect precise or approximate device location to display nearby Venues and relevant availability. You can decline location permission and search manually. As of the Effective Date, Kachiball does not collect background location when the app is not in active use. Device settings may allow you to change permission at any time.
2.4 Information collected automatically
Device and network information. IP address, browser, operating system, device model, language, app version, device or advertising settings, and push-notification token.
Usage information. Screens or pages viewed, searches, clicks, referral source, dates and times, booking funnel activity, and interactions with messages or features.
Cookies and similar technologies. Essential cookies, local storage, SDKs, and similar technologies used for sign-in, preferences, analytics, security, and performance.
Diagnostics and security logs. Crash reports, error logs, authentication events, access logs, suspicious activity, and fraud-prevention signals.
2.5 Information from other sources
Venues. Booking status, cancellations, attendance or no-show information, dispute details, and reports concerning use of a Venue.
Payment and identity providers. Transaction status, payout-onboarding status, fraud signals, and account information if you choose a supported third-party sign-in method.
Service providers and referrals. Analytics, email delivery, security, customer-support, campaign, and referral information consistent with this Policy.
Public or professional sources. Business contact and listing information for Venues, where lawful and relevant to onboarding or maintaining accurate listings.
2.6 Information we do not intentionally collect
Kachiball is not a health or fitness-tracking service. We do not intentionally collect medical records, diagnoses, genetic data, biometric identifiers or templates, Social Security numbers, government identification numbers, or full financial-account credentials from Players. Do not include medical or other highly sensitive information in reviews, booking notes, or support messages. If a Venue needs medical or emergency information, it should collect that information directly under its own notice and only where lawful.
3. How We Use Personal Information
Provide the Service. Create and authenticate accounts; show Venues and availability; provide search, booking, payment, refund, review, reminder, and customer-support features.
Complete transactions. Authorize and reconcile charges, process refunds and Venue payouts, issue receipts, prevent duplicate or unauthorized transactions, and maintain accounting and tax records.
Personalize and improve. Remember preferences, rank or recommend relevant Venues, analyze feature usage, test improvements, diagnose errors, and develop new functionality.
Communicate. Send confirmations, changes, receipts, security alerts, support responses, waitlist and launch updates, and marketing communications where permitted.
Protect users, Venues, and Kachiball. Detect and prevent fraud, abuse, fake reviews, security incidents, policy violations, unsafe conduct, and attempts to circumvent the Service.
Comply with law and enforce agreements. Respond to valid legal process, maintain consent and waiver records, resolve disputes, enforce Terms and Venue agreements, and protect legal rights.
Corporate operations. Audit, finance, insurance, due diligence, financing, merger, acquisition, reorganization, or sale of all or part of the business.
We may create aggregated or de-identified information that cannot reasonably be linked to you. We may use and disclose that information for any lawful purpose and will not attempt to re-identify it except to test whether our de-identification process is effective or as permitted by law.
4. How We Disclose Personal Information
We disclose Personal Information only as described below, at your direction, or as otherwise permitted or required by law.
Venues you book. We provide the booking holder’s name, contact information as needed, booking details, payment or refund status, guest count if supported, and waiver or policy acceptance status so the Venue can honor and manage the reservation. Venues are independent businesses and may be separately responsible for their own use of this information.
Payment providers. Stripe and other payment, fraud, and payout providers receive information needed to process transactions, refunds, disputes, and Venue onboarding.
Service providers. Vendors that host or support the Service, such as Amazon Web Services, email and push-notification providers, analytics and diagnostics providers, customer-support tools, security vendors, and professional consultants. They are authorized to process information only for contracted purposes, subject to applicable terms and law.
Professional advisers and insurers. Lawyers, accountants, auditors, insurers, and other advisers where reasonably necessary to obtain professional services or protect legal interests.
Authorities and safety. Government agencies, law enforcement, courts, regulators, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, property, users, Venues, or the public.
Corporate transactions. Potential or actual acquirers, investors, lenders, and advisers in connection with financing, due diligence, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and legal protections.
At your direction. Other parties when you request or clearly authorize the disclosure.
No sale or sharing for behavioral advertising
We do not sell Personal Information for money or other valuable consideration and do not share it for cross-context behavioral advertising. We also do not permit Venues to use booking data received from Kachiball for unrelated marketing unless the Venue independently provides any required notice and obtains any required consent.
5. Cookies, Analytics, Device Permissions, and Privacy Signals
5.1 Cookies and similar technologies
We use essential technologies for sign-in, security, fraud prevention, preferences, and core functionality. We may use analytics technologies to understand how the Service performs and how features are used. As of the Effective Date, we do not use third-party advertising cookies or advertising SDKs for cross-context behavioral advertising.
5.2 Your controls
Browser and device controls. You can delete or block cookies, reset device identifiers, and control location, notifications, camera, and photo-library permissions through your browser or device settings. Blocking essential technologies may prevent parts of the Service from working.
Global Privacy Control and universal opt-out mechanisms. Where required by applicable law, we recognize and process supported browser- or device-based universal opt-out preference signals, including Global Privacy Control, for the browser or device that sends the signal.
Do Not Track. Because there is no uniform industry standard for browser “Do Not Track” signals, the Service does not respond to them unless and to the extent required by law. This is separate from our treatment of legally recognized universal opt-out mechanisms.
6. Communications
Transactional communications. We may send booking confirmations, changes, receipts, reminders, account notices, security alerts, support messages, and other non-marketing communications needed to provide the Service. You generally cannot opt out of essential transactional messages while maintaining an active account or booking.
Marketing email. We may send launch, product, or promotional email where permitted. You may unsubscribe using the link in the message or by contacting us. We will continue to send necessary transactional messages.
Text messages. If Kachiball offers text messaging, marketing texts will be sent only with any consent required by law. Consent to marketing texts is not a condition of purchase. Message and data rates may apply. Reply STOP to opt out and HELP for help. Transactional text preferences can be managed where available, subject to essential service notices.
Push notifications. You can disable push notifications in device settings. Some booking reminders may then be delivered by email or shown in the app.
7. Venues and Other Third Parties
Kachiball and a Venue may each independently determine how certain booking information is used. Kachiball uses booking information for platform operations, payments, support, security, and legal compliance. A Venue uses it to provide the reserved court or field, manage its facility, comply with law, and address safety or disputes. A Venue’s own privacy notice governs information it collects outside Kachiball or uses for its independent purposes.
The Service may link to third-party websites or integrate third-party services such as Stripe, maps, app stores, or social sign-in. Their privacy practices are governed by their own notices. Kachiball is not responsible for independent third-party privacy practices.
8. Data Retention
We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, taking into account the nature and sensitivity of the information, the risk of harm, legal and accounting requirements, security needs, disputes, and whether the purpose can be achieved by other means. Typical periods are below.
Data category
Typical period or criterion
Waitlist and launch email
Until you unsubscribe or, if you do not create an account, no later than 24 months after the applicable launch campaign, unless a shorter period is required.
Account and profile
While the account is active. After a verified deletion request, deletion is generally initiated within 45 days, subject to exceptions, with residual backup copies overwritten within about 90 days.
Booking, payment, refund, tax, and accounting records
Generally 7 years after the transaction or longer if required for tax, audit, dispute, fraud, or legal obligations.
Saved payment token and limited card metadata
Until you remove the payment method, close the account, or the token is no longer valid, subject to the payment provider’s own retention obligations.
Precise device location
Used for the active search or nearby-results session and not retained in precise form beyond the session except limited operational or security logs, generally no more than 30 days, unless you deliberately save a location.
Reviews, ratings, and public User Content
Until deleted, removed, or the account is closed. We may retain a restricted copy for up to 90 days, and longer where needed for safety, fraud, legal claims, or to preserve the integrity of transaction records. We may de-identify a review instead of deleting it where lawful.
Support and complaint records
Generally 3 years after the matter is closed, or longer for an active dispute or legal requirement.
Security and access logs
Generally 12 months. Records tied to suspected fraud, abuse, chargebacks, or security incidents may be retained for up to 5 years or the applicable legal period.
Terms, consent, and Venue waiver records
Generally 7 years after acceptance or the related booking, or longer for the applicable statute of limitations, safety claim, or Venue requirement.
Backups
Typically overwritten on a rolling basis within 90 days, unless preserved for security, disaster recovery, legal hold, or another lawful reason.
9. Security and Data Incidents
We use reasonable and appropriate administrative, technical, and physical safeguards designed to protect Personal Information. Depending on the information and system, these safeguards may include encryption in transit and at rest, access controls, multi-factor authentication for privileged access, logging and monitoring, secure development practices, vendor review, backups, incident-response procedures, and workforce confidentiality obligations.
No transmission or storage system is completely secure. You are responsible for using a strong, unique password, protecting your device and account, and promptly notifying us of suspected unauthorized access. If a security incident affects Personal Information, we will investigate and provide notices to affected individuals and government authorities as required by applicable law.
10. Your Choices and Privacy Rights
10.1 Account and device choices
Profile. Review and update profile and account information through account settings where available.
Location. Change location permission in device settings or search manually by city, ZIP code, or address.
Notifications. Manage push and certain email preferences in settings or through message controls.
Marketing. Unsubscribe from marketing email or revoke marketing-text consent using the instructions in the message.
Cookies. Use browser settings and any cookie controls we provide.
10.2 Privacy requests
Subject to applicable law and exceptions, you may request that we:
Confirm whether we process your Personal Information and provide access to it.
Correct inaccurate Personal Information.
Delete Personal Information.
Provide a portable copy of Personal Information you provided to us.
Identify categories or, where required, specific third parties to which we disclosed Personal Information.
Opt you out of sale, targeted advertising, certain sharing, or qualifying profiling. We do not currently engage in those practices.
Limit certain uses or disclosures of Sensitive Personal Information where the right applies. We use Sensitive Personal Information only for limited service and security purposes.
Withdraw consent for processing based on consent, without affecting earlier lawful processing.
Appeal a denial of a request where applicable law provides an appeal right.
How to submit a request. Use Settings > Privacy in the app, use the account-deletion page at kachiball.com/delete-account, or email privacy@kachiball.com with the subject “Privacy Request.” Describe the right you want to exercise and the state where you reside.
Verification. We will verify requests using information associated with your account or other information reasonably necessary to confirm identity and authority. We will not ask for more Personal Information than reasonably necessary. If we cannot verify a request, we may ask for additional information or deny the request and explain why.
Authorized agents. Where permitted, an authorized agent may submit a request for you. We may require proof of authorization and may separately verify your identity or confirm that you gave the agent permission.
Timing and appeals. We generally respond within 45 days, or the period required by applicable law, and may extend when legally permitted. If we deny a request, you may appeal by replying to the decision or emailing the same address with the subject “Privacy Appeal.” We will provide information about any right to contact your state attorney general or regulator.
No discrimination. We will not unlawfully discriminate against you for exercising a privacy right. We may offer a different service level if the difference is reasonably related to data needed to provide the requested feature.
10.3 Account deletion
You may initiate account deletion in the app through Settings > Account > Delete Account, through kachiball.com/delete-account, or by emailing us. Deletion removes or de-identifies account data that we are not legally required to retain. We may retain transaction, tax, fraud, security, consent, waiver, dispute, and legal-hold records and may keep a minimal suppression record to honor marketing opt-outs. Temporary deactivation is not account deletion.
11. U.S. State Privacy Rights Addendum
This Addendum supplements the rest of the Policy for residents of states with applicable comprehensive or sector-specific privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, Nevada, Washington, and any other state whose law applies to Kachiball. Rights differ by state and may depend on legal thresholds and exceptions. Kachiball may voluntarily honor a request even when a law does not require it.
11.1 Sale, targeted advertising, profiling, and universal opt-out signals
Kachiball does not sell Personal Information, does not process it for targeted advertising or cross-context behavioral advertising, and does not use profiling to make decisions that produce legal or similarly significant effects concerning a consumer. Where applicable law requires recognition of a universal opt-out mechanism, we will process a supported signal such as Global Privacy Control. If these practices change, we will provide any required notice, consent, and opt-out method before the change applies.
11.2 California disclosures
For purposes of the California Consumer Privacy Act, as amended (“CCPA”), the table below describes categories of Personal Information Kachiball may have collected in the preceding 12 months, the business or commercial purposes, and categories of recipients. Kachiball did not sell or share these categories for cross-context behavioral advertising. Whether Kachiball is legally subject to the CCPA in a given year depends on the statute’s applicability thresholds.
CCPA category
Examples
Purposes
Recipient categories
Identifiers
Name, email, phone, account ID, IP address, device identifiers.
Provide accounts, bookings, support, security, communications.
Venues you book; payment and service providers; advisers; authorities as required.
Customer records information
Contact information, age or date-of-birth information, limited payment metadata.
Eligibility, transactions, refunds, accounting, fraud prevention.
Payment providers; Venues as needed; service providers; advisers.
Protected classification information
Age and preferred language, if provided.
Confirm eligibility and provide language preferences.
Service providers; Venues only when necessary and lawful.
Commercial information
Bookings, purchase history, prices, fees, refunds, reviews, promotions.
Provide and improve bookings; accounting; support; dispute resolution.
Venues; payment providers; service providers; advisers.
Internet or electronic network activity
Browsing and app activity, interactions, logs, cookies, diagnostics.
Operate, secure, analyze, and improve the Service.
Hosting, analytics, diagnostics, security, and support providers.
Geolocation data
Approximate IP location; precise location with permission; search location.
Show nearby Venues and protect security.
Location and hosting service providers; not sold or shared for advertising.
Audio, electronic, visual, or similar information
Profile photos, photos attached to reviews or reports, support content.
Display User Content, provide support, moderate safety issues.
Service providers; other users when you choose to publish; authorities if required.
Professional or employment-related information
Venue representative title, business contact and listing information.
Venue onboarding and relationship management.
Payment, hosting, support, and professional-service providers.
Inferences
Sports and Venue preferences inferred from use.
Personalize and improve discovery and prevent fraud.
Analytics and hosting providers acting for Kachiball.
Sensitive Personal Information
Account login credentials and precise geolocation when enabled.
Authentication, security, and requested nearby-results functionality.
Service providers necessary for those limited purposes; not sold or shared.
Right to limit Sensitive Personal Information. We use and disclose Sensitive Personal Information only for permitted purposes such as providing requested location functionality, authentication, security, fraud prevention, and service performance. We do not use it to infer characteristics and therefore do not currently provide a “Limit the Use of My Sensitive Personal Information” link.
Financial incentives. We do not offer a financial incentive, loyalty program, or price difference in exchange for Personal Information.
California minors. The Service is for account holders age 18 or older. We do not knowingly sell or share Personal Information of consumers under 16.
Shine the Light. We do not disclose Personal Information to third parties for their own direct-marketing purposes as defined by California Civil Code section 1798.83.
Automated decisionmaking technology. We do not use automated decisionmaking technology to make significant decisions concerning access to employment, housing, education, healthcare, credit, insurance, or essential goods or services. If that changes, we will provide any required pre-use notice and rights.
11.3 Other state-specific information
Oregon. An Oregon resident may request, where applicable, a list of specific third parties to which we disclosed Personal Information.
Nevada. Nevada residents may submit a verified request to opt out of a “sale” of covered information as defined by Nevada law. Kachiball does not currently engage in such sales, but requests may be sent to the privacy email above.
Appeals. Residents of states that provide an appeal right may appeal a refusal by following the instructions in our response. If an appeal is denied, we will identify the appropriate regulator or attorney general when required.
Sensitive data and consent. Where a state requires consent to process sensitive data, Kachiball will request consent before processing beyond an applicable legal exception. We do not use precise location, account credentials, or other sensitive information for targeted advertising.
12. Children and Teens
Kachiball accounts are intended only for individuals who are at least 18 years old. The Service is not directed to children under 13, and we do not knowingly collect Personal Information from a child under 13. If we learn that we collected such information without legally valid authorization, we will delete it. A minor may participate at a Venue only if the Venue permits it and a parent or legal guardian completes any required consent or waiver directly or through a Kachiball flow expressly designed for that purpose. Users should not submit a minor’s Personal Information through the Service unless Kachiball expressly requests it and provides the required notice.
13. Consumer Health and Biometric Information
Kachiball is a sports-venue discovery and booking marketplace, not a healthcare or health-tracking service. We do not use booking or sports-preference information to infer medical conditions, and we do not intentionally collect “consumer health data” for health-related advertising. We do not use facial recognition, voiceprints, fingerprints, or other biometric identifiers or templates to identify users. A profile photo is treated as ordinary visual information and is not analyzed to create a biometric identifier.
14. Processing Location and U.S. Service
The Service is offered for the United States. Personal Information is processed primarily in the United States and may be processed in other locations where our service providers operate. If Kachiball later offers the Service outside the United States, we may provide additional regional notices and transfer protections.
15. Changes to This Policy
We may update this Policy to reflect changes in the Service, data practices, law, or business operations. We will post the updated version, change the “Last updated” date, and provide additional notice when required. Material changes will apply prospectively after the stated effective date. Where law requires consent, we will obtain it before applying the change. We review this Policy at least annually.
16. Contact Us
Questions, privacy requests, or complaints may be sent to privacy@kachiball.com. You may also write to:
Kachiball, Inc. Attention: Privacy 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States
This postal address is Kachiball’s Delaware registered office and is intended for legal and privacy correspondence. Email is the fastest way to reach the privacy team.