Privacy Policy

Effective date: June 2, 2026 · Last updated: June 2, 2026

This Privacy Policy explains how LetsPlay Inc. (“LetsPlay,” “we,” “us,” or “our”) collects, uses, and protects your personal information when you use the LetsPlay mobile app and related services (the “Service”). LetsPlay is a Canadian company and we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Who we are

LetsPlay Inc. operates a two-sided marketplace for discovering and joining local pickup sports events in Canada. If you have questions about this policy or how your information is handled, contact us at support@letsplayapp.ca.

2. Information we collect

We collect only the information we need to run the Service. The table below lists everything we collect at signup or during use, and whether it is required.

Required at signup

First and last name: Used to identify you to hosts and other participants.
Email address: Used for login, account recovery, and essential notifications.
Password: Stored only as a one-way hash by our authentication provider (Supabase Auth). We never see or store your plaintext password.
Phone number: Used for account verification and so hosts can reach you about event logistics.
Date of birth: Used to confirm you meet the minimum age to use the Service and to enable age-appropriate events.
Gender: Used so hosts can run gender-specific or balanced events when relevant to the sport.

Optional

Favorite sports: Helps us show you events you’re likely to enjoy.
About-me bio: Free-form text you can choose to share on your profile.
Device location: Collected only after you grant your operating system’s location permission. Used to sort and surface nearby events. You can revoke this permission at any time in your device settings.

3. How we use your information

To create and manage your account.
To match you with events near you and let hosts and other participants identify you within the app.
To verify your age and enforce minimum-age requirements.
To enable communication between hosts and participants about event details.
To process payments for paid events (see the next section on Stripe).
To send essential service messages (e.g., booking confirmations, cancellations, and security notices).
To detect, prevent, and respond to fraud, abuse, or violations of our terms.

4. Payments via Stripe

Paid event transactions on LetsPlay are processed by Stripe, Inc., a third-party payment processor. When you pay for an event, your payment card details are submitted directly to Stripe and are never stored on LetsPlay’s servers. We receive only a transaction reference and the amount paid so we can confirm your booking. Stripe’s use of your information is governed by Stripe’s own privacy policy.

5. How we share information

We do not sell your personal information. We share information only in these limited situations:

With hosts and other participants of events you create or join — limited to your first name, last initial, profile photo (if any), and the information you choose to put on your profile.
With trusted service providers who process data on our behalf under contract: Supabase (hosting, database, and authentication) and Stripe (payments). These providers are bound to use your information only to deliver their service to us.
When legally required, such as a valid court order or to protect the rights, safety, or property of LetsPlay, our users, or the public.

6. Location data

Location data is collected only after you grant your device’s location permission, and only while you are using the app to find or host events. We use it to sort events by distance and to surface relevant nearby games. You can revoke location permission at any time in your device’s system settings; the app will continue to work without it, but distance-based sorting will be disabled.

7. Data retention

We retain your personal information for as long as your account is active. When you delete your account (see section 9), we delete your profile and personal information from our active systems within 30 days, except for information we are required to retain for legal, accounting, or fraud-prevention purposes (for example, Stripe transaction records that must be kept under Canadian tax law).

8. Your rights under PIPEDA

You have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Withdraw consent for our use of your information, subject to legal and contractual restrictions (note that withdrawing consent may prevent you from continuing to use the Service).
Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not handled your information appropriately.

To exercise any of these rights, email support@letsplayapp.ca from the address associated with your account.

9. Deleting your account

You can delete your account at any time from inside the LetsPlay app (Profile → Settings → Delete account), or by emailing support@letsplayapp.ca from the address on your account.

When you delete your account, we permanently remove your profile, contact details, and optional information (bio, favorite sports, location) from our active systems within 30 days. Posts and messages you sent to other users may remain visible to those recipients but will be shown as from a deleted account. As noted above, payment records held by Stripe and any records we are legally required to keep will be retained for the minimum period required by law.

10. How we protect your information

All traffic to and from the app is encrypted in transit over HTTPS.
Data at rest is encrypted by our hosting provider, Supabase.
Passwords are stored only as one-way hashes; we cannot recover them and never see them in plaintext.
Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.

11. Children

LetsPlay is not directed to children under 13. We collect date of birth at signup so we can enforce a minimum-age requirement. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through an in-app banner or by email to the address on your account before the changes take effect. The “Last updated” date at the top of this page always reflects the most recent revision.

13. Contact us

Questions, requests, or complaints about privacy at LetsPlay should be sent to support@letsplayapp.ca. We aim to respond within 30 days.