Privacy Policy

Protecting your data is a top priority for MatchUp. A core promise of the product: your private phone number is never shared with other users or shown publicly. All communication between players and hosts happens exclusively through the in-app chat.

1. Data Controller

The controller responsible for processing personal data in connection with the MatchUp app (app.matchup.bkk) and this website is:

Sky Universe Group Co., Ltd. (บริษัท สกาย ยูนิเวิร์ส กรุ๊ป จำกัด)
1575 New Phetchaburi Road, Makkasan, Ratchathewi, Bangkok 10400, Thailand
Company registration no.: 0105567237081
Email: admin@sky-universe.com

2. What Data We Process

a) Account & sign-in data

To register and sign in, we process your email address and a securely hashed password. Sign-in uses email and password; we send a confirmation link to verify your email address.

b) Profile data

When you create your profile, we process your display name, an optional profile picture, a short bio, your playing position and skill level, and your preferred language. This information is visible to other users so that teams can find and form. A reliability score calculated from your behaviour (e.g. cancellations, check-ins) is also included.

c) Booking & payment data

When you book a game, we process booking status, the booked event, and payment status. Actual payment processing is handled by an external payment provider; full payment details (e.g. card numbers, bank details) are processed there and are not stored on our systems – we store only a reference.

d) Chat & communication data

Messages in event, group, and direct chats are processed and stored so that in-app communication works. Your phone number is never disclosed to other users in this process.

e) Push notifications

If you enable push notifications, we process a device push token to send you updates about bookings, reminders, waitlists, and announcements. You can disable push notifications at any time in your device settings.

f) Venue & location data

For nearby-game search we store the geo-coordinates of venues created by hosts. The app does not continuously track your device location in the background.

g) Photo & camera access

When you set a profile picture, the app – only with your consent – accesses your photos or camera. Only the images you select are processed.

h) Technical usage data

To provide, secure, and troubleshoot the service, technical data such as timestamps and server-side logs are generated.

3. Purposes & Legal Bases

• Performance of a contract: account, profile, bookings, chat, and payment processing – to provide the app's features.
• Legitimate interests: security, abuse and fraud prevention, troubleshooting, and the reliability score to maintain fair community standards.
• Consent: push notifications and photo/camera access. You can withdraw any consent at any time with effect for the future.

Processing is governed by Thailand's Personal Data Protection Act (PDPA); for users in the European Economic Area we additionally follow the principles of the GDPR.

4. Processors & Hosting

To provide the service we use carefully selected service providers that act on our instructions:

• a cloud and database/authentication provider for hosting, storage, and login,
• a push notification service for delivering messages,
• a payment provider for the secure processing of payments.

Processing may also take place on servers outside Thailand. We ensure an adequate level of protection through appropriate agreements.

5. Retention

We keep your data for as long as your account exists and as far as necessary for the purposes stated. After you delete your account, your personal data is deleted or anonymised unless statutory retention obligations (e.g. tax or commercial law for payment records) require otherwise.

6. Your Rights

You have the right to:

• access the data stored about you,
• rectification of inaccurate data,
• erasure of your data,
• restriction of processing,
• data portability,
• object to certain processing and withdraw consent you have given,
• lodge a complaint with the competent supervisory authority.

To exercise your rights, simply contact admin@sky-universe.com.

7. Account & Data Deletion

You can delete your account entirely at any time directly in the app. Alternatively, you can request deletion by emailing admin@sky-universe.com. When the account is deleted, your personal data is removed within the periods described above.

8. Data Security

We use technical and organisational measures to protect your data – including encrypted transmission (TLS), row-level access rules in the database, and separation of sensitive data (e.g. your phone number is kept strictly apart from publicly visible profile data).

9. Children

MatchUp is not directed at children under 13. Minors need the consent of a parent or guardian to use the service where applicable law requires it.

10. Changes to This Policy

We may update this Privacy Policy when the app or legal requirements change. The current version is always available on this page.

11. Contact

For privacy questions, please contact: admin@sky-universe.com