This document is a structural template. Replace all [REVIEW BEFORE PUBLICATION] sections with verified descriptions of actual app functionality and data practices, then obtain appropriate legal review.
01. Who we are
This page describes how ATHiVO (Pvt) Ltd ("ATHIVO", "we", "us") handles personal information in connection with Sportify. You can contact us at privacy@athivo.lk.
[REVIEW BEFORE PUBLICATION] Verify the legal entity name, registered business address, privacy contact, and jurisdiction.
02. Information we collect
[REVIEW BEFORE PUBLICATION] Describe the exact categories of data collected by Sportify: account information, booking information (for Sportify), conversations, audio, avatar/interaction data (for Aura), diagnostic data, device identifiers, and any other applicable personal information. Remove anything not collected; add anything missing.
[REVIEW BEFORE PUBLICATION] State whether information is provided by users, collected automatically, or received from service providers.
03. How we use information
[REVIEW BEFORE PUBLICATION] Explain each actual purpose: delivering the service, managing bookings or conversations, responding to support, protecting accounts, improving reliability, and other real purposes. Include the applicable legal bases if required.
04. Sharing & service providers
[REVIEW BEFORE PUBLICATION] Identify real third-party services and their categories, including analytics, cloud hosting, payments, AI inference/model providers, voice processing, authentication, mapping, or notifications where applicable. Explain whether third parties receive personal data and for what purposes.
05. Storage, security & international transfers
[REVIEW BEFORE PUBLICATION] Describe actual security measures, storage locations, cross-border transfers, and safeguards. Do not claim end-to-end encryption or no retention unless verified.
06. Retention & deletion
[REVIEW BEFORE PUBLICATION] State retention periods or criteria for every meaningful data category, including backups, booking records, voice content, and account information if applicable. Explain what remains for legal or fraud-prevention purposes.
For account and data deletion enquiries, see the account & data deletion page.
07. Your choices and rights
[REVIEW BEFORE PUBLICATION] Explain access, correction, deletion, consent withdrawal, marketing opt-out, and any other applicable rights, plus the method for making requests.
08. Children and sensitive situations
[REVIEW BEFORE PUBLICATION] Define the actual age requirements and safeguards. For Aura, document how emotional-support conversations and potentially sensitive disclosures are handled. Do not represent Aura as clinical therapy.
09. Changes to this policy
We may update this privacy policy as our services evolve. Significant updates will be communicated where required. The effective date will appear at the top of this page.