Privacy Notice

1. Who is responsible

Lucas Alborch, an individual operating Kuwait Volleyball Box, is the data controller for the personal data described here. Contact: the in-app request form.

2. Data we collect and why

• Account data (name, email, password stored in hashed form) — to create and run your account. Legal basis: contract.
• Subscription status (plan, access end date, whether the free trial was used) — to give you access to content. Legal basis: contract.
• Payment requests (the message you write, the method you choose — WAMD, Quick Pay or Other — the amount, and the receipt file you upload) — to confirm your payment and activate access. Legal basis: contract.
• Usage and technical data (IP address, device and browser information, pages viewed) — to keep the Service secure, prevent account sharing and fraud, and fix problems. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: contract / legitimate interests.

We never see or store card details. WAMD and Quick Pay transfers happen inside your own bank app; we keep only the record that your payment arrived and the receipt file you sent us. Receipts are stored in private storage that only we can open.

3. Who we share data with

• Service providers that host and run the Service (cloud hosting, database, video hosting via YouTube);
• Our email provider, which delivers account emails and payment-request notifications to us;
• Your bank and payment networks, for transfers you send us;
• Professional advisers (legal, accounting) where needed;
• Authorities where required by law.

We do not sell your data and we do not use advertising trackers.

4. Retention

We keep account data, subscription status and payment records while your account is open and for up to 2 years after it closes, unless the law requires longer. After that it is deleted or anonymised.

5. Your rights

You can ask to access, correct, delete or export your data, or object to certain uses, through the in-app request form. We will respond within 30 days.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, private storage for receipts and restricted access to data.

7. Cookies

We only use essential cookies and local storage needed to keep you signed in and remember your language. We do not use advertising cookies.