Privacy Policy

What we collect

Only what the product needs to work. There is no category here that exists to be sold or profiled.

• Your account: name, email address, and a password that is stored only as an argon2id hash. We never hold your password itself.
• Your profile, if you fill it in: handle, bio, about, location, birth date, and how you describe yourself. Every one of these is optional.
• Your sports: which sports you play, your position, and the details you enter about yourself such as jersey number, height and weight.
• Your game record: points, rebounds, assists and the rest, entered by APT staff from actual games. You cannot edit these, and neither can anyone but an admin.
• Technical records: your sign-in sessions, each with the IP address and browser that created it, so you can be told when something signs in as you.
• If you sign in with Google or Facebook: the link between that account and this one, plus the basic profile they return.

What is public, and what is not

Your profile page is public. Anyone with the link can see your name, handle, bio, about, location, age, how you describe yourself, your sports and every stat on them. Treat it as you would any page on the open internet.

Three things are never on it. Your email address is not. Your full birth date is not — the page shows your age in years and nothing more, because a date of birth is what banks and government offices verify against. And if you choose 'prefer not to say' for how you describe yourself, we store the choice and show nothing.

You can clear any optional field at any time from Edit profile, and the page stops showing it immediately.

Why we use it

To run your account and keep it secure, to show your profile to the people you share it with, to keep the record of what you did in APT sessions, and to answer you when you get in touch.

We do not use your data for advertising. There are no ad networks, no trackers, and no analytics products in APT Move. We do not sell your personal information, and we do not share it for anyone else's marketing.

Who else sees it

Very few parties, and each for a stated reason.

• Anyone you give your profile link to, for the public fields above.
• APT admins and coaches, who can see member records in order to enter game stats and run sessions.
• Google or Facebook, but only if you choose to sign in with them, and only to the extent of confirming who you are.
• An AI assistant such as Claude or ChatGPT, but only if you connect one yourself and approve it on a consent screen. It then acts with your permissions and no more, and you can revoke it by asking us.
• Our hosting provider, which stores the database. Nobody there reads your data as part of the service.

Where your data is stored

On a single server in Singapore, in a database we run ourselves. It is close enough to the Philippines to be fast and far enough to be a transfer of your data outside the country, which we are telling you because the Data Privacy Act asks us to.

There is no third-party cloud database, no data warehouse, and no copy of your record anywhere we have not named.

Cookies

One cookie, and it is the one that keeps you signed in. It is httpOnly, so no script on the page can read it, and it is removed when you sign out.

There are no advertising cookies and no third-party tracking cookies on this site, which is why you have not been asked to dismiss a banner about them.

How long we keep it

Your account data stays while your account does. Ask us to delete your account and we remove it, along with your profile, your sports and your stats.

Sign-in session records expire on their own within thirty days. Ordinary server logs are kept briefly for security and troubleshooting, and are not used for anything else.

Your rights

Under the Data Privacy Act of 2012 (RA 10173) you have the right to be told what we hold, to see it, to correct it, to object to how we use it, to have it erased or blocked, to receive a copy in a portable form, and to be compensated for damage caused by its misuse.

Most of these you can exercise without asking: Edit profile lets you see and change everything you have entered. For the rest, write to privacy@apt-move.codasc.dev and we will answer within fifteen working days.

If you think we have handled your data badly, you can complain to us first, and you can complain to the National Privacy Commission whether or not you have.

Children

APT Move is not for anyone under 13, and the sign-up will not accept a birth date that makes you younger. If you believe a child under 13 has an account, tell us and we will remove it.

Changes to this policy

When this changes we update the date at the top of this page. If a change affects what we collect or who sees it, we will say so where you will actually see it rather than relying on you to re-read this.