SportCoin — Maxfiylik siyosati / Privacy Policy

OʻZBEKCHA

1. Ushbu siyosat nimani qamrab oladi

Bu siyosat SportCoin mobil ilovasiga tegishli — undan sport klublarining sportchilari va murabbiylari foydalanadi — hamda klub ma'murlari ishlatadigan veb-platformaga.

2. Ma'lumotlaringiz uchun kim javobgar

SportCoin sport klubi orqali ishlatiladi. Akkauntingizni klubingiz yaratadi, ma'lumotlaringizni kiritadi, davomatingizni belgilaydi, coinlaringizni beradi va to'lovlaringizni hisoblaydi.

Shuning uchun shaxsiy ma'lumotlaringizning egasi — sport klubi; Operator esa dasturiy ta'minotni ishlatadi va ma'lumotlarni klubning topshirig'i asosida qayta ishlaydi.

Ilovada mustaqil ro'yxatdan o'tish yo'q. Klubda akkauntingiz bo'lmasa, SportCoin'dan foydalana olmaysiz.

3. Qanday ma'lumot bilan ishlanadi

Shaxsingiz — klub kiritadi. Ism-familiya, telefon raqam, email, tug'ilgan sana, jins, profil rasmi.

Ota-ona yoki vasiy aloqalari — klub kiritadi. Telefon raqamlari, yozilgan bo'lsa vasiyning ismi va qarindoshlik darajasi. Ilova ularni faqat ko'rsatadi, hech qachon o'zgartirmaydi.

Qo'shimcha ma'lumotlar — faqat klub yozgan bo'lsa. Manzil, hujjat raqami, Telegram va Instagram foydalanuvchi nomlari.

Mashg'ulot yozuvlari — klub yaratadi. Guruh va mashg'ulot jadvali, davomat, sababi bilan berilgan yoki olingan coinlar, jonlar, sinov natijalari va ko'rsatkichlar, to'lovlar va qarz, olingan sovg'alar.

Ilovada o'zingiz yaratadigan ma'lumotlar. Klub so'rovnomalariga javoblaringiz, yuborgan taklif va shikoyatlaringiz, o'ynagan o'yinlaringiz va yig'gan XP.

Texnik ma'lumotlar. Qurilmangizning bildirishnoma tokeni va platformasi (iOS yoki Android). Ilova kunlik ketma-ketlikni sanash uchun qaysi kuni ochilganini qayd etadi.

4. Klub to'lovlari

Sport klubi platformadan foydalanish uchun oylik to'lov qiladi. Bu to'lov veb-platforma orqali amalga oshiriladi va Payme to'lov tizimi xizmatidan foydalaniladi.

Karta ma'lumotlari bizning serverimizga tushmaydi. Biz faqat to'lov muvaffaqiyatli o'tgani haqidagi tasdiqni, summani va tranzaksiya raqamini olamiz. Tranzaksiyaning o'ziga Payme'ning maxfiylik siyosati tatbiq etiladi.

Bu to'lov klub bilan bizning o'rtamizda bo'ladi. Sportchi va ota-onalar ilovaga hech qanday to'lov qilmaydi — ilovada to'lov funksiyasi umuman yo'q.

Xizmat shartlari va narxlar ommaviy ofertada belgilangan: sportcoin.uz/doc/oferta.html

5. Nimani o'zingiz o'zgartira olasiz

Email, jins, tug'ilgan sana, profil rasmi va parol — bularni o'zingiz o'zgartirasiz.

Ism, telefon raqam va ota-onaning raqamlarini ilovadan o'zgartirib bo'lmaydi — ular klubning yozuvi. Tuzatish kerak bo'lsa klubga murojaat qiling.

6. Faqat telefoningizda qoladigan ma'lumotlar

Quyidagilar qurilmangizdan chiqmaydi: tanlagan tilingiz va mavzu, ovoz va tebranish sozlamalari, o'ynagan o'yinlaringiz va natijalari, mashq ketma-ketligi, ko'rgan storylaringiz, hamda ochgan ekranlaringizning oflayn nusxasi — internetsiz ham ishlashi uchun.

O'sha telefonga boshqa akkaunt kirsa, bularning hammasi o'chiriladi. Klublarda telefon birgalikda ishlatiladi va keyingi odam avvalgisining ma'lumotini ko'rmasligi kerak.

7. Ma'lumot yana kimga boradi

Google (Firebase Cloud Messaging) — faqat qurilmangizga bildirishnoma yetkazish uchun. U qurilma tokenini oladi, mashg'ulot yozuvlaringizni emas.

Telegram — klub Telegram bildirishnomalarini yoqqan bo'lsa, u sozlagan xabarlar (masalan davomat yoki coin haqida) Telegram xizmati orqali ota-onaning Telegram akkauntiga yetkaziladi.

Payme — faqat klubning platforma to'lovi uchun, 4-bandda ko'rsatilganidek.

Boshqa hech kimga. Ilovada va platformada:

• reklama va reklama identifikatori yo'q;
• analitika yoki foydalanish kuzatuvi xizmati yo'q;
• hech qanday uchinchi tomon kuzatuvchisi yo'q;
• shaxsiy ma'lumot sotilmaydi va marketing uchun berilmaydi.

Ma'lumot davlat organlariga faqat O'zbekiston Respublikasi qonunchiligi talab qilgan hollardagina beriladi.

8. Ma'lumot qayerda saqlanadi

Shaxsiy ma'lumotlar O'zbekiston Respublikasi hududida joylashgan serverlarda saqlanadi va qayta ishlanadi.

Bundan istisno — bildirishnoma tokenlari: ular Google'ning Firebase Cloud Messaging xizmatiga uzatiladi va mamlakatdan tashqarida qayta ishlanishi mumkin. Bu uzatish faqat qurilma tokeni bilan cheklanadi va bildirishnoma yetkazish uchun zarur. Mashg'ulot yozuvlari va shaxsiy ma'lumotlar chegaradan tashqariga chiqmaydi.

9. Ilova so'raydigan ruxsatlar

Kamera va galereya — faqat profil rasmini tanlaganingizda yoki suratga olganingizda. Rasm klub serveriga yuboriladi va avataringiz bo'ladi.

Bildirishnomalar — klub sizga coin, mashg'ulot va sovg'alar haqida xabar berishi uchun. Tizim so'rashidan oldin ilova nima yuborilishini tushuntiradi, rad etsangiz ilovaning qolgan qismi o'zgarishsiz ishlayveradi.

10. Bolalar

SportCoin'dan maktab yoshidagi sportchilar ham foydalanadi. Akkaunt klub tomonidan, ota-ona yoki vasiyning roziligi bilan, klubning o'z shartlari asosida yaratiladi.

Bola o'zi ro'yxatdan o'ta olmaydi va o'zi haqida yangi ma'lumot kirita olmaydi — u faqat klub yaratgan profilga kiradi.

Ota-ona va vasiylar istalgan vaqtda klubga murojaat qilib, farzandi haqida yozilgan ma'lumotni ko'rishi yoki tuzattirishi mumkin.

11. Saqlash va o'chirish

Ma'lumotlaringiz klubda shug'ullanayotgan vaqtingiz davomida, undan keyin esa klubning hujjat yuritish majburiyatlari talab qilgan muddat davomida saqlanadi.

O'chirish klub orqali so'raladi — yozuvning egasi o'sha. Ilovada o'chirish tugmasi yo'q, chunki sportchining butun tarixini o'chirish klubning qarori va ilova buni o'zi bajara olmaydi. Klub so'rovingizni qonunga muvofiq ko'rib chiqadi.

To'liq tartib: sportcoin.uz/doc/delete-account.html

Klub platformadan foydalanishni to'xtatsa yoki oylik to'lovni amalga oshirmasa, uning ma'lumotlari 30 kun davomida muzlatilgan holatda saqlanadi. Bu muddat ichida klub to'lovni tiklab, ma'lumotlarini qaytarib olishi yoki nusxasini so'rashi mumkin. 30 kundan keyin ma'lumotlar o'chiriladi.

Ilovani telefondan o'chirsangiz, 6-banddagi ma'lumotlar yo'qoladi, lekin klubdagi yozuvingiz o'chmaydi.

12. Xavfsizlik

Ilova, veb-platforma va server o'rtasidagi har bir so'rov HTTPS orqali ketadi. Kirish tokenlari qurilmaning himoyalangan xotirasida saqlanadi (iOS'da Keychain, Android'da EncryptedSharedPreferences), oddiy sozlama fayllarida emas. Parollar hash ko'rinishida saqlanadi va hech qachon o'qiladigan holatda saqlanmaydi.

13. Huquqlaringiz

Siz haqingizda yozilgan ma'lumotni ko'rishni, tuzatishni, o'chirishni so'rashingiz yoki rozilikni qaytarib olishingiz mumkin.

Avval klubingizga murojaat qiling — yozuvning egasi o'sha. Bizga ham yozishingiz mumkin: info@sportcoin.uz — biz so'rovingizni klubga yetkazamiz yoki dasturiy ta'minotga tegishli bo'lsa o'zimiz bajaramiz.

O'zbekiston Respublikasi qonunchiligida belgilangan muddatda javob beramiz.

14. O'zgarishlar

Siyosat o'zgarsa, yangi matnni shu manzilda e'lon qilamiz va yuqoridagi kuchga kirish sanasini yangilaymiz. O'zgarish ma'lumotlaringiz ishlatilishiga jiddiy ta'sir qilsa, sizga ilova yoki platforma orqali xabar beramiz.

ENGLISH

1. What this policy covers

This policy applies to the SportCoin mobile app — used by athletes and coaches of sports clubs — and to the web platform used by club administrators.

2. Who is responsible for your data

SportCoin is used through a sports club. Your club creates your account, enters your details, records your attendance, awards your coins and decides your payments.

The club is therefore the owner of your personal data; the Operator runs the software and processes the data on the club's instructions.

The app does not let anyone register on their own. If you do not have an account at a club, you cannot use SportCoin.

3. What data is processed

Identity, entered by your club. Full name, phone number, email address, date of birth, gender, profile photo.

Contacts of parents or guardians, entered by your club. Phone numbers and, where recorded, the guardian's name and relationship. The app displays these and never changes them.

Other details, only if your club recorded them. Address, document number, Telegram and Instagram usernames.

Training records, created by your club. Group membership and timetable, attendance, coins awarded or deducted with the reason, hearts, test results and progress indicators, payments and outstanding balance, gifts redeemed.

Data you create in the app. Answers to your club's surveys, suggestions and complaints you send, games you play and the experience points you earn.

Technical data. A push notification token for your device, and which platform it is (iOS or Android). The app records the day you opened it, to count your daily streak.

4. Club payments

A sports club pays a monthly fee to use the platform, through the web platform, using the Payme payment service.

Card details never reach our servers. We receive only confirmation that a payment succeeded, the amount, and a transaction reference. Payme's own privacy policy applies to the transaction itself.

This payment is between the club and us. Athletes and parents make no payment through the app — the app has no payment function at all.

5. What you can change yourself

You can change your email address, gender, date of birth, profile photo and password.

You cannot change your name, phone number, or your parents' phone numbers from the app — those belong to your club's records.

6. What stays only on your phone

The following never leaves your device: your chosen language and theme, sound and vibration settings, which games you have played and their scores, your practice streak, which stories you have watched, and an offline copy of the screens you have opened so the app still works without a connection.

When a different account signs in on the same phone, all of it is erased. Clubs share devices, and the next person must not inherit the previous one's data.

7. Who else receives data

Google (Firebase Cloud Messaging) — only to deliver push notifications to your device. It receives the device token, not your training records.

Telegram — where your club has enabled Telegram notifications, the messages it has configured are delivered to the parent's Telegram account through Telegram's service.

Payme — only for the club's platform payment, as described in section 4.

Nobody else. The app and the platform contain no advertising and no advertising identifier, no analytics or usage-tracking service, no third-party trackers of any kind, and no sale or sharing of personal data for marketing.

Data is disclosed to state authorities only where the law of the Republic of Uzbekistan requires it.

8. Where data is stored

Personal data is stored and processed on servers located in the Republic of Uzbekistan.

One exception: push notification tokens are transmitted to Google's Firebase Cloud Messaging service and may be processed outside the country. This transfer is limited to the device token and is necessary to deliver notifications.

9. Permissions the app asks for

Camera and photo library — only when you choose or take a profile picture.

Notifications — so your club can tell you about coins, sessions and gifts. The app explains what will be sent before the system asks, and refusing changes nothing else about how the app works.

10. Children

SportCoin is used by school-age athletes. Accounts are created by the club with the agreement of the parent or guardian, under the club's own enrolment terms.

A child cannot register independently and cannot enter new information about themselves — they only sign in to a profile the club created.

11. Keeping and deleting data

Your data is kept for as long as you train at the club, and afterwards for as long as the club's own record-keeping obligations require.

Deletion is requested through your club, which owns the record. The app has no self-service delete button, because deleting an athlete's history is the club's decision and not something the app can carry out on its own. Full procedure: sportcoin.uz/doc/delete-account.html

Removing the app from your phone erases everything listed in section 6, but does not delete your record at the club.

12. Security

Every request between the app, the web platform and the server travels over HTTPS. Sign-in tokens are held in the device's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android), never in ordinary settings files. Passwords are stored hashed and never in readable form.

13. Your rights

You may ask to see what is recorded about you, ask for it to be corrected, ask for it to be deleted, or withdraw consent.

Address your request to your club first, as the owner of the record. You may also write to us at info@sportcoin.uz.

We respond within the period set by the law of the Republic of Uzbekistan.

14. Changes

If this policy changes we will publish the new version at this address and update the effective date above.