1. Who we are
FlexUp provides a venue-based sports highlight capture service. Players sign in, scan a venue QR code, start a court session, request highlights, and access uploaded highlight clips from their session library.
This policy explains how FlexUp handles personal data in the FlexUp player web app (including when installed as a PWA), venue devices, venue owner portal, admin tools, websites, and related backend services.
2. Information we collect
Account information: name, email address, Google profile photo URL, Firebase user ID, authentication provider data, and basic account status.
Session and venue information: venue, court, QR claim tokens, session IDs, start and end times, highlight request times, device IDs, upload status, and operational logs needed to run the service.
Highlight media and editing data: video highlight clips captured by venue cameras, rendered highlight exports, download URLs, trim settings, crop/zoom settings, branding settings, and related artifact metadata.
App and device information: app version, platform, operating system, network request metadata, IP address, diagnostic logs, crash or error context, and security events.
Camera access in the player web app: the camera is used only to scan FlexUp venue QR codes when a player scans from inside the app. Players can also scan the court QR with the phone camera, which opens FlexUp in the browser. Raw camera frames from the phone are processed for QR detection and are not uploaded or stored by FlexUp.
Communications: messages, support requests, email, WhatsApp, or other contact details you provide when contacting FlexUp.
3. How we use information
To authenticate users, link a player to a venue court, start and end sessions, process highlight requests, upload clips, render social-ready clips, and show the session library.
To operate venue devices, troubleshoot camera or upload issues, prevent abuse of QR codes and device credentials, secure accounts, and maintain service reliability.
To provide venue and company dashboards, including court usage, highlight activity, session history, device status, and operational analytics.
To respond to support requests, improve the product, enforce our terms and policies, and comply with legal obligations.
4. How we share information
Service providers: we use providers such as Google Firebase and Google Cloud services for authentication, hosting, storage, and infrastructure. They process data to help us provide FlexUp.
Venue and company operators: venue owners or authorized staff may access operational data related to their venue, courts, devices, sessions, and highlights.
User-directed sharing: when you download or share a highlight clip to another app or social platform, that sharing is controlled by you and the receiving service's own policies.
Legal and safety reasons: we may disclose information if required by law, to protect rights and safety, to investigate abuse, or to enforce agreements.
We do not sell personal data. The FlexUp player web app does not contain third-party advertising SDKs for consumer ad monetization.
5. Data retention
We keep account, session, venue, analytics, and highlight information for as long as needed to provide the service, support venues, maintain security, resolve disputes, comply with legal obligations, and improve FlexUp.
Highlight clips and rendered exports may be retained until they are deleted through our systems or removed after a valid deletion request. Temporary processing files may be deleted sooner as part of normal operations.
6. Security
We use HTTPS, Firebase authentication, backend authorization, restricted venue device credentials, signed upload URLs, access controls, and operational monitoring to protect FlexUp data.
No system is perfectly secure. You should keep your Google account secure and contact us if you believe your account or session data has been accessed without authorization.
7. Your choices and rights
You can choose not to sign in or not to scan a venue QR code. Some FlexUp features require sign-in and venue session data to function.
You may request access, correction, deletion, or export of personal data by contacting us. We may need to verify your identity before processing a request.
If you want us to delete account-related data or highlight clips connected to your account, submit a request at https://flexup.id/delete-account or contact us using the email below.
8. Children
FlexUp is not directed to children under 13. If we learn that we have collected personal data from a child without appropriate consent, we will take steps to delete it.
9. International processing
FlexUp is based in Indonesia and may process data using service providers and infrastructure in other countries. By using FlexUp, you understand that your information may be processed outside your country of residence where privacy laws may differ.
10. Changes to this policy
We may update this policy as FlexUp changes. If updates are material, we will take reasonable steps to notify users or venue partners. The latest version will remain available on this page.
11. Contact
For privacy requests or questions, contact FlexUp at contact.flexupid@gmail.com.
Location: Sukolilo, Surabaya, East Java, Indonesia.