Privacy Policy

1. Scope and Philippine Legal Framework

This Privacy Policy explains how HustlX collects, uses, stores, shares, and protects personal data when you use our website, mobile apps (iOS and Android), profiles, leagues, teams, trainings, live scoring, HustlX TV livestreaming and replays, communities, officials and courts surfaces, support, and subscription-related flows.

The data controller responsible for personal data processed across the HustlX brand - including the HustlX main app, the HustlX Officials portal, and the HustlX Courts admin - is HustlX Information Technology Solutions (“HustlX”, “we”, “us”, “our”).

HustlX processes personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC).

2. Personal Data We Collect

• Account and authentication data, such as your email address, password, email verification status, authentication tokens, and sign-in metadata.
• Profile and identity data, such as your first name, last name, display name, username, date of birth, bio, avatar, and profile banner or thumbnail.
• Sports and participation data, such as selected sports, positions, roles, skills, team and organization memberships, join requests, attendance, player status, competition activity, and related rankings, statistics, or leaderboard data.
• Athlete profile data you choose to provide, such as height, weight, wingspan, vertical jump, jersey information, and other sports profile fields.
• Location data, such as location name, address, address lines, barangay, city or municipality, region, postal code, place ID, pin-link information, and latitude or longitude when submitted.
• Content and media you upload or submit, such as profile images, organization or team media, league or training thumbnails, descriptions, editor images, and community or promotional content.
• Livestreaming and HustlX TV data, such as broadcast metadata, scorebug overlay content, ingest endpoints, recording status, replay availability, and viewer engagement metrics for events you organize, participate in, or watch.
• Mobile companion data, such as device identifiers, push-notification tokens, app version, and crash diagnostics from our iOS and Android apps, used to deliver notifications and support troubleshooting.
• Payment and subscription-related data, such as payment method labels, account names, account numbers, QR images, payment references, manual payment notes, and proof-of-payment files or receipt uploads.
• Technical, security, and usage data, such as IP address, device or browser information, logs, cookies, local storage and session storage data, pageview analytics, notification-channel authentication, and session replay data when troubleshooting or similar replay functionality is enabled.
• Commercial placement metrics, such as aggregated impression and click counts, placement keys, public context type, surface, coarse delivery timing, and related operational metadata for sponsor, partner, house, or ad placements.
• Communications and support data, such as support emails, request details, screenshots, and other attachments you send us.

3. How We Use Personal Data

• To create, verify, secure, and manage accounts and sessions.
• To operate player, team, organization, league, training, and live scoring features.
• To display profiles, schedules, standings, statistics, leaderboards, media, and other platform content according to the product design and visibility settings.
• To process join requests, invitations, organization workflows, subscription requests, manual payment verification, and related administrative actions.
• To provide customer support, respond to privacy requests, and handle disputes, abuse reports, or security incidents.
• To improve reliability, performance, analytics, and platform security.
• To serve labeled commercial placements and measure aggregated placement performance without building behavioral advertising profiles in the current v1 implementation.
• To comply with legal obligations, enforce our terms, and establish, exercise, or defend legal claims.

4. Legal Bases or Lawful Criteria for Processing

Depending on the processing activity, HustlX may rely on consent, contract necessity, legitimate interests, compliance with legal obligations, or other lawful criteria recognized under the Data Privacy Act. Where sensitive personal information is involved, we process it only when permitted by law and with appropriate safeguards.

5. Public Content and Visibility

Certain platform pages and records may be public by default, including player, team, organization, league, training, standings, and leaderboard content. Information you or your organization publish in those areas may be visible to other users and, in some cases, to the public internet.

Some privacy controls shown in the product are still evolving. Until more granular controls are fully implemented, please assume that profile and competition-related content may be visible according to the current public-facing design of the platform.

6. Livestreaming, HustlX TV, and Recordings

When you participate in, officiate, or attend an event that is livestreamed or recorded through HustlX TV, audio, video, statistics, and overlays may be captured, processed, stored, and made available to viewers in line with the event's visibility settings. Organizers are responsible for collecting the consents required for athletes, coaches, officials, spectators, and minors before streaming or recording.

Recordings may be retained for replay, archive, dispute, and platform-operations purposes. You may request review or removal of HustlX TV content involving you by contacting support@hustlx.com and providing enough detail to identify the event and content.

7. Cookies, Local Storage, Session Storage, and Analytics

HustlX uses cookies and similar browser storage to operate and secure the service, remember preferences, keep you signed in, preserve draft or session state, support game-day workflows, and improve reliability.

We also use analytics tooling to measure usage and pageviews. Session replay is disabled by default in our current configuration, but may be enabled in limited troubleshooting, administrative, or comparable contexts. Your browser settings may allow you to block certain cookies or storage features, but some parts of the service may not work properly if you do so.

8. Commercial Placements and Aggregated Metrics

HustlX may show labeled sponsor, partner, house, or ad placements on surfaces such as league pages, match pages, official profiles, official programs, courts, trainings, and related management tools. In the current implementation, commercial delivery is contextual, not behavioral: placements are selected based on surface, placement slot, organization, league, match, court, official profile, or similar public operating context, not by building private interest profiles about individual users.

We may record aggregated impression and click metrics for commercial placements, including placement identifiers, creative identifiers, public context, surface, event type, and coarse timing. These metrics help sponsors, advertisers, organizers, and HustlX understand whether a placement loaded or was clicked. We do not provide sponsors with private contact details or individual profile-level targeting data as part of this v1 commercial placement system.

Commercial categories that may be sensitive for youth sports, regulated products, political messaging, gambling-adjacent services, medical or supplement claims, financial offers, contests, or similar promotions may require additional review or may be blocked pending legal or platform approval.

9. Sharing of Information

We do not sell personal data. We may share data with trusted service providers and processors that support hosting, backend operations, authentication, file storage, security, analytics, mapping, realtime notifications, and customer support under confidentiality and data protection controls.

Based on the current platform configuration, these services may include S3-compatible object storage for uploads, Ably for realtime notifications, PostHog for analytics, and Google services for authentication or map or location-related features when those features are used or enabled.

We may also disclose personal data to organization admins, coaches, team managers, league or training organizers, and other participants when reasonably necessary to operate the platform and the competitions or programs you join, as well as to regulators, law enforcement, or professional advisers when required by law or needed to protect rights and security.

10. Cross-Border Processing

Some service providers may process or store personal data outside the Philippines. When cross-border processing occurs, we use contractual, technical, and organizational safeguards appropriate to the nature of the data and the processing activity.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including account administration, platform operations, competition records, dispute handling, fraud prevention, security, backup and recovery, lawful business needs, and legal or regulatory obligations.

Retention periods may vary depending on the type of data. For example, public competition records may remain visible while a league, team, or profile stays active; payment proofs may be retained for audit, verification, and dispute purposes; and backup copies may persist for a limited period before secure deletion or overwrite.

12. Security and Breach Response

We implement organizational, physical, and technical safeguards to protect personal data. If a qualifying personal data breach occurs, we notify affected data subjects and the NPC as required by Philippine law, including applicable breach notification timelines.

13. Your Rights Under Philippine Data Privacy Law

Subject to applicable law and identity verification, you may exercise your rights to be informed, access, correct, object, erase or block, data portability, damages where applicable, and to lodge a complaint with the NPC.

Where allowed by law, parents or lawful guardians may exercise privacy rights on behalf of minors under their care.

14. Minors and Third-Party Data

HustlX may be used in sports contexts that involve minors. If you are a minor, or if you submit personal data relating to a minor or another person, you must have the authority and permissions required by applicable law, school, club, league, team, or parental or guardian arrangements.

Organizations and individuals using HustlX for youth programs are responsible for making sure that any required notices, permissions, authorizations, and internal policies are in place before they upload or publish player data, media, statistics, or payment records.

15. Privacy Requests and Contact

For access, correction, deletion, objection, or other privacy-related requests, contact us at support@hustlx.com or through our Contact Support page and include enough account details for verification.

If you believe your rights under the Data Privacy Act have been violated, you may also lodge a complaint with the National Privacy Commission .

16. Policy Updates

We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.