Bawsala Leagues ("Bawsala Leagues", "we", "us") provides software for schools, clubs, and federations to organize and share competitions. This policy explains what information we collect, how we use it, and the choices you have.
Who this applies to
This policy covers people who create an account and organize competitions ("organizers"), the students and families whose details organizers enter to run a competition, and visitors who view public competition pages.
Information we collect
- Account information. When you sign in, we collect your email address. If you sign in with Google, we receive your name, email address, and profile information from Google as permitted by the scopes you approve (email and basic profile). We do not receive your Google password.
- Competition information. Information you enter to run competitions: organization names, league and season names, division and team names, fixtures, scores, and standings.
- Students in individual competitions. Where the entrant is a student (for example an Olympiad or a Quran competition), the organizer enters, imports or approves the student’s name (in English and Arabic), school, grade, and governorate, and the judges record their scores. From these we compute results, medals, and certificates.
- Finalist passes. Each finalist can be given a private pass link with their hall, seat, and times. The organizer may add a guardian’s mobile number to a pass, or import it with the finalist list; it is used only to open WhatsApp with that number on the phone of the organizer or school coordinator who sends the pass. We record when a pass was sent and first opened.
- Registrations and bookings. Registration forms collect a contact name and email and any fields the organizer adds. Festival bookings collect a name, a mobile number or email, school, governorate, party size, the names of students in a school booking, and any access needs the booker chooses to tell us. Player registration forms (a club registering its players) collect the player’s name, email or mobile number, date of birth, and a guardian’s name and mobile number, which only the organizer reviewing the registration can read.
- Technical information. Standard technical data needed to operate the service securely, such as session and authentication data and basic logs.
Running an Olympiad or another student competition does not need a student’s date of birth or photograph, and we do not ask for them there. Students and families never need an account to follow a competition or open a pass. Organizers are responsible for having the right to enter the students’ details they enter, and for not entering sensitive personal data about minors into competition fields.
How we use information
- To provide the service: authenticate you, create your organization, and run and display your competitions.
- To publish the public competition pages you choose to publish, including official results.
- To run the competition day for students: seat and admit finalists, assign judges, compute results and medals, and issue certificates and finalist passes.
- To secure, maintain, and improve the service.
- To communicate with you about your account or the service.
We do not sell your personal information, and we do not show third-party advertising on your competition pages.
What is public
When you publish a competition, the information on that public page, typically team/club names, fixtures, scores, and standings, becomes viewable by anyone with the link. You control whether a competition is published, and you can unpublish it. Unpublished competitions are not publicly visible.
In a competition where the entrants are students, published official results name the students. The published ranking lists them by name, and an Olympiad page shows the top three in each subject with their school and governorate, and medal tables by governorate and by school. Results appear only once the organizer publishes them.
A finalist pass is a private link made of 32 random characters. Anyone who has the link can open it, so families should not forward it. Pass pages ask search engines not to index them. The pass shows the finalist their own score band, which public pages do not show; the organizer can replace a pass link at any time, and the old link then stops working.
How information is stored and shared
We use trusted infrastructure providers to host the application and store data, including:
- Supabase : database and authentication.
- Vercel : application hosting.
- Google : sign-in, if you choose to use it.
These providers process data on our behalf to operate the service. We share information with them only as needed to provide Bawsala Leagues, and we do not otherwise share your personal information with third parties except where required by law.
Connected social media accounts
If you choose to connect a Facebook Page, Instagram account or Telegram channel so that Bawsala Leagues can publish your competition updates to it, we store the connection and an access token issued by that platform. We use them for one purpose only: to publish the posts you have explicitly approved inside Bawsala Leagues.
- We never post anything without a person in your organization approving that exact post first.
- We do not read your messages, followers, comments or private content, and we do not use these connections for advertising or analytics.
- Access tokens are stored server-side, are not readable by any browser, and are erased the moment you disconnect.
- You can disconnect at any time in Settings, or by removing Bawsala Leagues from your Facebook settings. See our data deletion page for what happens then.
Data retention
We keep account and competition information for as long as your account is active. You can ask us to delete your account and associated data (see Contact). Some limited records may be retained where required for security or legal reasons.
Your choices and rights
- You can access and update your competition information from within the app.
- You can unpublish any public competition page at any time.
- You can request deletion of your account and associated personal data by contacting us.
- Depending on your location, you may have additional rights over your personal data; contact us to exercise them.
Children’s privacy
The service is intended to be used by adult organizers (such as teachers, coaches, and administrators). It is not intended for direct use by children, and children do not create accounts. Competitions for students hold the details listed under "Students in individual competitions" above, entered by the schools and organizers who run them, and are used only to run that competition and publish its results. If you believe a child’s personal information has been entered into the service wrongly, contact us and we will remove it.
International users
Bawsala Leagues serves organizers in Oman and the wider Gulf region, among others. Where data is processed, we take steps appropriate to protect it in line with applicable data-protection requirements.
Changes to this policy
We may update this policy from time to time. We will update the "last updated" date above when we do.
Contact
You can reach us about this policy at privacy@asabya.com.