Legal
Privacy Policy
Kourt brings players, courts, coaches and shops together. For that to work, it needs to know who plays what, where and when. Here we set out exactly what we keep, why, who sees it and how you delete it.
1. Data controller
The data controller for the data described here is:
Dinami.AI (Kourt)
Athens, Greece
Email: hello@dinami.ai
Wherever we say “we” or “Kourt” below, we mean this company.
2. Contact for data matters
For any request relating to your data — access, rectification, erasure, objection — write to hello@dinami.ai. We reply within one month at the latest, as the Regulation requires. If the request is complex and an extension is needed, we will tell you within the first month.
3. What data we keep
Account details
Name or nickname, email, mobile number if you provide it, profile photo if you upload one, city and area. These are needed so that you can have an account and so that other players can recognise you.
Sports data
Which sports you play, your Level from 1–7 in each one, confirmed match results, Reliability score from 0–100, participation history, rankings and tournaments.
Bookings and payments
Which slots you booked, at which court or lesson, with whom, the amount corresponding to your share, cancellations and credits in your wallet.
Your card details do not pass through us. Payment takes place within Stripe’s environment. We see that a payment succeeded, the amount and the last four digits — never the full number, the expiry date or the CVV. We do not store cards.
Location
The area you state yourself, so that we can show you nearby courts and players. If you grant the app permission, we also use the device’s location for the same purpose. This permission is optional and you can withdraw it in your phone’s settings; the app continues to work with the area you stated.
Technical data
IP address, device type and operating system version, app version, push notification identifier, error logs.
Communications
Messages you send us, and the content of chats with other players within a game.
Partner data
If you are a court, coach or shop: business name, address, tax identification number (AFM), contact details, price list, opening hours, availability and the details Stripe requires in order to pay you.
We do not request and do not want special categories of data — data concerning health, beliefs or anything similar. Please do not enter them in your profile or in chats.
4. Purposes and legal bases
Each processing activity relies on a specific legal basis under Article 6 GDPR:
| What we do | Why | Legal basis |
|---|---|---|
| Account and sign-in | So that you exist on the platform | Performance of a contract — Art. 6(1)(b) |
| Level-based matching | So that you find players who suit you | Performance of a contract — Art. 6(1)(b) |
| Bookings and shares | So that the slot is booked and the bill is settled | Performance of a contract — Art. 6(1)(b) |
| Reliability score | So that others know whether you will turn up | Legitimate interest — Art. 6(1)(f) |
| Abuse prevention | Fake accounts, spam, fraud | Legitimate interest — Art. 6(1)(f) |
| Booking notifications | So that you know when you are playing | Performance of a contract — Art. 6(1)(b) |
| “Your city is now open” email | Pre-launch waiting list | Consent — Art. 6(1)(a) |
| Invoicing and accounting | Tax obligations | Legal obligation — Art. 6(1)(c) |
| Usage statistics | So that we can improve the app | Legitimate interest — Art. 6(1)(f) |
5. Where we get it from
- From you, when you create a profile, state your level or book a slot.
- From your device, automatically: IP, device type, errors.
- From other players, when they confirm a result or report that you did not turn up.
- From partners, when the court confirms or cancels a booking.
- From Stripe, the outcome of the payment.
We do not buy lists and we do not source data from other sources.
6. Who sees it within the app
This is the section worth reading carefully, because Kourt is a platform with other people on it.
- Other players see your name or nickname, photo, area, sports, Level per sport and Reliability score. The score is visible before you are accepted into a game — that is the whole reason it exists.
- Teammates in a game additionally see that you are taking part and the messages you write in the chat.
- The court, coach or shop sees your name, a contact detail and what you booked, to the extent needed to serve you.
- No one sees your email, phone number, financial details or full history.
We do not sell data, we do not exchange it and we do not provide it to third parties for advertising targeting.
7. Processors
We use providers that process data on our behalf, under a contract in accordance with Article 28 GDPR:
| Provider | What it does | What it sees |
|---|---|---|
| Stripe | Payments and payouts to partners | Payment details, amounts, billing details |
| Resend | Transactional email | Email address and message content |
| Hosting provider | Hosting of the app and database | Whatever is stored |
| Apple / Google | Push notifications | Device identifier and notification text |
| Authentication provider | Sign-in and roles | Email, user identifier |
Beyond these, we disclose data only to public authorities where there is a lawful request, and to our lawyers or accountants under confidentiality.
8. Transfers outside the EEA
Some providers have infrastructure in the USA. Where a transfer outside the European Economic Area takes place, it relies on:
- an adequacy decision of the European Commission, where one exists (EU–US Data Privacy Framework), or
- the Commission’s Standard Contractual Clauses (SCCs), with a transfer impact assessment.
You can request a copy of these safeguards.
9. How long we keep it
| Data | Retention |
|---|---|
| Account and profile | For as long as you have it. On deletion, it is removed immediately. |
| Match history and Level | Anonymised on deletion of the account; opponents’ results remain valid. |
| Bookings and accounting records | Five years from the end of the financial year, under tax legislation. |
| Chat messages | Twelve months from the game. |
| Logs | Ninety days. |
| Waiting-list email | Until launch in your city, or until consent is withdrawn. |
The tax obligation takes precedence over an erasure request: the accounting records of a payment cannot be deleted before the retention period expires. Everything else is deleted.
10. Level and Reliability: automated processing
Two numbers are calculated automatically and have consequences for how you use the app. We explain them to you in detail, as Article 22 GDPR requires.
Level 1–7, per sport
It starts from your own estimate and is adjusted after every result confirmed by both sides. It remains provisional until five rated matches have been completed in that particular sport. It affects which players and which games you see.
Reliability 0–100
It starts at 75. It rises gradually when you turn up. Cancelling in good time does not harm it. Not turning up to a booking without notice lowers it by 25 points. Below 60, joining games becomes a “request” instead of immediate — that is, the organiser has to approve you.
It is not a permanent mark and it is not hidden: the app shows you the number, what affected it and what is needed for it to rise. You have the right to human intervention: if you believe a record is wrong — a no-show was reported that did not happen, or the game was cancelled by the court — write to hello@dinami.ai and a human, not an algorithm, will review it. You also have the right to express your point of view and to contest the outcome.
We do not use these numbers for profiling beyond the operation of the platform, and we do not provide them to third parties.
11. Security
The technical and organisational measures are described on the Security page. In short: encryption in transit and at rest, role-based access, an activity log, and card details that we never touch.
If a breach occurs that puts your rights at risk, we notify the HDPA within 72 hours and you without undue delay.
12. Your rights
- Access — a copy of your data.
- Rectification — to change anything that is wrong.
- Erasure — from the app’s settings, with one click, except for whatever tax legislation requires us to keep.
- Restriction of processing.
- Portability — your data in a machine-readable format.
- Objection to processing based on legitimate interest.
- Withdrawal of consent at any time, without affecting the lawfulness of anything done before.
- Human intervention in the automated calculations described in section 10.
Send your request to hello@dinami.ai. We do not charge, except for manifestly unfounded or repetitive requests. We may ask you to verify your identity — so that we do not give your data to someone else.
13. Complaints to the HDPA
If you believe we have mishandled your data, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
Kifisias 1–3, 115 23 Athens · tel. 210 6475600 · www.dpa.gr
We would be glad to resolve it together first, but the right is yours and you do not need to go through us.
14. Minors
An account may be created by anyone aged 15 or over.
A child under 15 may take part in a game or lesson through the account of a parent or guardian, under that parent’s or guardian’s responsibility. We do not create profiles of children under 15 and we do not send notifications to them.
If we discover an account belonging to a child under 15, we delete it. If you are a parent and suspect that your child has created an account, write to hello@dinami.ai.
15. Cookies and local storage
The website does not use tracking cookies. What we store locally in your browser and why is set out on the Cookies page.
16. Changes to this Policy
When something material changes — a new purpose, a new category of data, a new provider — we publish the new version here and change the date at the top. If the change affects you significantly, we will tell you by email or within the app before it takes effect.
Questions: hello@dinami.ai