Privacy Policy

Hamro Futsal Privacy Policy

Version: 1.0
Effective Date: August 2026
Yak Stack Solution Pvt. Ltd.

1. Introduction

Welcome to the official Privacy Policy of Hamro Futsal. Hamro Futsal is a digital sports platform, booking application, and facility management service owned, developed, and operated by Yak Stack Solution Pvt. Ltd. ("Company", "We", "Our", or "Us"). Yak Stack Solution Pvt. Ltd. is a private limited company incorporated under the laws of Nepal, with its registered corporate office located at Koteshwor, Kathmandu, Nepal.

This Privacy Policy establishes the framework governing how we collect, process, store, protect, share, and retain information obtained from individuals, registered users, futsal facility operators, and platform visitors ("User", "You", or "Your") who access our mobile application, official website located at https://hamrofutsal.com, Vendor Portal, Super Admin Panel, and associated APIs.

At Yak Stack Solution Pvt. Ltd., we are committed to protecting personal information and handling it in accordance with applicable legal requirements. By downloading, installing, registering an account on, accessing, or using the Hamro Futsal mobile application or web platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any terms or practices described herein, please refrain from using our software, accessing our website, or submitting information to our platform.

Currently, Hamro Futsal operates primarily within Nepal. All data handling practices described in this policy aim to comply with applicable legal guidelines and technical standards relevant to digital services operating within this jurisdiction.

2. Definitions

To ensure complete clarity throughout this document, the following terms are defined and shall carry the meanings set forth below:

"Account" means a unique, authorized digital profile created by a User or Vendor to access features, reserve venues, or manage operational portals on the Hamro Futsal Platform.

"Application" or "App" means the mobile software application titled "Hamro Futsal", available for installation on mobile device operating systems.

"Booking" means a scheduled reservation of a specific futsal court at a designated date, time, and venue made through the Platform.

"Company" refers to Yak Stack Solution Pvt. Ltd., located at Koteshwor, Kathmandu, Nepal.

"FCM" refers to Firebase Cloud Messaging, a service utilized for delivering push notifications and operational alerts.

"Personal Information" means any information that directly or indirectly identifies an individual, including name, phone number, email address, profile picture, date of birth, gender, and physical address.

"Platform" collectively encompasses the Hamro Futsal Mobile Application, Website (https://hamrofutsal.com), Vendor Portal, Super Admin Panel, and related digital APIs.

"Super Admin Panel" means the internal administrative interface managed by authorized personnel of Yak Stack Solution Pvt. Ltd. to monitor operations, verify payments, validate vendor onboardings, and resolve system issues.

"User" means any individual who browses, registers, searches for, or books futsal venues through the Platform.

"Vendor" or "Venue Operator" means an independent business entity, futsal court owner, or designated facility manager authorized to list court availability, accept reservations, and manage operations on the Platform via the Vendor Portal.

"Vendor Portal" means the administrative interface designed specifically for Vendors to manage court listings, view booking schedules, and process customer reservations.

3. Scope of This Privacy Policy

This Privacy Policy applies strictly to interactions, transactions, services, and digital products provided by Yak Stack Solution Pvt. Ltd. through the Hamro Futsal ecosystem.

3.1 Included Services

This policy applies to:

• The Hamro Futsal mobile application installed on user mobile devices.
• The official website hosted at https://hamrofutsal.com.
• The Hamro Futsal Vendor Portal used by venue operators.
• The Super Admin Panel utilized by platform operations personnel.
• Direct communications, notifications, customer support interactions, and payment verification procedures conducted through the Platform.

3.2 Exclusions

This policy does not cover:

• Physical practices, rules, safety standards, or operational conditions maintained independently by third-party futsal venue owners on their physical grounds.
• External web pages, services, or applications linked to from our Platform that are not owned or controlled by Yak Stack Solution Pvt. Ltd.
• Third-party payment gateways, digital wallets, or banking platforms used by users to perform manual fund transfers prior to uploading payment verification screenshots to Hamro Futsal.

4. Information We Collect

To operate a sports venue booking ecosystem, Yak Stack Solution Pvt. Ltd. collects specific personal, transactional, technical, and operational data categories. We aim to collect only data that is necessary to deliver, maintain, secure, and improve our services.

4.1 Personal Identification Information

During User registration, profile creation, and account maintenance, we collect explicit personal identification markers, including:

• Full Name: Used to identify the account holder, process court reservations, and verify identity upon arrival at booked venues.
• Email Address: Used for account verification, password resets, electronic receipts, transactional notices, and customer support.
• Phone Number: Used as a primary authentication key, for issuing One-Time Passwords (OTP), and for urgent Booking communications.
• Date of Birth: Collected to verify age eligibility and support appropriate Platform usage.
• Gender: Collected voluntarily during profile setup for User identification and demographic personalization.
• Address: Used to store User location preferences and provide relevant regional court suggestions.
• Profile Picture: Uploaded voluntarily by the User to personalize the profile and assist venue operators in identifying the Booking holder.

4.2 Account Credentials and Authentication Data

To secure your Account and maintain active user sessions, we process and retain:

• Login Credentials: Hashed passwords and session tokens generated during email and password authentication.
• OTP Verification Logs: Phone numbers, system timestamps, and verification status markers associated with phone OTP creation and confirmation.
• Google Auth Identifiers: Third-party unique account identifiers, display names, and profile picture URLs provided by Google when utilizing Google Sign-In.

4.3 Booking, Operational, and Engagement Information

When Users search, reserve, or interact with venues through the Application, we generate and record operational records:

• Selected Venue and Court: Specific futsal facility and ground identifiers selected for booking.
• Booking Schedule: Date, start time, and duration of court reservations.
• Booking Status Records: Real-time state indicators including "Pending Verification", "Approved", "Rejected", "Completed", or "Canceled".
• Payment Verification Status: State flags indicating whether manual payment screenshots have been submitted, verified, or flagged for review.
• Booking History: Chronological log of past, active, and upcoming court reservations made under an Account.
• Favourite Venues: Saved venues flagged by the User for quick access.
• Ratings and Written Reviews: Star ratings, text feedback, and timestamps submitted by Users evaluating venue experiences.
• Cancellation History: Records of canceled Bookings, including timestamps and submitted reasons.

4.4 Vendor and Partner Business Information

To onboard and manage futsal facility operators, we collect business data via the Vendor Portal:

• Business Information: Official registered business name, legal entity name, firm registration number, and tax identification numbers (PAN/VAT).
• Verification Documents: Uploaded government-issued registration certificates, tax certificates, and legal representative identification documents required to verify operating legitimacy.
• Facility Specifications: Court details, ground turf dimensions, pricing tiers, operating hours, amenities, contact phone numbers, and physical venue address.
• Venue Media: Photographs of courts, amenities, and ground facilities uploaded for public venue listings.

4.5 Financial and Payment Verification Information

Hamro Futsal utilizes a manual payment verification workflow for processing court reservations:

• Payment Screenshots: Digital images or screenshots of transaction completion screens uploaded by Users from domestic digital wallets (e.g., eSewa) or mobile banking applications.
• Transaction Metadata: Associated transaction identification numbers, transfer timestamps, transfer amounts, and payment account holder names visible on submitted screenshots.

4.6 Location Information and Geolocation Processing

To enable nearby venue discovery and display map coordinates, the App processes location data:

• Precise/Approximate Location: GPS coordinates or network-based geographical location captured when location permissions are granted on the mobile device.
• Temporary Processing: Geolocation data is used to calculate proximity to nearby venues and filter search results. Geolocation coordinates are processed during active venue searches.

4.7 Technical Device Information

When accessing the App or web Platform, our infrastructure captures basic device telemetry required for software stability and session delivery:

• Device Characteristics: Device model, hardware manufacturer, operating system version, and basic screen configuration parameters.
• Network & Identifiers: IP address, network connection type (Wi-Fi/Cellular), unique device identifiers, and FCM registration tokens used for push notifications.
• Basic Technical Logs: Standard server access logs and system response parameters generated during active user sessions to support operational stability.

5. Information We Do Not Collect

To ensure transparency regarding your financial privacy and personal data boundaries, Hamro Futsal explicitly does not collect or store the following categories of information:

• Payment Card Data: We do not collect, handle, process, or store debit card numbers, credit card numbers, Primary Account Numbers (PAN), Card Verification Values (CVV/CVC), or card expiration dates.
• Direct Banking Credentials: We do not collect or store internet banking usernames, PINs, or passwords for any financial institution or digital wallet.

6. How Information Is Collected

We collect data through direct User input, automated background technologies, and essential service integrations.

6.1 Direct User Submissions

Information is collected directly when you:

• Fill out the Account registration form on the mobile Application or website.
• Update your profile details, upload a profile photo, or set location preferences.
• Select a futsal venue, pick a court, and initiate a reservation.
• Upload payment confirmation screenshots via eSewa or direct bank transfer.
• Submit star ratings and written reviews for visited venues.
• Submit business registration documents through the Vendor Portal.
• Contact our support team via email or support channels.

6.2 Automated Technical Data Collection

Information is automatically gathered through the App and website when you:

• Open or navigate through the Hamro Futsal mobile App or web Platform.
• Perform venue searches using proximity features, which invoke location processing.
• Interact with features that require active session management and push messaging registration tokens.

6.3 Third-Party Authentication and Service Providers

Information is received from third parties when you:

• Select Google Sign-In to authenticate your Account. Google provides your primary email address, account identifier, full name, and profile picture URL.
• Receive phone authentication OTPs transmitted through our designated SMS gateway providers.

7. How We Use Information

Yak Stack Solution Pvt. Ltd. processes collected data strictly for defined operational, technical, legal, and transactional purposes necessary to operate the Hamro Futsal Platform.

7.1 Core Service Delivery and Account Management

• Setting up, maintaining, and securing individual User and Vendor Accounts.
• Authenticating Account access via passwords, phone OTPs, or Google Sign-In.
• Processing, scheduling, and confirming futsal court reservations between Users and Vendors.
• Displaying Booking histories, saved favourite venues, and User Account settings.

7.2 Manual Payment Verification and Financial Processing

• Reviewing uploaded payment screenshots (eSewa, bank transfers) to verify that funds match reservation costs.
• Updating Booking statuses from "Pending Verification" to "Approved" or "Rejected" based on manual financial verification performed by Super Admins or Vendors.
• Maintaining basic financial transaction records for dispute resolution and internal auditing.

7.3 Vendor Administration and Infrastructure Integrity

• Reviewing submitted business registration numbers and legal documents to verify venue legitimacy before approving Vendor Portal access.
• Enabling Vendors to view incoming court reservations, verify payment status, and manage physical ground availability.
• Maintaining the Super Admin Panel to audit Platform activities, resolve User issues, and manage facility operations.

7.4 System Security, Fraud Prevention, and Platform Improvement

• Transmitting operational notifications, OTP verification codes, and Booking alerts via Firebase Cloud Messaging (FCM) or SMS gateways.
• Detecting and preventing fraudulent Bookings, fake payment screenshot uploads, unauthorized Platform access, and security breaches.
• Troubleshooting technical errors, maintaining mobile App performance, and supporting server stability.
• Complying with applicable legal obligations and official regulatory requests in Nepal.

8. User Accounts and Authentication

8.1 Account Registration Options

Users can register and authenticate their Accounts through supported methods:

• Email Address and Password: Requires entering a valid email address, full name, phone number, and a unique password.
• Phone Number OTP: Requires providing a valid mobile phone number. A temporary One-Time Password (OTP) is delivered via SMS for identity verification.
• Google Sign-In: Authenticates using your existing Google account. Upon authorization, Google shares your primary email address, full name, and profile photo URL with Hamro Futsal.

8.2 Credential Storage and Password Hashing

We place high importance on protecting stored credentials. User passwords are never saved in cleartext format. Password strings undergo cryptographic hashing using secure, industry-standard algorithms before being committed to our databases.

Authentication tokens generated for session management are stored locally on device storage using secure key-value stores provided by the mobile operating system.

9. Booking Information and Reservation Management

When a User initiates a futsal reservation through the Platform, the generated Booking details—including User contact name, phone number, selected date, court identifier, and time slot—are transmitted to the designated Vendor via the Vendor Portal.

This processing is necessary to enable the Vendor to fulfill the reservation, manage court schedules, and verify the identity of players upon arrival at the physical venue.

Vendors receive access only to customer details associated with Bookings made at their respective facilities.

10. Vendor Information and Verification

To ensure customer safety, facilitate valid business invoicing, and maintain service quality, Yak Stack Solution Pvt. Ltd. verifies the business identity of all Venue Operators on the Vendor Portal.

Submitted official documents, including company registration certificates, PAN/VAT certificates, and identification details of legal representatives, are stored securely on our infrastructure hosted on Amazon Web Services (AWS) Virtual Private Servers (VPS). Access to these documents is restricted exclusively to authorized administrative personnel managing the Super Admin Panel.

11. Payment Verification, Financial Safeguards, and Fraud Prevention

Hamro Futsal operates a manual verification process for court payments. Users executing transactions via domestic digital wallets (e.g., eSewa) or direct mobile banking transfers must upload a clear digital screenshot of the successful transfer screen.

• Verification Purpose: Uploaded screenshots are reviewed manually by Vendors or Super Admins to verify that the transfer amount, destination account, timestamp, and transaction ID correspond correctly to the selected court reservation.
• Fraud Safeguards: Images submitted for verification undergo basic image analysis to detect altered text, duplicate transaction IDs, or reused receipts. Uploading forged payment proofs constitutes a material violation of our terms of service and may lead to Account suspension, Booking forfeiture, and potential referral to relevant legal authorities.

12. Location Services and Nearby Discovery Features

To deliver core discovery functionality, Hamro Futsal requests access to your mobile device's geolocation permissions.

• Usage Scope: Geolocation data is used to calculate proximity distance, sort court availability by location, and render interactive mapping interfaces.
• User Control: Location access is entirely optional. Users may disable location permissions at any time via device system settings. Disabling location services will not block App access, but proximity-based sorting features will require manual address input or default to standard listings.

13. Device Information

Our system collects technical device data to maintain session connections, route push notifications, and monitor system health. Device specifications, OS build numbers, and FCM tokens are bound to active Account sessions. These identifiers are processed strictly for session authentication, technical maintenance, and operational delivery.

14. Mobile Device Permissions Framework

To provide full functionality, the Hamro Futsal mobile App may request the following system permissions on your mobile device:

• Location Permission: Required to identify nearby futsal grounds and calculate proximity distances.
• Camera / Storage / Photo Library Permission: Required to allow Users to upload payment screenshots or set profile pictures, and to allow Vendors to upload court photographs.
• Push Notification Permission: Required to deliver real-time updates regarding Booking confirmations, schedule modifications, payment approvals, and operational alerts.

Users retain full control over these permissions and can grant or revoke them at any time through their device settings.

15. Notifications and Communication Policies

By creating an Account on the Platform, you agree to receive essential transactional and operational communications from Hamro Futsal.

• Transactional Messages: Includes phone OTPs, reservation receipts, payment verification status updates, court schedule modifications, and Account security alerts.
• Delivery Channels: Delivered via push notifications through Firebase Cloud Messaging (FCM), SMS channels, or direct email messages.
• Marketing Communications: Promotional messages or seasonal court offers are sent only where permitted, and Users may opt out of promotional communications at any time via in-app preferences or link instructions in the email.

16. Cookies and Web Tracking Technologies

Our website hosted at https://hamrofutsal.com utilizes session cookies and essential local browser storage mechanisms.

• Purpose: Cookies are used to maintain active administrative logins, preserve regional language preferences, and secure web application firewall interactions.
• Control Options: Users can configure their browser settings to decline cookies or display alerts when cookies are transmitted.

Please note that disabling essential session cookies may limit functionality on web portals.

17. Reviews, Ratings, and User Content

Users who complete a venue reservation may submit star ratings and written reviews evaluating the facility.

• Public Display: Feedback, star ratings, and display names submitted by Users are publicly visible on court listing profiles to assist the community.
• Content Guidelines: Reviews must reflect genuine customer experiences and remain free of offensive language, spam, or promotional material. Yak Stack Solution Pvt. Ltd. reserves the right to moderate or remove content that violates platform terms.

18. Information Sharing and Data Disclosures

Yak Stack Solution Pvt. Ltd. does not sell, rent, or trade your personal information to third parties. We disclose personal data only under the following defined operational and legal conditions:

• Venue Operators / Vendors: Customer identity details and Booking parameters are shared with the specific futsal operator handling your reservation.
• Infrastructure and Service Providers: Data is processed through established technical service providers, including Amazon Web Services (AWS) for secure VPS hosting, Firebase for messaging/auth infrastructure, and SMS gateway providers for OTP delivery.
• Legal and Regulatory Disclosures: We may disclose personal data if required to do so by applicable law, court order, or formal request from government authorities in Nepal.
• Business Transfers: In the event of a merger, acquisition, corporate reorganization, or sale of company assets, User data may be transferred to the succeeding entity, subject to the continuous protections outlined in this Privacy Policy.

19. Third-Party Integrations and Infrastructure Providers

Hamro Futsal integrates dedicated third-party infrastructure components to support platform availability and operational workflows:

• Amazon Web Services (AWS): Provides Virtual Private Server (VPS) hosting and backend database storage within secured server environments.
• Firebase Cloud Messaging (FCM): Delivers push notification services and session messaging to mobile application instances.
• Google Sign-In: Facilitates federated OAuth 2.0 single sign-on services for User authentication.
• SMS Gateway Providers: Transmits One-Time Password (OTP) verification codes to mobile numbers during registration and account recovery.

Each third-party service provider processes data strictly within the bounds necessary to perform its specific platform integration role.

20. Security Measures and Infrastructure Safeguards

Yak Stack Solution Pvt. Ltd. implements reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, or misuse.

• Encryption in Transit: Web and mobile API communications are secured using HTTPS and Transport Layer Security (TLS) encryption protocols.
• Administrative Access Controls: Access to databases, the Super Admin Panel, and sensitive verification documents is restricted strictly to authorized operational personnel using role-based authentication.
• Secure VPS Hosting: Infrastructure is deployed on secure cloud environments hosted on AWS VPS, monitored for security patches and system integrity.

While we apply industry-standard protections, no internet transmission or electronic storage method can be guaranteed as 100% secure. Users remain responsible for maintaining the confidentiality of their Account password and login credentials.

21. Data Retention, Archiving, and Disposal Policy

We retain Personal Information only for as long as necessary to fulfill the purposes set out in this Privacy Policy, satisfy legal and accounting requirements, or resolve operational disputes.

• Account Data: Maintained for the duration of an active Account profile.
• Booking and Financial Verification Records: Preserved for audit, dispute resolution, and legal compliance purposes in accordance with applicable laws in Nepal.
• System Log Files: Technical session logs and temporary data caches are periodically purged or anonymized.
• Data Disposal: When personal records are no longer required, they are permanently erased or anonymized using secure data sanitization procedures.

22. User Rights and Data Choices

In accordance with applicable privacy guidelines, Users maintain control over their Personal Information:

• Access and Correction: You can view, update, or correct your personal profile information directly within the Application's account profile settings.
• Permission Revocation: You may revoke device-level permissions (such as location access or push notifications) at any time through your mobile device system settings.
• Account Deactivation and Deletion: Users wishing to delete or deactivate their Account and associated personal records may submit a formal request to our support team at support@hamrofutsal.com. Upon receipt and identity verification, our team will process the account deletion request in accordance with applicable retention obligations.

23. Children's Privacy

Hamro Futsal is designed for general audiences and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental or legal guardian consent. If we learn that a child under 13 has submitted personal information to us without appropriate authorization, we will take steps to promptly remove that data from our systems.

24. International Data Transfers and Regional Operations

Hamro Futsal operates primarily within Nepal. Information collected through the Platform is stored and processed on secure server infrastructure on AWS. By using our Platform, you acknowledge that your information will be processed within our cloud infrastructure and local operational systems in accordance with the safeguards set forth in this Privacy Policy.

25. Changes and Updates to This Privacy Policy

Yak Stack Solution Pvt. Ltd. reserves the right to modify or update this Privacy Policy at any time to reflect changing operational practices, technical integrations, or legal standards.

When updates occur, the updated policy will be posted on the Platform with a revised "Last Updated" date. For significant updates affecting User rights, we will provide noticeable notice, such as an in-app notification, web banner, or email alert. Your continued use of the Platform after an update constitutes acceptance of the revised Privacy Policy.

26. Contact Information

If you have questions, feedback, or data privacy requests regarding this Privacy Policy or our data handling practices, please reach out to us using the contact details below:

Company: Yak Stack Solution Pvt. Ltd.
Product: Hamro Futsal
Website: https://hamrofutsal.com
Email: support@hamrofutsal.com
Location: Koteshwor, Kathmandu, Nepal

27. Version History

Version	Effective Date	Revision Notes
1.0	August 2026	Initial publication of the official Hamro Futsal Privacy Policy.