Privacy policy

1. About this app

Ahly Benghazi Management is a private, internal operations app for employees of the Ahly Benghazi Club. The app is provided by HAMMOCK STUDIOS LLC, a company organized under the laws of the State of Missouri, United States. It is not a fan or public app; access is restricted to current employees of the club whose accounts are created and managed by club administration.

If you discovered the app in the Google Play Store and you are not a club employee, please disregard — the app will not function without an account that only the club can issue.

2. Who we are

• Developer / data controller: HAMMOCK STUDIOS LLC, Kansas City, Missouri, United States
• Contact for privacy questions: developer@hammockstudios.com

3. Information we collect

We collect only what we need to operate the app for club staff.

Account information (provided by your club administrator when your account is created):

• Name
• Email address
• Phone number (for contact)
• Job position and role
• Employee ID, if assigned by the club

Operational data you create or interact with in the app, which may include:

• Expense submissions and attached receipt images
• Service records, fuel logs, vehicle data
• Booking records
• Supply inventory data
• Notes, comments, and timestamps on these records

Technical information, automatically collected:

• Crash reports and diagnostic information via Sentry (anonymized device model, OS version, app version, stack trace) — no personal content of your records is included
• Authentication session tokens, stored on your device, never shared

Preferences stored on your device:

• Language (Arabic / English)
• Theme (light / dark)

We do not collect:

• Location data
• Contacts, calendar, microphone, or camera content (other than receipt photos you explicitly capture and upload)
• Advertising identifiers
• Analytics events beyond crash diagnostics
• Photos or files from your device outside of receipts you choose to upload

4. How we use your information

Your information is used solely to:

• Authenticate your access to the app
• Display operational data appropriate to your assigned role
• Maintain the club’s operational records (expenses, receipts, vehicles, supplies, etc.)
• Diagnose and fix crashes via Sentry
• Notify you about activity in the app relevant to your role

We do not use your information for:

• Advertising
• Profiling beyond what’s necessary to assign your role’s permissions
• Sale to any third party

5. Where your information is stored

• Application data (account, operational records, receipt images) is stored on Supabase cloud services.
• Receipt image files are kept on Supabase Storage for approximately six months after the related expense is finalized. After that, the image file is removed from cloud storage and an archival copy is retained on the club’s office computer for longer-term reference. The reference to the image (filename) remains in the database.
• Crash reports are stored on Sentry.io.
• A local copy of operational data is cached on your device so the app can work offline. This local cache is removed when you log out or uninstall the app.

6. Data retention

• Account information: retained while your employment with the club continues, plus a reasonable period afterward for record-keeping. Removed when club administration removes your account.
• Operational records (expenses, receipts, vehicles, supplies, etc.): retained for the club’s record-keeping needs.
• Receipt image files in cloud storage: approximately six months after the related expense is finalized. An archival copy is kept on the club’s office computer for as long as the club requires the records.
• Crash reports: automatically deleted by Sentry after 90 days.

7. Who has access to your information

Within the app, access is enforced by your assigned role. Other employees see only the information necessary for their own role. Club administrators see broader operational data; super-administrators see the most.

Outside the app, your information is accessible only to:

• The app’s developer, for maintenance, debugging, and support
• Sub-processors strictly necessary to provide the service: Supabase (database and storage hosting), Sentry (crash diagnostics), Google Play (app distribution)

We do not sell, rent, or share your information with advertisers or with any third party not listed above.

8. Security

We protect your information through:

• HTTPS encryption for all data in transit
• Encryption at rest provided by Supabase and Sentry
• Role-based access control enforced server-side (Row-Level Security)
• Strict authentication for all access
• No public access to any operational data

No system is perfectly secure. If we become aware of a security incident affecting your information, we will notify you and the club administration.

9. Your rights

You may:

• View your own profile and operational records inside the app
• Request a copy of your account data by contacting us at developer@hammockstudios.com
• Request correction or deletion of your account data by contacting club administration (which manages your account) or contacting us directly
• Withdraw consent — though doing so will end your access to the app

10. Children

The app is intended only for adult employees of the club. We do not knowingly collect information from anyone under the age of 18.

11. International transfers

Supabase and Sentry may store data in regions outside Libya. By using the app, you understand that your information may be transferred to and processed in those regions, which may have data protection laws different from those of your jurisdiction.

12. Changes to this policy

If we change this policy, we will update the “Last updated” date at the top and post the new version at the same URL. If the changes are significant, we will notify club administration so they can inform employees.

13. Contact

For any privacy-related questions, contact:

HAMMOCK STUDIOS LLC Email: developer@hammockstudios.com Kansas City, Missouri, United States