Mixly ← Back to site

Legal

Privacy Policy

MVP v1.3 · PDPA-aligned · App Store submission release Document version 1.3 · App version: Mixly 1.0.0 Operated by Mixly Pte. Ltd. (UEN 202627688W), Singapore Effective date: 13 August 2026 · Last updated: 13 August 2026 Applies to the Mixly mobile application and mixly.sg

Quick summary

This section is a plain-English summary. The full legally binding terms are below. If anything in the summary conflicts with the detailed sections, the detailed sections govern.

The short answer to……in plain English
Who runs Mixly?Mixly is operated by Mixly Pte. Ltd., a private limited company incorporated in Singapore (UEN 202627688W).
How old do I have to be?16 or over. Mixly is not for under-16s and we do not knowingly collect their data.
What data do you collect?Your name, email, profile photo, real-time location (only when you allow it), your in-app activity, your attendance and reliability record, and, if you use cost-sharing, what you owe or are owed and who you paid.
Do you sell my data?No. We never sell your personal data. Ever. We may share anonymised, aggregated insights that cannot identify you (Section 7.6).
Do you track me for ads?No. We use no advertising identifiers and do not track you across other companies’ apps or websites.
Who handles payments?Nobody. There are no payments in this version of the app. Mixly does not process, hold or move money. We calculate who owes what; you pay each other directly, outside the app. We never see your bank account or card.
Can other people see my details?Players in a game see your name, photo and reliability badge. If you host a shared-cost game they also see each person's share, and the PayNow number you added if you chose to add one. We never ask for a card, a bank account or a QR code.
Can I delete it all?Yes. Settings > Account > Delete Account. We delete within 30 days, except records the law requires us to keep.
Where is it stored?Mostly Singapore. Some providers process data outside Singapore, in the United States and Germany, under PDPA-compliant safeguards. The full list is in Section 7.2.
How do I reach you?Email privacy@mixly.sg for any data or privacy question. We respond within 30 days as required by the PDPA.

1. Who we are

Mixly is a social sports application that helps users in Singapore find, join and host casual pickup games.

Operator: Mixly is operated by Mixly Pte. Ltd. (the “Company”, “we”, “us”, “our”), a private company limited by shares incorporated in the Republic of Singapore.

Reference: This Privacy Policy is governed by the Personal Data Protection Act 2012 of Singapore (“PDPA”) and is designed to comply with the PDPA obligations, including Consent, Notification, Purpose Limitation, Access and Correction, Accuracy, Protection, Retention Limitation, Transfer Limitation, Accountability, Data Breach Notification and Data Portability.

2. Scope of this policy

This Privacy Policy applies to all personal data collected, used or disclosed through:

Intended for Singapore. Mixly is intended for users located in Singapore. It is not directed at, or marketed to, individuals in other jurisdictions. If you access Mixly from outside Singapore, you do so on your own initiative and are responsible for compliance with your local laws.

When you create an account, you are asked to read and expressly agree to this Privacy Policy and our Terms of Service before your account is created. By creating an account or using Mixly, you confirm that you have read, understood and consented to the collection, use and disclosure of your personal data as described in this Policy.

3. Personal data we collect

We collect only the personal data reasonably necessary to provide the Mixly service. This satisfies the Purpose Limitation Obligation under Section 18 of the PDPA.

3.1 Account information

A note on “Sign in with Apple” and hidden email addresses. Apple lets you hide your real email address when you sign in. If you choose to do that, Apple gives us a private relay address ending in @privaterelay.appleid.com instead of your real one, and forwards our messages to you. In that case the relay address is what we hold and use. We never receive your real email address, and Apple sits between us. You can stop the forwarding at any time in your Apple ID settings, but if you do, we will no longer be able to reach you by email.

3.2 Location data

3.3 Activity data

3.4 Attendance and reliability data

Because Mixly depends on people turning up, we keep a simple record of reliability:

This is personal data about you, and it is visible to other users. Your reliability badge is shown on your profile and to everyone on the roster of any game you join. It is calculated from recorded facts only. There is no rating, review or star voting by other users. Whether a shared cost was paid has no effect on it. How the record is worked out is set out in our Terms of Service, and your right to ask us to correct it is in Section 12.2 below.

3.5 Technical and diagnostic data

3.6 Communications

3.7 Cost-sharing data

Mixly does not process payments. There is no payment feature in this version of the app. We never receive, hold or move money, and we never see your card details or your bank account. Money moves directly between players and hosts, outside Mixly. What we hold is a record of what the app calculated and what each person told us.

Where a host sets a cost for a game, we collect and hold:

These records show what each person stated, not what a bank did. Mixly has no visibility of any bank account and does not verify that any payment was actually made.

A PayNow identifier you add is shown to that game's players. If you host a shared-cost game and choose to enter one, it is displayed to the players who have joined that game, so they can pay you. It is never on the public game listing, and someone browsing without joining cannot see it. If you would rather not show it, leave the field empty and arrange payment with your players directly.

If you are 16 or 17, note that adding a PayNow number means your mobile number is visible to everyone who joins that game, which may include adults you have not met. We encourage you to speak to a parent or guardian first. You can host shared-cost games without adding one.

3.8 Safety and incident reports

Because Mixly connects people for in-person games, safety matters to us. If you report another user, a game or a chat message, for example for harassment, a safety concern, a no-show, or a breach of our rules, or if another user reports you, we collect the details of the report, including what is submitted and the relevant account, game and message information. We use this to investigate and keep the community safe (see Sections 5 and 7.4). Reports are delivered to our support address through an external email provider (see Section 7.2).

4. App permissions

Mixly requests the following device permissions. You can grant or revoke each one individually in your device settings at any time:

Revoking a permission may limit certain features, but will not prevent you from using Mixly.

5. How we use your personal data

Under the Purpose Limitation Obligation (Section 18, PDPA), we use your personal data only for the following purposes:

We will not use your personal data for any purpose materially different from those listed above without first notifying you and, where required, obtaining fresh consent in accordance with the PDPA.

6. Legal basis for collection, use and disclosure

Under the PDPA, we rely on the following legal bases:

7. Sharing with third parties

We do not sell, rent, trade or otherwise commercialise your personal data. We share personal data only in the limited circumstances described below. For anonymised, non-identifying insights, see Section 7.6.

7.1 Service providers

We share data with third-party service providers who help us operate the platform. We require all such providers to handle your data to a standard at least as strong as required under the PDPA.

7.2 Specific service providers

As of the Effective Date, the following service providers may process your personal data through the Mixly app:

No payment processor. Because Mixly does not process payments, no payment processor receives your data and no card, bank or identity-verification data is collected by anyone on our behalf.

No advertising tracking. Mixly does not use advertising identifiers and does not track you across other companies’ apps or websites for advertising.

7.3 Other Mixly users

Some information is visible to other users. This is unavoidable in a service that connects people to play sport together, and it is limited to the following:

Hosts who receive participant information are required by our Terms of Service to use it only to run that specific game, not to retain or share it, and to comply with the PDPA. We ask you to bear in mind that once another user has seen information about you, we cannot recall it on your behalf.

7.4 Legal and safety disclosures

We may disclose your personal data to law enforcement or regulatory authorities where:

7.5 Business transfers

If Mixly Pte. Ltd. is involved in a merger, acquisition, or sale of all or part of its business, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer.

7.6 Aggregated and anonymised insights

We may create aggregated and de-identified statistics and insights that do not identify any individual, for example, trends in sports participation by area, venue, time or sport. Because this information cannot be used to identify you, it is not personal data under the PDPA, and we may use, retain and share it with third parties (including commercial and venue partners) for research, analytics and business purposes. We will never sell data that identifies you.

7.7 Our website (mixly.sg)

Our website uses no analytics, no advertising or behavioural tracking, no cookies, and no consent banner. We do not track visitors. Two limited third-party data flows exist:

8. Data retention

In accordance with the Retention Limitation Obligation (Section 25, PDPA), we retain personal data only for as long as it serves the purposes for which it was collected, or as required by law.

DataHow long we keep it
Account dataFor as long as your account is active.
Location dataProcessed in real time only, never stored persistently.
Activity and analytics logsUp to 12 months, for product improvement, security and fraud prevention.
Crash and error logsOnly as long as needed for debugging, in line with our error-reporting provider’s retention settings.
Attendance and reliability recordsUp to 12 months, after which the underlying records are deleted.
Cost-sharing records (amounts, paid/unpaid status)12 months from the date of the game, so that a dispute can be looked at and reliability calculated. These are not Mixly’s financial records, Mixly is not a party to the payment and receives nothing, so no statutory financial retention period applies to them, and we do not keep them beyond what the service needs.
Safety and incident reportsUp to 24 months from resolution, so that repeat behaviour can be identified.
Support communicationsUp to 24 months from the date of the last interaction.
Deleted accountsAll personal data permanently deleted within 30 days of a deletion request, except where retention is required by Singapore law.

Mixly’s own corporate and tax records, which relate to the Company’s own transactions, not to money moving between users, are retained for at least five years as required by the Companies Act 1967 and the Income Tax Act 1947.

Anonymised and aggregated data, which cannot identify you, may be retained indefinitely for analytics, service improvement and the purposes described in Section 7.6.

9. Data security

In accordance with the Protection Obligation (Section 24, PDPA), we implement reasonable security arrangements to protect your personal data:

While we take security seriously, no system is fully impenetrable. We cannot guarantee absolute security, but we commit to continuously improving our safeguards.

10. Data breach notification

In accordance with the Data Breach Notification Obligation (Sections 26A to 26E, PDPA), if we become aware of a data breach that results in, or is likely to result in, significant harm to affected individuals, or that affects 500 or more individuals, we will:

11. Cross-border data transfers

In accordance with the Transfer Limitation Obligation (Section 26, PDPA), where we transfer personal data outside Singapore, we ensure the receiving party is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA. This is achieved through one or more of:

Our cloud infrastructure, analytics, error-reporting, mapping and email providers may process certain operational or diagnostic data in data centres located outside Singapore, subject to the safeguards above. PostHog, Sentry, CARTO and Resend process data in the United States; Photon processes data in Germany. The only identifier reaching PostHog or Sentry is your pseudonymous user ID, with no email and no stored IP address.

12. Your rights under the PDPA

12.1 Right of access

You may request a copy of the personal data we hold about you and how we have used it in the past 12 months. We respond within 30 days (Section 21, PDPA). Email privacy@mixly.sg.

12.2 Right of correction

You may correct your name, email and profile photo directly in the app. For anything else, email privacy@mixly.sg. We respond within 30 days (Section 22, PDPA).

This includes your reliability record. If you believe an absence or a late cancellation has been recorded against you incorrectly, you may ask us to correct it. We will review the records available to us, and where we cannot resolve a dispute of fact, we will record your position alongside the entry.

12.3 Right to withdraw consent

You may withdraw consent to the collection, use or disclosure of your personal data at any time via privacy@mixly.sg or by deleting your account. Withdrawal may prevent us from continuing to provide the service.

12.4 Right to delete your account and data

You may delete your account at any time via Settings > Account > Delete Account. Deletion is permanent. It is not a deactivation, and the account cannot be recovered.

What is deleted: your profile, name, email, photo, sports and skill levels, your game history, your chat messages, your reliability record, any saved PayNow identifier, and your cost-sharing records. All of it is permanently deleted within 30 days.

What is not deleted:

If you owe money for a shared-cost game, please settle it before you delete your account. Deleting your account removes our record of the amount and you will no longer be able to see it. It does not cancel the obligation. That is a debt between you and the host, and it exists independently of Mixly.

12.5 Right of data portability

Once the Data Portability Obligation is fully operational under the PDPA, you may request transmission of your personal data in a structured, commonly used format to another organisation. We will accommodate such requests in line with the PDPC’s implementing regulations.

12.6 Right to lodge a complaint

If you believe we have not handled your personal data in accordance with the PDPA, you may contact our DPO at privacy@mixly.sg, or lodge a complaint with the PDPC at www.pdpc.gov.sg.

13. Marketing communications and the Do Not Call Registry

We respect Singapore’s Do Not Call (DNC) Registry under the PDPA and the Spam Control Act 2007:

14. Minimum age

Mixly is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16.

If we discover that we have collected personal data from someone under 16, we will delete that data and close the account promptly. If you believe someone under 16 has provided personal data to us, contact privacy@mixly.sg.

Users aged 16 and 17 should have the awareness and consent of a parent or guardian before using Mixly, before attending any in-person game arranged through the platform, before taking part in a shared-cost game where money may be owed to a host, and before adding a PayNow number to a game they host, which makes their mobile number visible to that game's players (see Section 3.7).

15. App store privacy disclosures

This Privacy Policy is consistent with our disclosures in the App Store’s Privacy Nutrition Label. Because Mixly uses no advertising identifiers and does not track you across other companies’ apps or websites, data collected through Mixly is not used to track you in the sense defined by Apple’s App Tracking Transparency framework.

If there is any inconsistency between this Policy and a store disclosure, this Privacy Policy is the authoritative source, and we will reconcile any difference as soon as practicable.

16. Governing law and jurisdiction

This Privacy Policy is governed by, and construed in accordance with, the laws of the Republic of Singapore. Any dispute arising out of or in connection with it is subject to the exclusive jurisdiction of the courts of Singapore. Nothing in this clause limits your statutory rights under the PDPA or your right to lodge a complaint with the PDPC.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will:

Where a change introduces a new category of personal data or a new recipient of it, we will seek fresh consent rather than relying on your continued use. Otherwise, your continued use of Mixly after the effective date of an update constitutes acceptance of the revised Policy. If you do not agree, you should stop using Mixly and may delete your account.

18. Contact our Data Protection Officer

In accordance with the Accountability Obligation (Section 11, PDPA), we have appointed a Data Protection Officer responsible for PDPA compliance.

We acknowledge receipt of privacy-related enquiries within 5 business days and provide a substantive response within 30 days, in line with PDPA timelines.

Version history

We keep a record here of every published version of this Policy, so you can see what has changed and when.