Our approach
Clubs use Clubrava to hold families' contact details, payments, attendance and sometimes medical notes about children. We treat that responsibility seriously and design every feature so people see only what their role needs.
Protecting the platform
- Encryption in transit: every app, page and API call uses HTTPS with modern TLS.
- No card numbers stored: card payments are taken on licensed payment gateways' secure pages.
- Role-based access: owners, managers, coaches, sales and finance staff each get their own permissions.
- Private messaging: coaches and parents message in the app without sharing personal phone numbers.
- Audit trail: changes to members, bookings and payments are logged with who made them and when.
- Data ownership: clubs can export their data at any time.
Protecting this website
clubrava.com is a static site with a strict Content Security Policy, HTTP Strict Transport Security, and no third-party scripts, trackers or fonts.
Report a vulnerability
If you believe you have found a security vulnerability in Clubrava or this website, please email info@prosportsuae.com with the subject line Security report. Please include:
- a description of the issue and where you found it;
- the steps to reproduce it;
- what an attacker could do with it;
- how we can contact you.
We will acknowledge your report within 3 working days, keep you updated while we investigate, and let you know when it is fixed.
Testing guidelines
Please act in good faith: only test against accounts you own, do not access, change or delete other people's data, do not disrupt our services, and give us reasonable time to fix an issue before sharing it publicly. If you follow these guidelines, we will not pursue legal action against you for your research.
Out of scope: denial-of-service attacks, social engineering, physical attacks, spam, and reports from automated scanners without a demonstrated impact.