Privacy — Padelada

This policy explains what data Padelada (the app and the website padelada.com) processes, why, on what legal basis and what rights you have. We have tried to write it so it is easy to understand: if anything is unclear, email us at [email protected].

1. Who is responsible

The data controller is Padelada. For any privacy question, contact: [email protected].

2. What data we process

Account. When you sign in with Google, we receive your name and email address. We never receive or store your password.
Profile. Name, photo (optional), year of birth (you can hide your age), category (women’s or men’s, to form pairs in mixed tournaments), playing hand, playing side, city, club, languages, app language and, if you add them, your preferred times, pace, playing style and goals.
Level. Your answers to the level test, any level you report from other apps and the history of level changes after each match.
Matches and community. Matches, results, confirmations and votes in case of disagreement, tournaments (Americano, Mexicano), the crews you belong to, match proposals and who you have played with.
Reliability. No-shows at tournaments, cancellations with less than 24 hours’ notice, and results or declared levels that do not match reality. We use these to calculate a reliability score.
Messages. Text, voice messages and photos you send in chats, along with their transcriptions and translations.
Location. If you allow it, the app checks your approximate location once to suggest your city and its chat. The city is worked out on your phone; we do not store your coordinates.
Safety. Blocks, mutes, reports you make or receive, and sanctions.
Guests. If you play a match without the app, we store the name entered for you and, if you provide one, a phone number or email address to send you the result.
Technical data. An identifier for push notifications and your notification settings.

We do not use advertising or any analytics or tracking tools, and we do not sell your data.

3. Why we use it and on what legal basis

To provide the service (performance of a contract, art. 6.1.b GDPR): account, profile, matches, results, level, tournaments, crews, chats, translation and notifications.
To keep the community safe and fair (legitimate interest, art. 6.1.f GDPR): reliability score, reports, moderation, sanctions and prevention of spam and abuse.
Phone permissions (consent, art. 6.1.a GDPR): location, camera, photos, microphone and notifications. You can withdraw them at any time in your phone’s settings.
To comply with the law (legal obligation, art. 6.1.c GDPR): responding to requests from the authorities.

4. Automated decisions

Your level is calculated automatically from the test and your match results. The reliability score starts at 100 and changes according to the rules described in the app. Below 70, you go on the waiting list for tournaments; after three no-shows within 90 days, a person reviews the account before any sanction is applied. You can ask for a person to review any calculation, give your point of view and challenge it by emailing [email protected].

5. Who sees your data

Registered users can see your profile: name, photo, level, city, club, age (unless you hide it) and playing details. Your profile photo can be viewed by anyone who has its link.
Messages are seen by the members of the chat where you send them. Results are seen by the players in the match and the members of the crew.
Chat moderators can delete messages and remove members. Reports are reviewed by the Padelada team.

6. Service providers

We use providers that process data on our behalf, under contract and only to provide the service:

Supabase — database, sign-in and file storage, on servers in the European Union.
Google — Sign in with Google.
Expo, Apple and Google — sending push notifications.
Cloudflare — website hosting and forwarding of email sent to [email protected].
Artificial intelligence provider — translation of messages and transcription of voice messages. Before we switch this feature on, we will name the provider here; it will only receive the content needed for translation and will not be allowed to use it to train its models.

If any provider processes data outside the European Economic Area, it does so with the safeguards required by the GDPR: an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission’s standard contractual clauses.

7. How long we keep it

While you have an account, we keep the data needed to provide the service.
If you delete your account (Settings → Delete my account), we erase your profile, photo, level history, reliability data, blocks and crew memberships. Your messages stay in the chats so that conversations still make sense, but they show as “Deleted player”; match results are kept without your name. If you would also like us to delete your messages, just email us.
Serious sanctions and reports are kept for as long as needed to protect the community and deal with any possible claims.
Guest data is deleted if it is not turned into an account within a reasonable time, or whenever you ask.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by emailing [email protected]. We will reply within one month. If you think we have not handled your data properly, you can complain to the Agencia Española de Protección de Datos (the Spanish Data Protection Agency, www.aepd.es) or to the data protection authority in your country.

9. Minimum age

Padelada is for people aged 16 and over. If we learn that an account belongs to someone younger, we will delete it.

10. Security

Connections are encrypted, access to data is restricted by rules in the database, and chat files can only be seen by the members of that chat.

11. The padelada.com website

The website does not use cookies or analytics. It only stores the theme and language you choose in your browser (local storage). Fonts are served from our own domain. Cloudflare, which hosts the website, processes technical connection data, such as your IP address, to serve the pages and protect them from attacks.

12. Changes

If we make significant changes to this policy, we will let you know in the app before the change takes effect. The date of the last update is shown at the top.