Padelist is an app for padel players: finding partners, creating games and tournaments, maintaining a profile and rating, chatting, and exploring clubs and friends. This Policy explains what personal data we collect, how we use it, who we may share it with, and your rights. By using Padelist, you confirm that you have read this Policy.
Who is the data controller
The Padelist service is provided by the Padelist team. For privacy questions write to privacy@padelist.com.ua — we reply within 30 days. You can also reach us through the in-app support form (Profile → Support) or via the support page.
1. What we collect
We only collect data that the app needs to function. Categories:
- Account data: phone number, email, first and last name, nickname, profile photo, Apple/Google/Facebook identifier (if you use that login provider).
- Player profile: level, city, country, gender, playing position, dominant hand, date of birth (optional), short bio.
- Activity: games, tournaments, club and group membership, match results, level history, performance stats.
- Content: photos for the gallery, stories, reels, voice messages, and text/voice messages in chats.
- Technical data: device type, OS version, app version, language, error logs, push-notification tokens, IP address (for session security).
- Location: city and country — entered manually in the profile. We do not request or store precise geolocation (GPS).
2. How we use data
- Account creation and authentication (phone/email/Apple/Google/Facebook).
- Powering core features: games, tournaments, chats, clubs, groups, friends.
- Calculating and updating player level from ranked match results.
- Generating AI match descriptions and announcements via OpenAI (see AI section below).
- Push notifications about games, tournaments, messages, invites.
- User support, abuse detection, complying with legal obligations.
3. Sharing with third parties
Padelist does not sell personal data. We use a limited set of technical providers required to run the app:
- Google Firebase: cloud authentication, database (Firestore), file storage (Cloud Storage), server functions, push notifications (FCM), hosting. Servers are in the europe-west1 region (Belgium).
- OpenAI: used to generate game/tournament descriptions and match summaries. We send anonymized match data (player names, levels, scores). OpenAI processes the request and returns text; requests are not used to train models.
- Apple, Google, Facebook: if you sign in with these providers, they share a minimal data set (email, name, identifier) with us in accordance with their own terms.
We do not sell, rent, or share your personal data with advertising networks or data brokers.
4. Data retention
Data is kept while your account is active or as long as needed to provide the service and meet legal obligations. Error logs are kept up to 90 days. Deleted messages may persist in backups up to 30 days. After account deletion, primary data is removed within 30 days, except records we are required to keep by law.
5. International data transfers
Core services (Firebase) are hosted in the EU (Belgium). OpenAI processes requests in the US. Transfers happen under the European Commission's Standard Contractual Clauses (SCC). If you are outside these regions, your data may be transferred across borders.
6. Your rights
- Access — review the data we hold about you via your profile or upon request.
- Correction — change personal data directly in the app.
- Deletion — delete specific data or your full account (see section below).
- Objection — restrict certain processing (e.g. disable push notifications in system settings).
- Complaint — file a complaint with the data-protection authority in your jurisdiction.
7. Account deletion
You can fully delete your account in the app: Profile → Settings → Delete account. After confirmation your profile, games, messages, and content are removed within 30 days. Some anonymized statistics (e.g. aggregated tournament results) may be retained longer so other players' history remains intact. If you cannot delete the account in the app, write to privacy@padelist.com.ua and we will remove it manually.
8. Security
We apply technical and organizational safeguards: HTTPS in transit, at-rest encryption on Firebase servers, role-based access control, action logging. No system is fully secure — in case of an incident we will notify affected users and the relevant authorities within 72 hours as required by GDPR.
9. Children's privacy
Padelist is intended for users 13 and older (16+ in EU countries where required by law). We do not knowingly collect data from younger users. If you notice that a child created an account without parental consent, report it to privacy@padelist.com.ua and we will remove the account.
10. AI-generated content
Game descriptions, tournament announcements, and match recaps may be generated automatically via OpenAI (GPT models). The request includes information about participants and match results. AI content may contain inaccuracies and is not an official statement. You can report incorrect AI text via support.
11. Changes to this Policy
We may update this Policy. We'll notify you in the app or by email about material changes. The effective date is always shown at the top. Continued use of Padelist after an update means you accept the new version.
12. Contact
For privacy questions, complaints, data deletion, or to exercise your rights, contact: privacy@padelist.com.ua or use the support form.