athlopadel
Sign inRegister

Privacy Policy

Effective 26 June 2026 · athlopadel (www.athlopadel.com)

1. What this policy covers

How athlopadel collects, uses, shares and protects personal data of players, organizers, referees and visitors across both the website (www.athlopadel.com) and the Athlo mobile app for casual social play. The same account, profile and skill rating are shared across web and app. By using either you agree to this policy, which you accept explicitly at account creation.

2. Data we collect

  • Account data: name, email, phone (with country code), date of birth, nationality, city, a self-declared starting level (used to set your initial skill rating), profile photo, password (stored only as a secure hash by our authentication provider) or Google account linkage.
  • Tournament data: registrations, teams and partners, match results, point-by-point scoring records, check-in times.
  • Sparring data: friendly club sessions you create or join — session name, club/side names, venue, date and time, an optional banner image, the participants, and match scores.
  • Casual play data (app): casual social sessions you create or join in the Athlo app — session name, format, players (including any guests you add), courts and match scores — and the social skill rating, rating history and aggregate stats those games build.
  • Subscription data (app): if you buy an optional in-app subscription, the purchase and billing are handled by Apple (App Store) and managed through RevenueCat; we receive only your subscription status, never your card or payment details.
  • Verification documents (only when a tournament requires them): payment proof and identity document (KTP or passport).
  • Consent records: timestamp of terms acceptance and your newsletter choice.
  • Technical data: standard server logs needed to operate and secure the service. On the web, privacy-friendly cookieless usage analytics. In the app, a device push token (only if you allow notifications), plus crash/diagnostic data (Sentry) and privacy-friendly product analytics (PostHog) to keep the app working and improve it. We use no advertising cookies, build no advertising profiles, and do not track you across other sites.

3. What is public

Tournament pages and player profiles show: name, city, nationality, skill rating, profile photo, match results and aggregated statistics. Sparring session pages show the session and club/side names, participant names and the match scores. Never public: date of birth, nationality, phone, email, identity documents, payment information, check-in data.

4. Who else can see your data

  • The organizer of a tournament you registered for can see your contact details (email, phone), photo, and — where required — your payment proof and identity document, solely to verify and run that tournament. Documents are stored privately and opened through short-lived expiring links.
  • The platform administrator can access data where needed to operate the service, resolve disputes or comply with law.
  • Service providers: Supabase (database, authentication, file storage), Vercel (web hosting and privacy-friendly, cookieless usage analytics), Resend (email delivery), Google and Apple (only if you sign in with them). For the app: Apple App Store and RevenueCat (optional subscriptions), the Apple Push Notification service via Expo (notifications), Sentry (crash diagnostics) and PostHog (product analytics). They process data on our behalf and cannot use it for their own purposes.
  • We never sell personal data.

5. Email and notifications

We send operational email: account verification, password reset, guest-profile invitations, registration and tournament notifications — email is the only channel for tournament and account notifications. In the Athlo app, if you allow them, we may also send push notifications for app events (session invites, a game starting, rating changes, club invites); you can turn these off any time in your device settings. Separately, we send occasional marketing email (athlopadel news) only if you opted in — either by ticking the newsletter box at signup, or via the Subscribe link in the site footer (you can subscribe without an account). Marketing email is sent from a separate sending address (news.athlopadel.com), is kept fully separate from operational email, and we store the email address you subscribed with only to send these updates. Every marketing email carries a one-click unsubscribe link; you can also unsubscribe at any time by contacting us.

6. Retention

Match results and statistics are kept indefinitely as the tournament archive — that permanence is a core feature players rely on. Identity documents and payment proofs are kept only as long as needed for the tournament they belong to and organizer dispute windows, after which they may be deleted on request. Account data is kept until you delete your account.

7. Your rights

You can access and correct your data in your profile. You may request a copy, correction or deletion of your personal data via the contact page. Deleting an account removes personal contact data; anonymized match records may be retained to preserve other players’ results. We respond to requests within 30 days.

8. Security

Data is encrypted in transit and at rest. Access is restricted by row-level security rules: organizers see only their own tournaments’ participants, and sensitive documents are accessible only via authenticated, expiring links.

9. Children

The platform is intended for users aged 13 and over. Junior players below that age must be registered and managed by a parent or guardian.

10. Changes and contact

We may update this policy; the effective date above will change. For any privacy question or request: see the contact page.