LEGAL
Privacy Policy
Last updated: May 25, 2026
This Privacy Policy explains what personal data Padly collects, why we collect it, who we share it with, and the rights and choices you have. Padly is a padel score-counting app for iOS, Android, and Apple Watch, plus this website.
Who we are
The data controller responsible for your personal data is [YOUR FULL LEGAL NAME], an individual based in [YOUR COUNTRY OF RESIDENCE]. For any privacy question or to exercise your rights, contact us at privacy@padly.net.
How Padly works (and why it matters for your data)
Padly is anonymous-first. When you first open the app we create an anonymous account so you can score matches without giving us any personal details. While you stay anonymous, your matches are kept only on your device — they are not uploaded to our servers.
Only when you choose to sign in (with Apple, Google, or your email) do we store data under your identity in the cloud, so it can sync across your devices and be shared with people you play with. You can keep using Padly anonymously and never create an account.
Personal data we collect
- Account & sign-in — your email address (from Apple, Google, or email sign-in), a unique account identifier, and whether your account is anonymous.
- Profile — your display name, @handle, an optional profile photo, your avatar color, and settings such as "allow being tagged" and discoverability.
- Match data — scores, dates, scoring mode and format, team names, duration, the point-by-point timeline, and whether a match ended early. Names you type for guest players are personal data too.
- Friends & social graph — friend connections and requests, your play-partner history (who you've played with), people you block, and the players you tag in matches.
- Invitations you send — when you add someone by email to a match, we process that email to send them an invite. When you create a public or claim link, the match summary becomes accessible to anyone who has the link.
- Purchases — your subscription/purchase and entitlement status, plus a pseudonymous app-user ID, via the app stores and RevenueCat. We never receive or store your payment-card details.
- Notifications — a push notification token, if you turn notifications on.
- Device & usage data — app and device type, OS version, language, in-app interactions, an advertising identifier, and approximate region, collected by our analytics, crash-reporting, and advertising tools.
- Logs — IP address and request metadata when your app or browser communicates with our servers.
How we use your data
- Provide the score counter and sync your matches across devices.
- Create and manage your account and profile.
- Power the social features — friends, tagging, invitations, and match sharing.
- Process purchases and show or hide ads based on your premium status.
- Send transactional emails (such as match invitations) and any push notifications you've enabled.
- Understand how the app is used so we can improve it, and diagnose crashes.
- Show ads in the free tier.
- Detect and prevent spam, abuse, and fraud, and enforce rate limits.
- Comply with legal obligations and enforce our Terms.
Legal bases (EU/EEA & UK users)
- Performance of a contract — running your account, saving and syncing your matches, and processing purchases.
- Legitimate interests — keeping the Service secure, preventing spam and abuse, basic product analytics, and sending invitations that a user asked us to send. You can object to processing based on legitimate interests.
- Consent — personalized advertising, optional analytics, and push notifications. You can withdraw consent at any time.
- Legal obligation — keeping records and responding to lawful requests.
Who we share data with
We do not sell your personal data. We share it only with service providers ("processors") who help us run Padly, under contract and only as needed for the purposes below. We may also disclose data to comply with the law, enforce our Terms, or as part of a business transfer (with notice to you).
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase, Inc. | Authentication, database hosting, and avatar file storage | Account ID, email, profile, matches, friends, avatars | EU / USA |
| RevenueCat, Inc. | In-app purchase & subscription management | App user ID, purchase & entitlement status | USA |
| Resend (Plus Five Five, Inc.) | Transactional email (match invitations) | Recipient email, sender name, match summary | USA |
| Google AdMob (Google LLC) | Advertising in the free tier | Advertising identifier, device & approximate usage data | USA / global |
| PostHog, Inc. | Product analytics & feature flags | Pseudonymous usage events, device & app info | EU / USA |
| Sentry (Functional Software, Inc.) | Crash & error reporting | Diagnostic logs, device & app info | USA |
| Expo (650 Industries, Inc.) | Push notifications & over-the-air app updates | Push token, device info | USA |
| Apple Inc. / Google LLC | App distribution and payment processing | Purchase records (we never receive your card details) | USA / global |
| Vercel Inc. | Hosting for this website and the backend API | Server logs, IP address, request metadata | USA / global |
When you add other people
When you invite someone by email or tag a Padly user in a match, you are asking us to process that person's data on your instruction. Please only add people who would reasonably expect to be included.
- Tagged users can detach a match from their history, block the person who tagged them, or turn off "allow being tagged".
- We apply rate limits to tagging and email invites to reduce spam.
- If you received an invitation and want your email removed from our system, email us at privacy@padly.net.
International data transfers
Our providers may process data in the United States and other countries. Where we transfer personal data of EU/EEA, UK, or Swiss users outside those regions, we rely on an adequacy decision or on Standard Contractual Clauses with appropriate safeguards.
How long we keep your data
- Account, profile, and match data are kept until you delete your account or ask us to delete them.
- Matches created while anonymous live only on your device until you sign in (then they upload to your account) or you delete the app.
- Invitation links and tokens expire automatically (typically within 7 days).
- Logs, analytics, and crash data are kept for a limited period, and backups are purged on a rolling basis.
Your rights
Depending on where you live, you have rights over your personal data. EU/EEA and UK users (under the GDPR and UK GDPR) have the right to access, rectify, erase, restrict, and port their data, to object to certain processing, and to withdraw consent at any time.
Most of these are self-service: edit your profile in the app, and use Settings → Delete account to erase your account and personal data. When you delete your account, matches you played with other registered players are kept for them, but your name is removed from those records. You can also email privacy@padly.net and we'll respond within the time the law requires. EU/EEA users may lodge a complaint with their local data protection authority.
California & other US state privacy rights
If you live in California (or a US state with a comparable law), you have rights under the CCPA/CPRA. In the past 12 months we may collect these categories: identifiers, commercial information (purchases), internet/app activity, approximate geolocation, and the content you provide.
- We do not sell your personal information for money.
- You can request to know, access, delete, or correct your personal information, and you won't be discriminated against for exercising these rights.
- Showing personalized ads may count as "sharing" under the CPRA. You can opt out by declining App Tracking Transparency on iOS, by limiting/ resetting your advertising ID in device settings, and by choosing Padly+ to remove ads entirely.
- To exercise these rights, email privacy@padly.net.
Advertising & analytics
- The free tier shows ads via Google AdMob. On iOS we ask through App Tracking Transparency before any cross-app tracking; if you decline, you'll see non-personalized ads.
- You can reset or limit your advertising identifier in your device settings at any time.
- We use PostHog for product analytics and Sentry for crash reports, configured to avoid collecting unnecessary personal data.
- Padly+ removes ads.
Cookies & on-device storage
The app stores data locally on your device (secure session storage and an offline cache) so it works without a connection and remembers your settings — this is not third-party tracking. This website uses only essential cookies and privacy-friendly aggregate analytics.
Children
Padly is not directed to children. You must be at least 16 years old to use it. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact privacy@padly.net and we will delete it.
Security
We protect your data with encryption in transit, access controls, and storage rules that scope each user to their own files. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.
Changes to this policy
We may update this Privacy Policy from time to time. We'll change the "Last updated" date above and, for material changes, notify you in the app or by email.
Contact us
Questions about this policy or your data? Email privacy@padly.net. You can also read our Terms of Service at https://padly.net/legal/terms.