Privacy

Padelranks is a private app for one padel group. It keeps your match results, a few profile details, and the things you tell it about when you can play. It shows those to the other people in your group, because that is the point of it.

It does not advertise, does not track you across other apps or sites, and does not sell or share your data with anyone for their own purposes.

Padelranks is run by Patrick Knight as an individual, in the UK. For anything on this page - including a request to see or delete your data - write to privacy@padelranks.io.

• Your account. Your email address and name, from signing in with Google. Google tells us those two things; we never see your Google password.
• Your player profile. Your display name, and anything optional you choose to add: a nickname, height, handedness, preferred side of the court, and a photo.
• Match data. Scores, who played, and - if someone logs a match on a paired watch (Apple Watch or Garmin) - the point-by-point record: who won each point, who served it, how it ended, and who hit the shot.
• Match effort. If you log a match on an Apple Watch and turn the upload on: your average and peak heart rate, time in heart-rate zones, calories, and the distance the watch estimates you covered for that match. Only you ever see these.
• Wrist motion. If you turn on swing tracking on an Apple Watch: the wrist-motion recordings it makes during a match, used to count shots and study strokes. Saved to your own account, shown to nobody else.
• Peer reviews. The skills people pick out after a match, and star-of-the-match votes. These are anonymous to other players: the app shows what was said, never who said it.
• Match video. If someone films a match and cuts highlight clips, the clips they choose to save (short videos of match moments, which will usually show the people playing). The full recording is never uploaded: it stays on the phone that filmed it, and only the chosen clips reach us.
• Scheduling. The nights you say you can play, courts you book, and any booking message you paste in.
• Notifications. If you turn on reminders, the subscription your browser gives us, and a record of what was sent so nothing is sent twice.
• Paired devices. If you pair a watch (Apple Watch or Garmin): the device's name, when it was last used, and a one-way hash of its access token. The token itself is not stored.
• Basic usage. When you last opened the app, whether it is installed to your home screen, and whether you accepted or dismissed a prompt. This is to know whether a feature is working, not to profile you.

Filming is optional and group-scoped, and built so the smallest possible amount of video leaves anyone's phone:

• The full film never uploads. Whether you film inside the app or with your camera, the recording stays on the phone that made it. The app cuts short highlight clips on the phone itself, and only clips someone chooses to save are uploaded.
• Only the people in a match (or an admin) can attach clips to it, every saved clip is labelled with who saved it, and clips are only visible to signed-in players - never to the open internet.
• Anyone in a clip can ask for it to come down.The person who saved it can delete it themselves, an admin can delete anything, and deletion really deletes - the video is removed, not hidden. If you're in a clip you want gone, tell the person who saved it or the admin and it goes.
• The in-app camera asks for camera and microphone permission only when you choose to film, and records nothing outside the filming screen.

If you log a match on an Apple Watch, the app starts a workout and reads your heart rate, active energy, and walking + running distance while you play. This is what keeps the app awake between points, and it is what puts the match in your Apple Fitness rings.

After the match, a summary is saved to your Padelranks account: your average and peak heart rate, how long you spent in each heart-rate zone, the calories the watch counted, and the distance it estimates you covered (a step-based estimate - courts are indoors, so there is no GPS involved). Only you can see it. It appears on a private panel on your own profile - never to other players, never on a leaderboard, never anywhere public. It is not used for advertising, is not shared with anyone for their own purposes, and is not used to track you.

Nothing is uploaded without your say-so twice over: you grant Health access on the watch, and you turn the upload on in the app. Turn it off and the watch goes back to keeping everything on your own devices. The full second-by-second heart-rate trace stays on your watch and in Apple Health today; if a future version offers to upload it, this page will change first and you will be asked again.

Summaries live in the same database as everything else (Supabase, in the EU, eu-west-1). They are deleted when your account is deleted, or on their own if you ask - write to privacy@padelranks.io.

Matches are saved to Apple Health as a Tennis workout - padel has no type of its own, and tennis is the closest.

If you upload a photo to make an avatar, it is sent to OpenAI to generate the stylised picture, and both the photo and the results are stored so the avatar can be reused. You can ask for either to be deleted at any time.

• Vercel. Hosts the app.
• Supabase. Runs the database, in the EU (eu-west-1).
• Google. Sign-in only.
• OpenAI. Generates avatars from a photo you upload, when you ask it to.
• Your browser's push service. Delivers notifications, if you turn them on. Apple, Google or Mozilla depending on your browser.

These are suppliers acting on our instructions. None of them is given your data to use for their own purposes.

Under UK GDPR, most of it rests on legitimate interests - running a league needs a record of who played and what happened, and everyone in the group expects that. Photos and notifications rest on your consent, which you can withdraw. Health data is different: it rests entirely on your explicit consent, asked for twice - once by Apple when you grant Health access, once by us when you turn the upload on - and you can withdraw it at any time.

Match results are league history and are kept while the league runs - a table that forgets last season is not a table. Everything else is kept while your account exists. Ask us to delete your account and we will remove your profile, photos, availability and devices, and detach your name from past results.

A copy of your data, a correction, deletion, or that we stop a particular use. Write to privacy@padelranks.io and we will deal with it within a month. If you are unhappy with the answer you can complain to the UK Information Commissioner's Office at ico.org.uk.

Padelranks is invite-only and intended for adults. It is not designed for under-16s.