Privacy Policy

PadelPals is a padel scoring and league app made by Daniel Seijo, an individual developer based in Spain. It is a personal, non-commercial project — there is no company behind it, no advertising and nothing to sell.

This policy has two parts, because two different versions of the app exist and they behave very differently:

• Part A — the App Store app. Offline. Your leagues, players and matches never leave your iPhone; only anonymous error reports and, if you say yes, usage data that doesn't identify you are sent. This is the version almost everyone has.
• Part B — the TestFlight beta. Only for people we explicitly invited to test the upcoming online features. These builds sign you in and store data on a server.

If you downloaded PadelPals from the App Store, only Part A applies to you.

At the end there is also a section about this website, padelpals.es.

Part A — The App Store version (offline)

Your data stays on your device

All of your data — leagues, players, matches, point-by-point logs, ratings and tournaments — is stored in a local database on your iPhone (SwiftData). It is never uploaded, and we have no way of seeing it. The only things that leave the device are the error reports and usage data described below, and neither contains any of it.

No account, no sync

There is no sign-up and no sign-in. The online and cloud features are compiled out of the App Store build entirely: the flag that enables them is a hard compile-time false in the production build, so the code that would upload your leagues to a server is not even present in the app you install.

Error reports and usage data

To keep the app working and to know which parts of it are worth improving, it can send two kinds of information. Both go to PostHog, an analytics service, on its EU-hosted cloud. Neither is linked to your name, your email or any account, and neither is ever used for tracking you across apps or websites or for advertising. There is no advertising in the app at all.

1. Error reports. When the app crashes, hangs, or fails at something it should have done (for example, saving a match), it sends a short technical report: what failed, where in the app’s own code (memory addresses in the app, which we turn back into function names on our side), and the app version, build and iOS version. Crash and hang reports come from Apple’s MetricKit, which hands them to the app on its next launch. Nothing else about the device is sent: no device model, language, region or time zone. Reports are redacted before they leave the device: they contain no names, no results, nothing you typed, and no identifier — nothing is stored on your iPhone to recognise it again, and each report is sent under a new random id, so two reports from the same phone cannot be connected. They are sent by default, because the legal basis is our legitimate interest in keeping the app stable, secure and working. You can object at any time by turning off Settings → Privacy → Send error reports.

2. Usage data, only if you agree. At the end of the first launch the app asks whether you want to share usage data that doesn't identify you. Only if you answer yes does it send events like “a league was created”, “a match was finished, scored on the Watch, in 30–60 minutes” or “an americana round was entered”, plus when the app is opened. These events carry counts, settings and categories only — never names, results, league names or anything you type. To tell how many people come back, PostHog stores a random install identifier on your iPhone; it is not derived from your device or your Apple account. With the same consent, the app also sends a daily summary of how fast it launches and how long it hung, and PostHog’s own code records crashes in more detail, keeping each crash report on your iPhone until the next launch sends it. The legal basis is your consent. If you say no, nothing is sent and nothing is stored, and the app never asks again. You can change your mind at any time in Settings → Privacy → Share usage data; turning it off stops sending and deletes the identifier from your iPhone.

The app’s privacy manifest (PrivacyInfo.xcprivacy) declares NSPrivacyTracking = false and lists exactly these data types — product interaction and a device identifier for analytics, crash data and other diagnostic data for app functionality, and performance data for both — all marked as not linked to you and not used for tracking. The only “required reason API” the app itself declares is UserDefaults, under reason code CA92.1 — reading and writing the app’s own local settings, including your choices for the two switches above.

Backups

Because the data sits in the app’s own container, it is included in your normal iCloud or encrypted device backups. That backup is between you and Apple — it is not sent to us and we cannot access it.

Apple Watch and Health

If you score a match on the paired Apple Watch app, PadelPals can read your heart rate and activity for the duration of that match and save the match to Apple Health as a workout. This only happens after you grant permission. That data stays on your device and in your Health app; it is never transmitted to us or to anyone else. You can revoke Health access at any time in iOS Settings, and the rest of the app keeps working.

Deleting your data

Delete the app. That removes the local database and everything in it, along with the usage identifier if there was one. None of your leagues, players or matches was ever sent to a server. Error reports and usage events stay in PostHog without any link to you, so there is no way to single out which ones came from your phone.

Part B — The TestFlight beta (invited testers only)

What these builds do differently

The beta builds have the online features switched on. They sign you in and sync your leagues through Supabase, a hosted Postgres backend, so that several people can share the same league across their phones.

Signing in

Sign in with Apple is the only way to sign in. Apple gives the app your name and an email address — either your real address or a private relay address, depending on what you chose when signing in. There is no password and no other login method.

What is stored on the server

• Your profile: display name, handle (username) and email address.
• Leagues you created or joined, and who belongs to them.
• Players, matches and their per-set scores.
• Rating history for the players in those leagues.
• Invite codes used to bring people into a league.
• While a match is being scored live, an ephemeral live-score broadcast so other members of the league can watch the score update.

Who can see it

Access is enforced in the database itself with Postgres Row Level Security: you can only read leagues you own or were invited to. Other testers cannot see your leagues, and you cannot see theirs.

There is no advertising, and no selling or sharing of this data with third parties. It is used for one purpose only: making the app work. The beta builds also send error reports and, if you agree, usage data, exactly as described in Part A; those are never linked to your account.

Deleting your beta data

Email us at support@padelpals.es and we will delete your account and the data associated with it.

This website (padelpals.es)

No cookies

This website sets no cookies and stores nothing in your browser (no localStorage or anything similar either). That is why there is no cookie banner to accept.

Visitor statistics

To know how many people visit the site and whether it loads quickly, we use Vercel Web Analytics and Vercel Speed Insights. Neither uses cookies or identifies you: they only collect aggregated data such as the page visited, the site you came from, your country, your device and browser type, and page load times. To avoid counting the same visit twice, Vercel derives an identifier from the request that is discarded every 24 hours. It is not used to follow you across websites or to show you ads.

Hosting

The website is hosted on Vercel. Like any web server, it receives your IP address and the technical details of the request in order to send you the page; we do not use them for anything else.

Your rights

If you are in the EU or the UK, data protection law gives you the right to access your data, have it corrected, have it deleted, receive a copy of it in a portable form, and object to or restrict how it is used. You can also complain to your national data protection authority — in Spain, the Agencia Española de Protección de Datos.

In practice: for the App Store app we never receive your leagues, players or matches, so there is nothing of that kind to give you or delete — deleting the app deletes it all. Error reports and usage data carry no link to you, so we cannot tell which ones are yours; you control both with the two switches in Settings → Privacy. For the TestFlight beta, write to support@padelpals.es and we will handle it personally.

Children

PadelPals is not directed at children under 13. The App Store version collects no personal data from anyone, children included: only the anonymous error reports and, with consent, usage data that doesn't identify you described in Part A. The TestFlight beta is only available to people we invited directly.

Changes to this policy

The online features are still in beta. When they ship to the App Store version, this policy will be updated to describe what that version does. Any material change will be reflected on this page, with a new “last updated” date at the top.

Contact

Questions about privacy, or a request to delete your data: support@padelpals.es.