Privacy Policy

This policy covers the UberPadel website and the UberPadel iOS app.

What we collect

• Account data: email, display name, optional photo, authentication provider (Email/Password or Anonymous).
• Tournament data: tournaments you create, join, and score, plus match results.
• Payment data: Stripe handles all card details. We store only Stripe customer IDs, payment intent IDs, and amounts — never card numbers or CVVs.
• Verification data: if you submit a Playtomic screenshot to verify your rating, we keep it for up to 90 days for dispute review, then delete it.
• Roster photos (app): if you use the roster scanner to photograph a sign-up sheet or whiteboard, the image is sent to our server and on to our AI provider to read the names as text. We do not store the photo — only the names it produced. Using the scanner is entirely optional.
• Notification tokens: if you turn on notifications, we store your device's push token so we can tell you when a result lands. Turning notifications off, signing out, or deleting your account removes it.
• Technical data: IP address, browser, device type (used to prevent abuse and debug issues).

How we use it

• Run the tournament service and process registrations.
• Compute and display ELO ratings + leaderboard.
• Send transactional emails (e.g. "your match is scheduled").
• Detect fraud and abuse.

We do not sell your data. We do not share it with advertisers.

Who has access

• You: via the profile page and the Firebase authentication flow.
• Tournament organisers: see player names + match history within their tournaments only.
• Stripe: for payments. Their privacy policy applies.
• Resend: sends transactional emails on our behalf.
• Anthropic: receives a roster photo only when you choose to scan one, solely to extract the names as text. Their privacy policy applies.
• Google Cloud / Firebase: hosts our data in EU regions (Frankfurt / Ireland), and delivers notifications to your device.

Your rights (UK GDPR)

• Access — request a copy of your data.
• Rectification — fix incorrect data via your profile.
• Erasure — delete your account and all linked data.
• Portability — export your tournament history.
• Objection — opt out of non-essential emails.

Email privacy@uberpadel.com for any of these. We aim to respond within 30 days.

Cookies

We use only first-party cookies needed to keep you signed in. No third-party trackers, no advertising cookies.

Data retention

• Account data — until you delete your account.
• Match history — kept indefinitely (for ELO + leaderboard).
• Payment records — 7 years (UK accounting requirement).
• Roster photos — not retained; discarded once the names have been read.
• Notification tokens — until you turn notifications off or delete your account.
• Server logs — 30 days.

Data security

Data in transit: TLS 1.3. Data at rest: encrypted by Google Cloud. Authentication: Firebase Auth (industry standard). We use Cloud Functions for server-side logic — no SSH access to databases.

Changes

We will notify you by email if we make material changes. The "Last updated" date above always reflects the current version.

Contact

UberPadel · privacy@uberpadel.com