Privacy Policy

Padelistico ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Padelistico mobile application (the "App") available on iOS and Android.

By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account & Identity Information

When you register or complete your profile, we collect:

• Full name — used to identify you in the app
• Email address — used for authentication, OTP verification, and communication
• Username — your unique identifier in the community
• Profile photo (avatar) — uploaded from your camera or photo library
• Biography (bio) — optional short description about yourself
• Padel skill information — how long you've been playing, playing frequency, skill level, competitive experience, and rating
• Password — stored in encrypted form, never in plain text

1.2 User-Generated Content

Content you choose to create and share in the app:

• Posts — text posts, photos, and videos you publish to your feed
• Comments — text responses to other users' posts
• Direct messages — text messages, images, voice recordings, and video messages sent to other players
• Challenge data — match venues (as text and Google Maps links), dates, times, costs, team compositions, and set-by-set scores

1.3 Device & Technical Information

• Device ID — anonymous identifier used for push notification targeting
• Platform — iOS or Android, used to deliver the correct notification experience
• Push notification token (FCM token) — obtained from Firebase Cloud Messaging to send you notifications

1.4 Third-Party Sign-In Data

• Google Sign-In — we receive your name, email address, and Google profile photo when you authenticate with Google
• Apple Sign-In — we receive your name and email address (which Apple may relay or mask) when you authenticate with Apple ID

1.5 Usage & Activity Data

• Posts you like, reshare, or view
• Users you follow or are followed by
• Challenges you create, join, or participate in
• Match results and scores you record

2. How We Use Your Information

We use the collected information to:

• Create and manage your account
• Authenticate you and maintain session security (access tokens, refresh tokens)
• Display your profile, posts, and challenge activity to other users
• Enable real-time messaging between players via Socket.io
• Send push notifications about challenge invites, join requests, match results, messages, and likes
• Calculate and display your padel rating based on match results
• Allow you to find, create, and manage padel challenges
• Improve app features and user experience
• Respond to support requests and user feedback

3. Information Sharing & Disclosure

We do not sell your personal data. We may share your information only in these circumstances:

• With other Padelistico users — your name, username, profile photo, bio, rating, posts, and challenge participation are visible to other users as part of the social features
• With service providers — we use Firebase (Google) for push notifications. Firebase processes your FCM token and device information to deliver notifications
• For legal compliance — if required by law, court order, or governmental authority
• For safety — to protect the rights, property, or safety of Padelistico, our users, or the public

4. Third-Party Services

Our app integrates with the following third-party services, each with their own privacy policy:

5. Device Permissions

The App requests the following device permissions:

• Camera — to take profile photos and capture images for posts and messages
• Photo Library / Storage — to select existing photos and videos for posts, messages, and profile pictures
• Microphone — to record voice messages within the direct messaging feature
• Push Notifications — to send you timely alerts about challenges, messages, and social activity

You may revoke any permission at any time via your device Settings. Revoking permissions may limit certain app features.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between the App and our servers is encrypted via HTTPS (TLS)
• Authentication uses JWT access tokens and refresh tokens stored securely on your device using Expo SecureStore
• Passwords are hashed server-side and never stored or transmitted in plain text
• OTP (one-time password) verification is required for new account registration

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we strive to use commercially acceptable means to protect your data.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. You may request account deletion at any time (see Section 8). Upon deletion, we will remove your personal information from our active systems within 30 days, except where retention is required by law.

8. Your Rights & Choices

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate information through your profile settings
• Deletion — request the deletion of your account and associated personal data
• Portability — request an export of your data in a structured format
• Opt out of notifications — disable push notifications via your device Settings at any time
• Revoke third-party access — disconnect Google or Apple Sign-In via the respective platform's security settings

To exercise any of these rights, contact us at privacy@padelistico.com.

9. Children's Privacy

Padelistico is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page and, where appropriate, through an in-app notification. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: