Privacy

Pádel Mate · 22 October 2026

Who is responsible

Pádel Mate is made by Volodymyr Komiachko, an individual developer, who is the controller of the data described here. Write to aonoams@gmail.com about anything on this page.

What stays on your devices

The players you add, every match with its point-by-point record, tournaments, levels and statistics are kept in the app's own storage on your phone and your watch, and copied between the two directly. They are not uploaded, and the developer cannot see them.

On the watch, a match is recorded as a workout. With your permission the app reads heart rate and energy during the match. On an Apple Watch the workout is saved to Apple Health, and that data stays in Health on your devices. On a Wear OS watch the readings are used only while the match is on and are not saved by the app. Either way the app sends none of it anywhere.

The spoken score is produced on the phone. No audio is recorded.

What is sent, and only when you ask

Sharing the live score

If you switch on "Share the live score", the app publishes the scoreboard as it stands to a private link: the names of the four players as you typed them, the score, who is serving, the colours and the language. It is replaced on every point and by every new match, and emptied when you switch sharing off or make a new link. The app signs in anonymously to do this; that anonymous user has no name or email.

Anybody who has the link can see the scoreboard, up to three screens at a time. Opening the link signs that browser in anonymously too, and keeps the anonymous sign-in in that browser's storage so that a reload returns to the same seat. It holds nothing about the person.

An account

An account is optional. If you sign in with Apple or Google, the app receives from them an identifier, your email address (Apple lets you hide it behind a relay address) and, the first time, your name. These are held by the sign-in service described below. On Android only Google sign-in is offered. The sign-in is kept on that phone only: in the iPhone's keychain, or in the Android app's private storage. It is not on the watch, and not in device backups. The app does not use a photo of you from either of them. Unless you upload a photo, the picture on your account is one of the app's own drawn characters, and your profile keeps only the name of the one you chose.

You can give your account a photo instead of a character. The app cuts the one you pick to a small card, 320 by 400 pixels, and uploads only that. It is public like your name: shown in the app and on your profile page. Google Cloud Storage keeps it in the United States. Choosing another photo or a character deletes it, and so does deleting your account.

Backing up your history

While you are signed in, your players, matches with their point-by-point record, evenings and settings are copied to your account, so that a new or replaced phone gets them back. That includes the names of the other people in your matches, as you typed them. Only you can read the copy; nobody else can, and the developer does not. "Back up my history" in Account switches it off, and switching it off deletes the copy. The sign-in used for the live scoreboard is never part of it.

What other people see

So that everybody shows the same level for the same person, your phone works out your level from those of your matches an opponent confirmed, once there are at least five, and tells the app: the level and how certain it is, when you last played, how many matches you have played and won, and how many of them another player confirmed. Anybody signed in to the app can read it, which is the same as what a public profile shows. It is the one number your own phone stands behind, because your phone is the only one holding all of your matches.

When you take a match somebody scored, their account keeps a note that you confirmed it, and yours keeps a note of who scored it: the match's identifier and the other person's account identifier, nothing more. If you press "Not right" instead, their account keeps a note saying so, with the same two identifiers, and the match stops counting towards their level. A match with an opponent who has the app counts towards levels once one of them confirms it, or after a week without an answer. Somebody who holds the same match can read your note about that one match, to see whether it was confirmed, which takes knowing the match's identifier; nobody but you can list your notes. If they delete a match you took from them, your app is told so and asks whether to remove yours; nothing is removed without your say.

Your phone also publishes a short list of your last ten matches, for your page and your friends' apps: the date, the score of each set, and the names of the four players, with the account of each one who has the app. It is shown to the same people as your lists, below.

Your profile

If you save a profile, it is public: anybody who has your link, /u/your-handle, can see the name and handle you chose, and, only if you leave that switched on, your level, matches played and won, and how many another player confirmed. Anybody signed in to the app can also find your profile by typing the start of your name or handle, ten results at a time; profiles cannot be listed in any other way. Unless you change "Who sees my lists", the names of the people following you appear on that page as well; you can narrow that to the people following you, or to nobody. If you set a starting level for yourself, the profile also carries it, so that your friends' phones work out your level from the same start as yours.

Sending somebody their matches

When you send a player in your roster their matches, the app uploads those matches: the date, the score point by point, and the names of all four players in each. So a record sent to one person contains the names of the other people who were on court with them. It can be read by whoever holds the link and signs in, until one person takes it; after that only by that person and by you. It is deleted within a day of turning 30 days old, or sooner if you delete your account.

Once somebody has taken a record from you, the two of you follow each other in the app, and matches you score with them in it are left in their inbox until they take or refuse them, at which point they are deleted from the server. Anybody who played with you can leave you a match this way; nothing counts until you take it. What they take is copied into their own phone and is then theirs.

Following

A following is stored as each person's account identifier and the name the other knew them by, on both accounts. You can find somebody by typing the start of their name or handle, while signed in, or open their profile page from a link. An invite code holds your identifier and name, works once, and is deleted within a day of turning a week old. Either person can end a following, which removes both rows.

Planning a match

A planned match is kept on the server so that the people in it see the same thing: the organizer's name, the date, time and length, the place as you typed or picked it (name, address and map link), an optional note and level range, and the name and level of everybody who took a seat, asked for one or was invited. A private match can be read only by the people in it. A match for friends or open to anybody can be read by whoever holds its link, in the app or on the web page. The organizer can cancel or delete it at any time; otherwise it is deleted 180 days after it was to start.

Wanting to play

When you say you want to play, the server keeps when (from and until), the level range and distance you chose, and, if the phone may say where it is, a rough area: a cell about 5 km across, never your exact location. Only the people who follow you can read it, and it ends by itself at the time you chose, or sooner if you stop it; it is deleted from the server within a few days of ending. Followers who asked to be told get a notice when you start. To tell you about a match near you, the server compares the matches of people you follow with your area, time and level, and remembers whom it told about which match until that match starts.

If you set My week, the server keeps the days you are usually free, the parts of the day for each, whether to show when you are playing, and your phone's time zone. Only the people who follow you can read it, and it stays until you change it or delete your account. On it the server also marks the dates you have a seat in a planned match: for a friends or public match, the match itself (which anybody with its link can already open), so followers can join; for a private match only the word “Playing”, never its club, time or players; and with “Show when I'm playing” off, only “Busy”.

Finding a place

When you search for a club while planning, the words you type are sent to a map service to find it: on an iPhone to Apple Maps; on Android to the phone's own geocoder (Google, on most phones) and, when that finds nothing, to Photon, an OpenStreetMap search run by komoot. If you allow it, an Android phone also sends its approximate location so nearby places come first. Nothing is kept by the app beyond the place you pick.

Notifications

If you are signed in and allow notifications, the phone stores a row under your account: the push token the phone's system gave it, whether it is an iPhone or Android, its language and time zone, and which kinds of notice you switched off. The server uses it to tell you when somebody follows you, leaves you a match, says a match was not right, or asks, joins, invites you, moves or cancels in a planned match, when a match near you fits a time you said you want to play, or when somebody whose bell you rang starts wanting to play, and, without showing anything, when your seat in one comes or goes, so the phone can keep the reminder it sets itself two hours before the match. That reminder is made on the phone and never leaves it. The message goes through Apple Push Notification service to an iPhone and Firebase Cloud Messaging to an Android phone, and says who did what, and for a planned match when and where. Signing out removes the row of that phone.

Crash reports

If the app crashes or freezes, it sends a report the next time it opens: the app's version, the phone's model and system version, what kind of failure it was, and where in the app's code it happened. On an iPhone the report is the one Apple's MetricKit hands the app; on Android the app writes it down itself as it crashes. A report holds no account, name, email, location, match or anything you typed, and nothing that tells your phone apart from another of the same model; the report does not keep the address it came from (Google's request logs note it for a limited time, as for any request; see below). Reports are kept for 90 days and read only by the developer, to fix what broke. This is on unless you switch "Send crash reports" off under Profile, which also deletes any report not yet sent. The watch apps send none.

Who processes it

App Check works without an account. On an iPhone, Apple's App Attest vouches that the app is genuine; on the web pages, an invisible reCAPTCHA check looks at the browser and how the page is used, and is subject to Google's own privacy policy. Neither sends your name, matches or anything you typed.

Google acts as a processor under its Firebase terms, which include the EU standard contractual clauses for data held outside the EU. As any web server does, these services log the IP address of a device that connects to them, for security and operation, and Google keeps those logs for a limited time. The developer does not look at or use them. Signing in with Apple or Google, and the map searches, are also subject to that company's own privacy policy.

Why, in the law's terms

Under the GDPR the basis for everything above is that you asked for it: the app performs the feature you switched on, and nothing else is done with the data. There is no profiling, no automated decision about anybody, and no marketing.

How long

• The live scoreboard: until the next point, the next match, or until you stop sharing.
• A record sent to somebody: 30 days. An invite code: 7 days. A match in an inbox: until it is taken or refused.
• A planned match: 180 days after it was to start, or sooner if its organizer deletes it.
• Wanting to play: it ends at the time you chose and is deleted within a few days after; who was told about a match near them, once the match starts.
• A notification row: until that phone signs out.
• A crash report: 90 days.
• The list of your last ten matches: replaced as you play, until you delete your account.
• The backup: until you switch it off or delete your account.
• An uploaded photo: until you replace or remove it, or delete your account.
• Your account, profile, who you follow and who follows you, the level your phone publishes and the confirmation notes: until you delete your account.
• Anonymous sign-ins used for the scoreboard hold no personal data and are kept so that a link keeps working.

Your choices and rights

• Delete everything: the account button at the top of the app › Delete account removes your backup, your profile, handle and photo, the level and the last matches your phone published, everybody you follow and everybody following you, every record and invite code you sent, your inbox and confirmation notes, and then the account itself. Planned matches you organized are not part of it: delete them first if they should go sooner than their 180 days. If you no longer have the app, write to the address above and the account is deleted for you.
• Notifications: switch them off by kind in Account, or for the whole app in the phone's settings.
• Crash reports: switch "Send crash reports" off under Profile.
• Stop sharing: switch "Share the live score" off, or make a new link so the old one shows nothing.
• Correct: edit your profile at any time; the public page changes at once.
• You also have the right to a copy of your data, to object, and to complain to your data protection authority. Write to the address above and you will get an answer within a month.

Something another person holds is theirs: a record somebody has already taken from you is in their phone, and deleting your account does not reach into it. Equally, if somebody sent a record that names you and you would rather they had not, ask them to take it back, or write to the address above.

Children

The app is not directed at children and asks nobody's age. An account should be made only by somebody old enough to consent to this in their country, which in the EU is between 13 and 16.

Changes

If what the app does with data changes, this page changes first, and its date with it. The English text is the one that counts if the translations ever differ from it.