Privacy Policy
Effective 16 September 2026
Padly is a companion app for following the professional padel tour — tournaments, schedules, brackets, live scores, and rankings. This policy explains the limited data the app handles and how we treat it. It is written to be accurate to what the app actually does.
The short version. Padly has no accounts and no login. We do not sell your data, show ads, or track you across other apps or websites. We do measure how the app is used — anonymously, and you can switch it off in Settings. The only personal data we hold is what is needed to send the notifications and Live Activities you ask for.
Who we are
Padly is published by Gabriel Zimmermann ("we", "us"), who acts as the data controller for the data described below. You can reach us at [email protected].
Data we collect
We deliberately collect as little as possible, and only when a feature needs it.
When you enable notifications or Live Activities
To deliver push notifications and iOS Live Activities we store, on our server:
- a push token issued by Apple (APNs) or Google (Firebase Cloud Messaging) that lets us send messages to your specific device — it is a device credential, not your identity;
- basic technical context tied to that device: platform (iOS/Android), app language, app version, and app identifier, so alerts are formatted and localised correctly;
- your notification preferences (whether Live Activities are on, how far ahead of a match to alert you, and similar toggles);
- the players, teams, tournaments, or matches you follow, so we know which alerts and live updates are relevant to you.
If you never enable notifications, none of the above leaves your device.
Usage analytics (on by default; you can turn it off)
To understand which parts of the app are worth improving, we measure how it is used with Google Analytics for Firebase. It records:
- which screens you open, and which player, team, tournament, or match you opened (its identifier and name, as shown publicly in the app);
- when the app is opened and how long a visit lasts;
- a random per-installation identifier generated by Google, plus general device information (device model, operating-system version, app version, language) and an approximate location — country or region only — that Google derives from your IP address.
Alongside it, and under the same switch, we send a smaller set of product events to Mixpanel (which screens you open, which stream you chose to watch, what you follow), keyed to the same random per-installation identifier. On the website, visitors in the EEA, the UK and Switzerland are asked first: accepting links your visits under a random per-browser identifier; declining (or not answering) keeps only anonymous, unlinked counts — no identifier stored on your device, no IP address, a fresh random id on every page — and you can change your answer in Settings. Elsewhere, linked measurement is on by default with the same Settings switch. When you tap a Padly install link, our server records the store you were sent to, your country and where the link came from — never your IP address.
This data is not tied to a name or an account (Padly has none), is never sold or shared with advertisers, and is not used to build an advertising profile. We do not record what you type into search.
On the website only, and only when you have accepted linked measurement, Mixpanel may also keep a replay of your visit — the pages as they appeared while you used them — so we can see where the site is confusing. Anything you type is masked, images are left out, and declining (or turning the switch off in Settings) keeps replay off entirely.
Your control. Analytics is on by default, disclosed when you first open the app. You can turn it off at any time in Settings → Privacy → Share usage data. Turning it off stops collection and clears the identifiers the analytics SDK holds on your device. Our legal basis is our legitimate interest in understanding and improving the app; you can object to it at any time using that switch.
When you send feedback
If you use the in-app feedback form we store the message you write, whether it was positive or negative, your app version and language, and — only if you choose to add it — a reply-to email address so we can respond. Providing an email is optional.
When you answer a poll
The web app's Build this app page asks questions about what to build next, and may raise one as a prompt. If you answer, we store your choice or the text you wrote, your language, and the same random per-installation identifier used for notifications and feedback — never a name or account. The answer itself is stored without your IP address. Totals of the choices may be shown to everyone when we share a poll's results; anything you write in a text box is read only by us and is never shown to other people.
Automatically, when the app talks to our server
Like any internet service, our server briefly processes your device's IP address and standard request metadata to route responses, apply rate limits, and protect the service against abuse. We do not use this to build a profile of you.
Stored only on your device
Your app settings, your list of favourites, any event tickets (.pkpass) you import, and — on the
web — which polls you have answered or been asked are kept in local storage on your device and are not transmitted
to us. Removing the app (or clearing the site's data) removes them.
What we do NOT collect
- No name, account, or password — Padly has no sign-in.
- No precise or background location.
- No contacts, photos library, health, or financial data.
- No advertising identifier (IDFA) and no advertising. The app is built against the version of the Google Analytics SDK that cannot read the advertising identifier at all.
- No crash-tracking or marketing SDKs.
- No tracking of your activity across other companies' apps or websites, and nothing shared with data brokers — so no App Tracking Transparency prompt applies.
- No search terms, and no content of anything you view beyond the public tour item itself.
How we use data
- To deliver the notifications and Live Activities you have opted into.
- To show you scores and content for the players and events you follow.
- To respond to feedback you send us.
- To understand which screens and features are used, so we know what to improve.
- To keep the service reliable and secure.
Our legal bases (where the GDPR applies) are your consent for push notifications (you can withdraw it any time in your device settings) and our legitimate interest in operating, securing and improving the app — including the usage analytics described above, which you can switch off in Settings.
Who we share it with
We do not sell or rent personal data. We share it only with the service providers that make the app work, acting as our processors or as independent controllers for delivery:
- Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) — to deliver notifications to your device.
- Google (Google Analytics for Firebase) — to process the anonymous usage data described above, while you leave that setting on.
- DigitalOcean — our hosting provider, where the server and database run (EU region, Frankfurt).
Public tour data shown in the app (players, draws, scores, rankings) originates from Premier Padel and the International Padel Federation. The app communicates only with our own server; we do not send your personal data to those sources.
Where data is stored & international transfers
Our server and database are hosted in the European Union (Frankfurt). Notification delivery necessarily involves Apple's and Google's global infrastructure, which may process the push token outside your country under those companies' own safeguards. Usage analytics are processed by Google on its global infrastructure, including in the United States, under Google's own transfer safeguards (EU Standard Contractual Clauses and the EU–US Data Privacy Framework). Turning the setting off stops those transfers.
How long we keep it
- Device and notification data is kept while the app is installed and registered. If you disable notifications, delete the app, or the push token becomes invalid, the associated token is deactivated or removed.
- Feedback is kept while we act on it and for a reasonable period afterwards.
- Poll answers are kept while the poll exists; deleting a poll deletes its answers.
- Usage-analytics events are retained by Google for up to 14 months, then deleted automatically.
Your choices and rights
- Turn notifications and Live Activities on or off at any time in your device's system settings or in the app.
- Turn usage analytics off in Settings → Privacy → Share usage data; collection stops immediately.
- Delete the app to stop all data collection and remove locally stored data.
- Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA), you may request access to, correction of, or deletion of your personal data, and object to certain processing. Email [email protected] and we will act on your request. Because we do not hold an account, please send your request from, or reference, the email you gave us, or describe your device so we can locate the record.
Children
Padly is a general-audience sports app and is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored on managed infrastructure. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect the limited data we hold.
Changes to this policy
We may update this policy as the app evolves. We will revise the "Effective" date above and, for material changes, provide notice in the app. Continued use after an update means you accept the revised policy.
Contact
Questions or privacy requests: [email protected].