Privacy Policy

This Privacy Policy explains how Padel Amigos (the "app") collects, uses, stores, and protects information about you when you use the app. It is written to meet the requirements of the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and Thailand's Personal Data Protection Act (PDPA).

1. Who we are (Data Controller)

Padel Amigos is an independent hobby project operated as a sole individual under the name "Andys Apps". The data controller responsible for your personal data is:

• Andreas Resch (trading as Andys Apps), based in Thailand
• Email: helloandysapps@gmail.com

For all privacy-related questions or to exercise the rights described below, please email the address above.

2. Information we collect

The app is designed to collect as little personal information as possible. We collect:

3. Information we do not collect

• We do not collect your email address, phone number, or real name.
• We do not collect location data.
• We do not access your contacts, photos, camera, or microphone.
• We do not use third-party analytics, advertising, or tracking SDKs.
• We do not use cookies or similar tracking technologies in the app.

4. How we use your information

We use the information described above only to operate the app — to show you your groups and games, let you sign up for sessions, and (if you enabled notifications) to send you reminders. We do not use your data for advertising or profiling, and we do not make automated decisions that produce legal or similarly significant effects about you.

5. Sharing and sub-processors

We do not sell, rent, trade, or share your personal information with third parties for their own marketing or advertising. We share data only with the service providers strictly necessary to run the app:

• Supabase Inc. — hosts the database and handles authentication. Your data is stored in Supabase's Singapore region.
• Apple Push Notification service and Google Firebase Cloud Messaging — deliver push notifications to your device (only if you enabled notifications).

We may also disclose information if required to do so by law or a valid legal request.

6. International data transfers

The app is operated from Thailand and your data is stored on servers in Singapore. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data export rules, your personal data will be transferred to and processed outside that jurisdiction. Where required, transfers rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses entered into by Supabase) or on the necessity of the transfer to perform the contract with you.

7. How long we keep your data

• Account data (device ID, nickname, push token) is kept for as long as your account exists.
• Group and game data is kept for as long as the group exists or until you leave the group.
• If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain certain records by law.
• Backups containing your data are rotated and overwritten on a rolling basis (typically within 30 days).

8. Your rights

Depending on where you live, you have some or all of the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data (you can update your nickname directly in the app).
• Erasure / deletion — delete your account directly in the app via Settings → Delete account, which permanently removes your account, your sign-ups, and any group where you are the only member. You can also email us to request deletion.
• Restriction — ask us to limit how we process your data.
• Objection — object to processing based on our legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent (push notifications), withdraw it at any time by disabling notifications in your device settings.
• Complain to a supervisory authority (see below).

To exercise any of these rights, email helloandysapps@gmail.com. We will respond within 30 days. There is no fee, and we will not discriminate against you for exercising your rights.

Right to complain

• EU/EEA users: you may lodge a complaint with your national data protection authority.
• UK users: you may complain to the Information Commissioner's Office (ico.org.uk).
• Thailand users: you may complain to the Personal Data Protection Committee (PDPC).

9. California residents (CCPA / CPRA)

If you are a California resident, you have the rights to know, delete, correct, and limit the use of your personal information, and the right not to be discriminated against for exercising those rights.

• Categories of personal information collected: identifiers (random device ID, nickname, push notification token) and user-generated content (groups, games, notes).
• Sources: directly from you and from your device.
• Business purpose: providing and operating the app.
• Categories disclosed to service providers: the categories above, shared with Supabase and the push notification services listed in section 5.
• Sale or sharing of personal information: We do not sell or share your personal information, including for cross-context behavioral advertising, and we have not done so in the preceding 12 months.
• Sensitive personal information: we do not collect any.

To exercise your California rights, email helloandysapps@gmail.com.

10. Children's privacy

Padel Amigos is not directed to children under 13 (or under 16 in the EU/EEA, or under 20 where Thai law applies stricter standards). We do not knowingly collect personal information from such children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

Data is transmitted over HTTPS and stored in Supabase, which encrypts data at rest. Access is restricted by row-level security policies tied to your device-based account. No system is perfectly secure — please contact us if you believe your account has been compromised.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted in the app or on this page.

13. Contact

For any questions about this Privacy Policy or your personal data, contact helloandysapps@gmail.com.