Get the app

Privacy

What happens with your data, short and complete.

1 · Controller

Kigora Limited
Unit #001 - 113 Mindo
Triq l-Imdina
QRM 9016 Qormi
Malta

Email for privacy questions: info@padelwatch.pro

2 · In short

  • Padel Watch shows no ads, does not track you and contains no third-party analytics or crash SDKs.
  • Matches, players, stats and health data stay on your devices.
  • Data only reaches our server when you share a match live or create an account.
  • The website sets no cookies and loads nothing from other providers.

3 · This website

The website padelwatch.pro is hosted on Google Cloud (Cloud Run, region europe-west3, Frankfurt). Each visit makes the server process technically necessary data: IP address, time, requested address, status code, amount of data transferred, browser and operating system (user agent) and, if present, the referring page. This data ends up in the server logs of Google Cloud Logging and is used for secure operation and troubleshooting. We do not use it for statistics and do not combine it with other data.

The logs are deleted automatically after PLACEHOLDER · Confirm log retention (Google Cloud Logging default: 30 days).

The website sets no cookies, uses no analytics tools and loads no fonts, scripts or images from other providers. Links to the App Store or the Connect IQ Store lead to Apple or Garmin; their privacy policies apply there.

Legal basis: legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

4 · The app on iPhone and Apple Watch

The app stores matches, players, teams, player photos and stats only locally on your iPhone and Apple Watch. iPhone and watch sync directly via Apple’s WatchConnectivity, not via our server. We do not create a backup of your matches.

The app only asks for access a feature needs, and you can revoke each one in the iOS settings:

  • Camera: to scan the QR code of a live match. Images are not stored.
  • Photos: for player photos (they stay on the device) and to save your profile QR code.
  • Calendar: finds your court bookings (e.g. from Playtomic) for the next match. The calendar is only read on the iPhone, nothing leaves the device.
  • Bluetooth: to connect to your Garmin watch.

To link players to an Apple account, the app uses your private iCloud database (CloudKit). This data is stored in your iCloud account with Apple; we cannot read it.

5 · Health data (Apple Health)

With your permission, Apple Watch records a match as a workout in Apple Health (heart rate, calories, duration), and the app reads heart rate, calories and steps of your matches to show them to you. This data stays on your devices and in Apple Health. It is not sent to our server, not included in shared live scores and not included in matches you share with an account.

Legal basis: your explicit consent via the Health permission in iOS (Art. 6(1)(a), Art. 9(2)(a) GDPR). You can withdraw it at any time in Settings under Health.

6 · Garmin

The Garmin app keeps score on the watch and sends nothing to the internet itself. It talks to the iPhone app via Bluetooth through the Garmin Connect app: the score and, at the end, duration, average and maximum heart rate and calories. These values stay on your iPhone. Your watch saves the match as an activity in Garmin Connect. Garmin is responsible for this, and Garmin’s privacy policy applies.

7 · Sharing live

When you share a match live (depending on the “Go online automatically” setting, as soon as the match starts), the iPhone sends the score to our server. We store:

  • a random match code and a checksum (SHA-256) of the write key,
  • the score: points, games, sets, serve, format and rules, duration and status, plus up to the last 20 points as history,
  • timestamps,
  • team names only if “Show player names” is on (off by default, otherwise “Team 1” and “Team 2”).

No health data, no device or account identifier. Anyone who knows the link or code can see the score in the browser or in the app. The data is stored in Google Cloud Firestore (region europe-west3, Frankfurt).

“Stop sharing” deletes the score immediately; until the original expiry only an “ended” marker with the code and timestamps remains. Otherwise a shared score ends 24 hours after it started and can no longer be accessed; Firestore then deletes it automatically, usually within another 24 hours.

The viewer page in the browser remembers the view you chose (“Score only”) in your browser’s local storage. This setting stays in your browser and is not sent to us.

Legal basis: performance of the feature you requested (Art. 6(1)(b) GDPR); for names of other players, our and your legitimate interest in following the match together (Art. 6(1)(f) GDPR). Remembering the view is strictly necessary for the feature you chose.

8 · Account, friends and shared matches

An account is optional. You sign in with Apple (“Sign in with Apple”). Apple gives us a stable user identifier; we do not store your email address. With an account we store on our server (Google Cloud Firestore, region europe-west3):

  • profile: display name, username, club, preferred side, level, racket, Playtomic link, private or public, your sharing settings, acceptance of the terms of use (version and time),
  • sessions (only as a checksum, they expire after 90 days),
  • follows, requests and blocks,
  • summaries of your finished matches with result, stats, point list, rules and line-up, including the names of the other players. After you sign in, the app uploads your finished matches automatically, including earlier ones. Health values and compass data are not included,
  • suggestions for shared matches with other accounts,
  • invitations: your invite code and redeemed invitations,
  • reports to moderation (reason, note, reported account).

You decide who sees your profile and matches through your sharing settings (only me, followers, everyone). Your profile photo stays on your iPhone.

When you redeem an invitation, the app uses Apple’s DeviceCheck to check whether an invitation has already been redeemed on this iPhone. Apple stores two bits per device for this; we do not store a device identifier. To prevent abuse we limit sign-in attempts per IP address; for this the IP address is only kept briefly in the server’s memory.

PLACEHOLDER · Only include if contact matching is live at release: If you allow access to your contacts, the app sends only a checksum (SHA-256) of each phone number and email address to our server to suggest accounts from your contacts. The contacts themselves never leave your iPhone.

Deletion: “Delete account” in the app removes your account, profile, sessions, follows, blocks, suggestions, invite code and all your uploaded matches, and revokes Sign in with Apple. In other accounts’ matches your name stays as the owner entered it, without a link to your account. Reports remain for moderation without reference to your account. Database backups are overwritten after PLACEHOLDER · Confirm retention of database backups (planned: 7 days).

Legal basis: contract for the use of the account features (Art. 6(1)(b) GDPR); moderation, abuse prevention and names of players without an account: legitimate interest in a safe community and complete match reports (Art. 6(1)(f) GDPR).

9 · Purchases

Apple handles purchases and offer codes in the app through the App Store. We do not receive payment data.

10 · Recipients and transfers to third countries

  • Google Cloud (Google Cloud EMEA Limited, Ireland) runs servers, database and logs for us as a processor under Art. 28 GDPR. The data is stored in the EU (Frankfurt). Access from third countries, for example by Google LLC in the USA, cannot be ruled out; it is covered by the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses.
  • Apple is itself responsible for Sign in with Apple, DeviceCheck, iCloud, Apple Health and the App Store.
  • Garmin is itself responsible for Garmin Connect and the Connect IQ Store.

We do not sell data and do not pass it on for advertising.

11 · Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to us at info@padelwatch.pro.

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live. Our lead authority is the Information and Data Protection Commissioner (IDPC) in Malta, idpc.org.mt.

12 · Last updated

26 October 2026