Privacy Policy — Pickleball App

1. The short version

We collect what we need to run a competitive pickleball platform: your profile, the events you register for, the payments you make, and the messages you send.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Location is used while you use the app to show nearby events, courts, partners, and listings. Precise coordinates stay on your device unless you choose to attach a location to something you post.
You can delete your account and personal data from inside the app at any time — see Delete Your Account.

2. What we collect and why

DATA	WHY WE PROCESS IT
Account and profile	Name, email address, password (stored only as a hash) or Apple/Google sign-in identifier, date of birth or age band, profile photo, city, skill level and playing preferences. Used to create and secure your account and to show you to other players.
Location	With your permission, your device's approximate or precise location while the app is open, used to sort tournaments, courts, partners, and marketplace listings by distance. Foreground only — we never request background location. Coordinates are evaluated on your device; we store only what you choose to save, such as your city or a listing's pickup area, and your radius preferences.
Push notification tokens	A device token issued by Apple, Google, or Expo, plus the platform name, stored against your account so we can send you match, message, registration, and payment notifications. Deleted when you sign out of that device or delete your account.
Payments	Amounts, currency, description, status, and the identifiers Stripe returns for a charge, refund, or payout. Card numbers are entered into Stripe and never reach our servers. Sellers and organizers who take payouts also complete Stripe onboarding directly with Stripe.
Messages and community content	Direct messages, group chats, posts, comments, reactions, polls, partner requests, and reports. Stored so conversations persist across your devices, and accessible to us when investigating a report or complying with law.
Support diagnostics	When you open a support ticket or send feedback we record the ticket contents and, to reproduce the problem, technical details such as app version, build number, device model, and operating system version.
Images and media	Profile photos, group and listing photos, facility and event photos you upload. Images are resized and stored in our hosted object storage. Photos you post to public surfaces are visible to other users. We strip nothing from filenames you choose, so avoid identifying filenames.
Analytics	Aggregated, pseudonymous usage events — screens opened, features used, funnel completion — used to understand what works and what is broken. We do not use analytics for advertising and do not build advertising profiles.
Crash and error reporting	When the app crashes or hits an unhandled error we collect a stack trace, device model, OS version, app version, and an anonymous installation identifier so the crash can be fixed.
Play and rating data	Registrations, match results, brackets, check-ins, and the rating history computed from them. Competitive results are part of the public record of an event.

3. Why we are allowed to process it

Where the GDPR or a similar law applies, we rely on: contract — to give you the Service you signed up for; legitimate interests — to keep the Service secure, prevent fraud and abuse, and improve the product; consent — for location access, push notifications, and camera or photo library access, each of which you grant at the operating system level and can withdraw at any time in your device settings; and legal obligation — for tax, accounting, and law-enforcement requirements.

4. Who we share it with

We share personal information only with the following categories of recipient.

Other users. Your profile, results, brackets, group posts, listings, and the messages you send are visible to the people you share them with. Tournament organizers see the registration details of players in their events.
Stripe — payment processing, payouts, and fraud prevention.
Supabase — our database, authentication, file storage, and server functions provider.
Expo, Apple Push Notification service, and Firebase Cloud Messaging — delivery of push notifications.
Apple and Google — sign-in, when you use those buttons.
Email delivery, map, and weather providers — to send transactional email and render maps and event forecasts.
Analytics and crash reporting providers — as described above.
Law enforcement or regulators— where we are legally required to, or where necessary to protect someone's safety.
An acquirer — if the business is merged or sold, subject to this policy.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under California law.

5. How long we keep it

Account and profile data — while your account exists. Deleted or anonymized when you delete your account.
Messages — deleted with your account, except copies already delivered to other participants.
Push tokens — removed on sign-out of the device or on account deletion.
Payment records — retained after account deletion where tax, accounting, or anti-fraud law requires it, and by Stripe under its own retention schedule.
Tournament results and brackets — retained as the competitive record of the event, with your identity replaced by a deleted-user placeholder.
Support tickets — retained while needed to resolve the issue and to handle any related dispute.
Backups — deleted data may persist in encrypted backups for a short period before those backups roll off.

6. Your rights and choices

Depending on where you live you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, to receive a portable copy, and to appeal a refusal. You can exercise most of these directly in the app:

Access and correction — Profile → Edit Profile, and Account Settings.
Deletion — Account Settings → Delete Account. See Delete Your Account.
Location, camera, photos, notifications— your device's system settings, at any time.
Anything else — email support@pickleballapp.app. We respond within 30 days, and will never charge you or degrade your service for making a request.

7. How we protect it

Data is encrypted in transit with TLS and at rest by our hosting provider. Access to the production database is restricted, and row-level security policies stop one user's data being read by another. Passwords are stored only as salted hashes. No system is perfectly secure; if a breach affects your personal information we will notify you and the relevant regulator as required by law.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact support@pickleballapp.app and we will delete it.

9. International transfers

We operate from the United States and our providers store data in the United States. If you use the Service from outside the United States, your information is transferred there. Where required, transfers out of the European Economic Area or the United Kingdom rely on the European Commission's Standard Contractual Clauses.

10. Changes to this policy

We will update this page when our practices change and revise the “last updated” date. If a change materially affects how we use your information we will notify you in the app or by email before it takes effect.

11. Contact us

JD Innovations LLC
11615 Gramercy Park Ave, Bradenton, FL 34211
Privacy: support@pickleballapp.app
Support: support@pickleballapp.app