Privacy policy

Who we are

OpenPlay Pickleball ("OpenPlay", "we") is operated by [OPERATOR LEGAL NAME], [OPERATOR ADDRESS]. For anything in this policy, including requests to access, correct or delete your data, write to [PRIVACY CONTACT EMAIL].

What we collect

• Account: your email address, a username, a display name and a password (stored only as a salted hash, never in readable form). If you sign in with Google or Apple we also keep the identifier they give us and, if shared, the email.
• Profile photo (optional): the image you upload, re-encoded and with its metadata removed.
• Play: the sessions you create or join, your place in queues, the games you play and with whom, swap requests, and timings. Session organisers can see who is in their session.
• Notifications: the in-app notifications sent to you and, if you turn them on in the mobile app, a push token for your phone.
• Technical: sign-in tokens, security logs (time, request path, result; we do not log passwords or request bodies) and your IP address for rate limiting and abuse prevention.

We do not run advertising, we do not sell personal data and we do not use third-party analytics or tracking in the app.

Why we use it

• To run open play: sign you in, keep the queue fair and show court assignments.
• To tell you when you are called to a court or when a session changes.
• To keep the service secure, prevent abuse and fix faults.
• To meet legal obligations.

We use your information only for these purposes, or for others you agree to. Providing an email and creating an account is your consent to this use; you can withdraw it by deleting your account.

Who else handles it

• Our hosting provider, [HOSTING PROVIDER AND REGION], stores the data and runs the service on our behalf.
• Push notifications, if you enable them, travel through Expo's push service and Apple or Google. They receive your device token and the notification text.
• Google or Apple, only if you choose to sign in with them.

Your data may therefore be processed outside your country. We take reasonable steps so that it receives a standard of protection comparable to the one you would have at home. Other players see your display name, username and photo in the sessions you take part in.

How long we keep it

• Account data: until you delete your account.
• After you ask to delete: 30 days in which you can change your mind by signing in and cancelling. Then your email, username, name, photo, sign-in methods, devices and notifications are erased. Games you played are kept without your identity, shown to others as "Deleted player", so that their history stays correct.
• Security logs: [LOG RETENTION, e.g. 30 days].
• Backups: copies are overwritten on a rolling basis within [BACKUP RETENTION, e.g. 7 days], so deleted data can remain in a backup until then.

Your choices and rights

• Access and portability: Profile → Privacy & data → Download my data gives you a JSON file of what we hold about you.
• Correction: change your display name and photo in your profile, or ask us to correct anything else.
• Deletion: Profile → Privacy & data → Delete my account. If you run a live session, close or archive it first.
• Notifications: turn push alerts off in the app or in your phone settings at any time.
• Complaints: write to [PRIVACY CONTACT EMAIL]. You may also complain to your data protection regulator (in Singapore, the Personal Data Protection Commission).

Security

Traffic is encrypted, passwords are hashed, access is limited to what each person needs, and sign-in tokens can be revoked. No system is perfectly secure. If a breach is likely to cause you significant harm, we will notify you and the regulator as the law requires.

Children

OpenPlay is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has signed up, contact [PRIVACY CONTACT EMAIL] and we will delete the account.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect.