Privacy Policy

Last updated: 14 July 2026

This explains what Padel Kourta collects, why, and what happens to it. It's written to be read, not to protect me. If anything is unclear, just ask.

The short version

  • I collect your email, your name and profile, and your match data.
  • Your heart rate never leaves your device. It goes to Apple Health, not to me.
  • I don't sell your data, and never will.
  • You can delete your account and all your data at any time.

Who I am

Padel Kourta is made by Sam Boon, an individual (sole trader) based in the United Kingdom. For the purposes of UK data protection law, I am the data controller.

Contact: support@padelkourta.app

What I collect, and why

Your account

DataWhyLawful basis
Email addressTo create your account and sign you inContract
Password (encrypted)To sign you in. I never see it in plain text.Contract
Display nameTo show whose matches these areContract
Skill level, hand, court position, home clubOptional. Shown on your profile.Consent

If you use Sign in with Apple or Sign in with Google, I receive your email address, and (on your first sign-in only) your name. I never receive your password. If you use Apple's Hide My Email, I only ever see the relay address.

Your matches

DataWhy
Scores, sets, gamesTo record and show your matches
Player names you typeTo show who you played with
Venue (if you enter one)For your per-venue statistics
Date and timeTo order your history
Point-by-point recordTo work out your stats — service holds, break points, streaks

Player names are simply text you type. They aren't linked to anyone else's account, and I don't use them to identify or contact anybody.

Health data (Apple Watch)

Your health data never reaches my servers.

If you switch on Record workout, the watch reads your heart rate, active energy and distance while you score, and writes the workout to Apple Health on your device. That's it. It is not transmitted to me, and I cannot see it.

You can turn it off at any time — in the app, or in Settings → Privacy & Security → Health.

What I don't collect

Where your data is kept

Your account and match data are stored with Supabase, who host the database on my behalf. The data is hosted in Ireland, within the European Union.

Supabase acts as a data processor — they process data on my instructions and cannot use it for their own purposes. Their privacy policy: supabase.com/privacy.

International transfers

I am based in the United Kingdom, and your data is stored in Ireland. This is a transfer outside the UK, so it needs a legal basis.

The UK Government has made an adequacy decision for the EU, which means the EU is recognised as providing an equivalent standard of data protection to the UK. Your data therefore receives the same protection in Ireland as it would in the UK, and no additional safeguards are required.

Security

Your data is protected by row-level security, which means your matches can only be read by your own account. Other users cannot see them. Data is encrypted in transit and at rest.

How it's used

I use your data to:

I do not:

Sharing a match

When you tap Share result, the app creates an image on your device and hands it to iOS's share sheet. I don't upload it and I never see it. Where it goes — WhatsApp, Messages, your camera roll — is entirely your choice, and governed by that app's own privacy policy.

Your rights

Under UK GDPR you have the right to:

RightHow
Access your dataIt's all visible in the app. Or email me and I'll send you a copy.
Correct itEdit your profile, or edit and delete matches, in the app.
Delete itEmail me and I'll delete your account and all its data, permanently.
Port itAsk, and I'll send it in a machine-readable format.
Object or restrict processingEmail me.
Withdraw consentTurn off workout recording, or delete your account.

I'll respond within one month. If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Officeico.org.uk — though I'd rather you told me first so I can put it right.

How long it's kept

As long as your account exists. Delete your account and your data is deleted with it. Nothing is retained afterwards.

Children

Padel Kourta isn't aimed at children under 13, and I don't knowingly collect data from them.

Third parties

WhoWhat they getTheir policy
Supabase Hosts your account and match data (Ireland, EU) Policy
Apple If you use Sign in with Apple Policy
Google If you use Sign in with Google Policy

That's the complete list of third parties I currently share data with.

If that ever changes — for example if advertising is introduced — I will update this policy and tell you in the app before it happens.

Changes

If this policy changes, I'll update the date at the top. If the change is significant, I'll tell you in the app.

Contact

Questions, requests, complaints — any of it: support@padelkourta.app