Privacy policy

PX Padel · Last updated: 27 October 2026

1. Who is responsible for your data?

PX Padel is an app for discovering clubs, finding and organising matches, communicating with players, browsing tournaments and following a ranking.

The data controller is PX Padel, established at 22 rue Saint-Amand, 75015 Paris, France. For questions about your data or to exercise your rights, contact pxpadel@gmail.com.

This policy covers PX Padel on iOS and Android, web sharing pages, bookings and the shop available through the app.

2. The data we use

Depending on the features you use, we process:

Account and sign-in: email address, account identifier and information needed to authenticate you and manage your session.
Profile: the first name, surname, city, padel level, photo and introduction you provide.
Sporting activity: matches created or joined, requests to participate, invitations, favourites, bookings and search preferences.
Player relationships: friend requests, in-app contacts, conversation membership, blocks and reports.
Communications: text, photos, voice messages, reactions and other content you send, together with delivery information such as the conversation, sender and sending date.
Availability: usual times and playing preferences you provide in features that use them. Some preferences are stored on your device.
Ranking: search terms entered, chosen competition profile, rank, points and history available from the ranking service.
Location: your chosen city and, with your permission, your device location for nearby searches and distances.
Notifications: your preferences and your device’s technical notification identifier, to deliver alerts you have authorised.
Operation and security: technical data needed to communicate with our servers, including IP addresses, request dates and error information in technical logs, depending on our providers’ configuration.
Support: contact details and the contents of requests you send us.
Purchases and payments: name, email, delivery and billing addresses, phone number if provided, basket, orders, amounts, references and payment status. Card details are entered in Stripe components; PX Padel stores neither the full card number nor its security code.

Data requested for account creation, sign-in and the feature being used is necessary for it to work. Additional profile information and content you share depend on your choices. Do not provide sensitive data or data about another person without an appropriate justification or authorisation.

3. Why do we use this data?

We use the data needed to create your account, display your profile, organise matches, provide messaging, manage invitations and bookings, and let you view your ranking. The legal basis is the performance of the service you request.

Your preferences, level, matches and clubs of interest, and some interactions such as favourites and participation, may be used to order and personalise match suggestions. This helps you find matches; it is not a decision producing legal effects or similarly significant effects on you. This processing relies on our legitimate interest in suggesting relevant matches based on your level, proximity and availability. You may object by writing to pxpadel@gmail.com; we review your request and tell you what action is taken.

We may process information needed for service security, abuse prevention, reviewing reports and answering support requests based on our legitimate interest in providing a safe, functioning service while respecting your rights. Where we must retain or disclose data to meet a legal obligation, that obligation is the legal basis.

A system permission does not replace identifying the legal basis for processing. You can manage permissions in your device settings.

PX Padel does not sell your data or use it to track your activity across different apps or websites for targeted advertising.

4. Device permissions

Location is used for nearby searches and distances. You may refuse permission and choose a city manually where the feature allows this. PX Padel does not request permission for permanent background location access.

The microphone records voice messages you choose to send. Photos you select are used for your avatar or images sent in conversations. Notifications inform you about service events when you allow them.

A system permission does not replace identifying the legal basis for processing. You can manage permissions in your device settings.

5. Visibility and recipients

Your profile information, participation and content posted in a match are accessible to other users according to the app’s features. Conversations and attachments are intended for the relevant members, subject to necessary technical and moderation access.

A profile photo may be accessible to anyone with its URL. A match page shared on the web may be viewed by people with its link and may contain match information and the profile data displayed there. Do not post information there that you want to keep private.

People authorised to operate PX Padel and its technical providers may access the data needed for their work. Clubs receive the information needed when a feature arranges a booking or interaction with them. Authorities may receive data when a lawful request or applicable obligation requires it.

Messaging uses server storage to provide the service. This policy does not promise end-to-end encryption.

6. Providers and external services

Supabase provides the technical authentication, database, storage and real-time communication services used by PX Padel.

Apple provides system features used by the app, including maps, iOS permissions and notification delivery through Apple Push Notification service. Apple’s own processing is described in its privacy policy.

Ranking searches use TrouveTonPadel. Search terms you enter to find a player and identifiers needed to view their profile or statistics are sent to that service. It also receives the ordinary technical data associated with a network request. Information displayed depends on that source; PX Padel does not present this connection as an official FFT partnership.

Some maps use OpenFreeMap: the provider receives requested tiles and network information, including the IP address. Photon (komoot) receives place search text and coordinates when searching from your location or a selected point. These services may retain operational and security logs. Their information is available here: OpenFreeMap · Photon.

Stripe processes payments and receives the contact details needed for an order, payment information and technical data: device identifiers, model, operating system, interactions with its components, diagnostics and error reports. These data support payments, fraud prevention, security and improvements to payment components. During 3D Secure authentication, some device data are sent to the card network and issuing bank. Stripe may process data for its own security purposes and regulatory duties: Stripe. Clubs, sellers and delivery providers receive only the information needed for the requested service.

For an LTA profile, necessary searches and identifiers are sent to the public LTA competition services through our server. Linking is optional, and removing the link in PX Padel does not delete the profile held by the source.

When a link opens an external website or service, its own privacy policy applies.

Authentication services and their delivery providers process the data needed to send sign-in emails. Vercel hosts sharing pages and this policy and processes the technical data needed to view them, including IP addresses and request information. Learn more in the Supabase privacy policy, Vercel privacy policy and Apple privacy policy. For more information about recipients of your data, contact pxpadel@gmail.com.

On Android, Google Firebase Cloud Messaging delivers notifications. It processes an installation identifier, a notification token, app and device information, and the content needed to deliver the alert. Notification settings control the alerts you want. This integration does not enable Firebase Analytics. Provider information: Google Firebase.

7. Hosting and international transfers

PX Padel data is hosted in the European Union.

Some technical services, including those needed for maps, notifications or email delivery, may involve processing outside the European Economic Area. Hosting in the EU does not mean that all processing by every provider takes place exclusively there.

International providers may process some data, including in the United States, to deliver their services. Transfers outside the EEA are governed by applicable mechanisms in their contractual commitments, such as an adequacy decision or the European Commission’s standard contractual clauses. Supabase’s commitments and subprocessor list are available in its data processing addendum and subprocessor list. You may ask about the safeguards applicable to your data by contacting pxpadel@gmail.com.

8. Retention periods

We retain data according to its usefulness for the service and the following criteria. Deletion requests and individual rights are handled as described in sections 9 and 10.

Account and profile: while the account is in use. You may request deletion at any time. Inactivity alone does not currently trigger automatic account deletion.
Messages, photos and voice messages: retained to provide conversation history while the account remains active, unless deleted earlier through available features. The user’s content and attachments are deleted when their account deletion request is processed.
Matches, bookings and history: retained while the account is in use to track activity, then deleted with it unless a legal obligation or justified need to handle a dispute applies. Documents subject to statutory retention are archived separately for the applicable period.
Favourites, preferences and personalisation signals: retained while the account is in use and deleted with it. Local preferences and caches can also be removed by deleting app data from your device.
Linked ranking and downloaded history: retained as needed to display progress, then deleted from PX Padel storage with the account. Retention of the original data by the external ranking service is governed by its own policy.
Notification identifiers: retained as needed to send notifications. They are removed on sign-out or account deletion; invalid identifiers are purged.
Technical logs: for the period needed to diagnose issues and secure the service, according to the relevant technical service’s retention period. Additional retention is limited to incidents or obligations that justify it.
Support: three years after the request is closed, unless a shorter period is sufficient or a particular legal need applies.
Reports and moderation: while the report is handled, then twelve months after closure, unless a documented need arises from a dispute or prevention of repeated abuse.
Backups: deleted data may temporarily remain in backups until they expire according to the provider’s retention cycle. These copies are used to restore the service, not to reactivate a deleted account. Following restoration, deletion requests are reapplied.

Any retention exception is limited to the necessary data, relevant purpose and a justified period. Pseudonymised data remains personal data; only effective anonymisation allows retention outside the scope of personal data rules.

Orders and their contact details, addresses, amounts and payment references are kept separately to fulfil orders, returns, refunds, disputes and applicable obligations. They are not automatically erased when an account is deleted; no automatic purge is triggered solely by that deletion. You can request erasure or restriction of processing. Data still needed are limited to that purpose and a justified period, with an explanation in response to your request.

9. Account deletion

You can request deletion from your profile by choosing “Delete my account” and then confirming. You can also contact pxpadel@gmail.com about your data.

Deletion covers the account, profile data and associated personal content, including photos and voice messages stored by PX Padel, subject to the statutory retention obligations described above. Backups are handled within the periods described in section 8.

Deletion from PX Padel does not automatically delete information held about you by an external ranking service or copies of content already saved by other users. Your rights with those third parties still apply.

Without opening or reinstalling PX Padel, email pxpadel@gmail.com with the subject “PX Padel account deletion” or “PX Padel data deletion”. Give your account email and, for an order, its reference; never send your password or card details. You can request deletion of your account and associated data, or of specific data only. Identity verification may be needed. Payment or order records requiring review are handled with support; they are not described as automatically deleted. Retention exceptions and backups are explained in section 8.

10. Your rights

Under the conditions set out in the GDPR, you may request access to, rectification or erasure of your data, restriction of processing and, where the conditions are met, data portability. You may object to processing based on legitimate interests and withdraw consent for processing based on consent. Withdrawal does not affect processing already carried out lawfully.

Send your request to pxpadel@gmail.com. If there is reasonable doubt, we may request only the information necessary to verify your identity. We generally respond within one month; an extension with reasons is possible under the conditions set out in the GDPR.

You may lodge a complaint with the CNIL or the competent data protection authority in your country.

11. Security

PX Padel uses authentication and access controls. Sessions are kept in secure system storage, including the iOS Keychain or encrypted Android storage. Operational access is limited to authorised people and service needs.

No security measure guarantees absolute protection. Protect your device and sign-in information and avoid sharing confidential information in public profiles or conversations.

12. Updates to this policy

This policy may change when the service or processing changes. The update date appears at the top. Significant changes will be brought to your attention through an appropriate means; new consent will be requested where necessary.

13. Professional data in PX PADEL PRO

PX PADEL PRO uses the same account and services as PX Padel. Professional features process the responsibilities assigned to clubs, coaches and competition officials, teams, schedules, scores, bookings and observed attendance. Actions and corrections may retain their author, date, reason and version to keep an activity history.

Access depends on the authorized responsibility. Operational coaching follow-up is available to the coach and, when the club sells the session, its authorized manager. Private coaching notes are restricted to the relevant coach account: the club manager and participant cannot read them. Changing the coach account does not grant access to another account’s earlier private notes. Club booking attendance is available to the club’s authorized managers and editors.

For a published tournament, the organizer separately authorizes players to view the schedule (times and courts) and the results (scores and standings), with team names. This publication does not expose private notes, contact details, finances or internal logs. Revoking access prevents further professional consultation; it does not remove copies already saved by their recipients.

PRO alerts use an application-specific link between the account, its session and the device installation. Push notifications contain a generic message and a notification identifier. Optional email alerts are disabled by default and enabling them does not resend earlier notifications. Resend processes the recipient address, language and content needed for delivery; delivery events support monitoring and stopping mail after a permanent bounce or complaint. Emails necessary for a booking or coaching session remain separate from this choice.

There is currently no dedicated automatic purge for coaching notes, attendance and professional histories. Their retention and erasure requests follow the criteria and rights described in this policy; no additional fixed period is stated here. The PRO notification feed displays the last thirty days. Unresolved professional responsibilities or financial and activity records may require support review before account deletion, to avoid incomplete erasure or an implicit transfer of responsibilities.