Privacy Policy

PadelFlow can be used in two ways, and they handle data very differently. Without an account, everything stays on your device — nothing is sent to us. With an account, which shared groups require, group content syncs to our database so everyone in the group sees the same thing.

Data controller

Johannes Horn Software (Norwegian sole proprietorship), org. no. 938 215 537, Havsteinlia 6, 7021 Trondheim, Norway.
Email: support@padelflow.no

Using PadelFlow without an account

You can run sessions in every format without signing up. Player names, matches, points and standings are stored only in the app's local storage on your device. We receive nothing and cannot see that data.

Using PadelFlow with an account

An account is only required for shared groups. You sign in with Google or Apple, and we receive:

• User ID, name and email address from your sign-in provider
• The group's name, colour and emoji, and who is owner, admin and member
• The group roster: player names, and which account has claimed a player profile, if any
• Results: matches, points, wins, timestamps and ratings
• Tournaments: name, location, time and the players signed up

Names of players who don't use the app

A group usually contains names of people who have no account of their own — the organiser types in the roster. We process those names on the basis of legitimate interest: without them there is no leaderboard and no rating, and the names are always entered by someone who knows the person.

If you are listed in a group and want out, ask the group owner to remove you, or contact us directly by email — we will remove the entry either way.

Purchases and subscriptions

Payment is handled entirely by Apple, Google or Paddle, who act as the seller (merchant of record). We never receive card numbers or payment details. Through RevenueCat we learn only whether your account has an active subscription, and which plan.

Analytics and crash reports

Analytics (Google Analytics for Firebase) and crash reporting (Firebase Crashlytics) are off by default. They are enabled only if you say yes in the app, and you can withdraw that consent at any time in settings. We send no custom events and do not tie measurements to your user ID.

Legal basis

• Contract (GDPR art. 6(1)(b)): account, groups, sync and subscription
• Consent (art. 6(1)(a)): analytics and crash reporting
• Legitimate interest (art. 6(1)(f)): player names entered by the organiser, and protecting the service from abuse

Where data is stored

Group data is stored in Google Cloud Firestore in the europe-west4 (Netherlands) region — inside the EEA. Google acts as our data processor.

Sign-in is provided by Firebase Authentication, and analytics/crash reporting — if you have enabled it — by Google. These services may involve transfers outside the EEA under the EU Standard Contractual Clauses.

Who we share with

We do not sell data and do not use it for advertising. We use these processors:

• Google (Firebase: sign-in, database, optional analytics and crash reporting)
• Apple (Sign in with Apple, and purchases made through the App Store)
• RevenueCat (subscription status)
• Paddle (seller and payment processor for purchases made on the web)

Retention

Account data and group content are kept for as long as the account or the group exists. If you ask for deletion, we complete it within 30 days.

Deletion and your rights

You have the right to access, rectification, erasure, data portability, restriction, and to object to processing. If you consented to analytics, you can withdraw that consent at any time.

You can delete your account yourself, in the app: open the Settings tab and choose Delete account in the account card. Deleting unclaims the player profiles you had claimed, removes you from the groups you belong to, archives any group you own, and deletes your account. Finished sessions stay in each group's results archive under the display name the group entered, so the other members keep their history.

You can also email support@padelflow.no and we will delete your account and associated data within 30 days, and confirm when it is done.

If you disagree with how we handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

If we change this policy we update the date at the top.