1. Who we are
Padel Rivals is operated by Karim Tamer Shawky Elsayed and Youssef Ehab Salaheldin Tawfik Wahb ("Padel Rivals", "we", "us"). We are the data controller for the personal data described in this Policy, which we process in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020 ("PDPL").
This Policy explains what we collect through the Padel Rivals mobile application and marketplace (the "Service"), why, who sees it, and the rights you have. It forms part of our Terms of Agreement.
Contact for any privacy question or request: help@padel-rivals.com
2. What we collect
a) Information you give us
- Account. Your name, email address, and either a password or a Google / Apple sign-in identifier. We never see or store your Google or Apple password.
- Profile. Username, profile photo, phone number, date of birth, gender, city, short bio, preferred hand and court side.
- Delivery addresses. Recipient name, phone, governorate, city, area, street, building, apartment and any landmark — used only to deliver store orders.
- Payment receipts. If you pay by InstaPay, the image of the transfer receipt you upload, and the sender name shown on it, so we can confirm payment.
- Content you post. Direct messages, community channel messages, match scores you submit, and tournament entries — including the name of a partner you enter who does not have an account.
- Support. Anything you send us by email or phone.
b) Information created by using the Service
Match history and results; your level and its full change history (every adjustment, with the opponents’ average level and the score); season points and standings; orders and their status; notifications and whether you have read them; matchmaking searches; and, where a member of staff acts on your account, a record of that action.
c) Technical information
A push-notification token for each device you sign in on, and sign-in timestamps kept by our authentication provider.
3. What we do not collect
- No location tracking. The app never requests or records your location. Court locations are venue addresses, not yours.
- No advertising. No advertising identifier, no ad networks, no profiling for ads, and we never sell your data.
- No card details, ever. We do not process card payments. You pay cash on delivery, or by InstaPay transfer made in your own bank or wallet app, outside the Service.
- No access to your contacts, photo library or microphone. The app opens your photo picker only when you choose to attach an image, and receives only that image.
We do not currently use analytics or crash-reporting tools. If we introduce them, we will update this Policy and the app store’s data-safety disclosure before doing so, and will say what they collect.
4. Why we use it, and our legal basis
- Create and run your account, matchmaking and leaderboards — performance of our contract with you.
- Take, deliver and support store orders and tournament entries — performance of our contract.
- Confirm InstaPay payments from your uploaded receipt — performance of our contract.
- Keep play fair: detect false results, manipulation and abuse, and act on reports — our legitimate interest in a safe, honest platform.
- Send push notifications about your matches, orders and tournaments — your consent, withdrawable per category in Settings.
- Keep accounting and tax records — legal obligation.
5. What other people can see
Public to other users: your display name, username, profile photo, level and tier, match history, season leaderboard position, the communities you have joined, and any message you post in a community channel.
Not public: your email address, date of birth, delivery addresses, payment receipts, notifications, and your direct messages — visible only to you and the person you are messaging.
Shared with the players in your matches. When you join a match, the app opens a group thread for that match. Everyone playing in it can see your name, your level and your phone number, so you can arrange the game between you. That thread — and the phone numbers on it — stays open until 24 hours after the match’s scheduled start time, and then closes. Anything you post in it is visible to every player in that match. If the match is cancelled, the thread closes immediately.
Tournament organizers. Tournaments may be run by independent organizers. When you enter an event, that organizer sees your name, level, entry status and whether your entry fee has been paid. They receive your entry fee directly and act as a separate controller of that information.
6. Who we share it with
We do not sell your personal data and we do not share it for advertising. We share it only with:
- Supabase — hosting, database, authentication and file storage. All Service data is stored there.
- Google Firebase Cloud Messaging and the Apple Push Notification service — to deliver push notifications. They receive a device token and the notification content.
- Google and Apple — where you choose to sign in with them.
- Delivery. We currently deliver orders ourselves. Where we use a delivery company, it will receive only the recipient name, phone number and address needed to complete that delivery.
- Authorities or advisers — where legally required, or to establish or defend a legal claim.
7. Where your data is stored
Our data is hosted by Supabase in the European Union (Ireland). This means your personal data is transferred outside Egypt. We make that transfer in reliance on the applicable provisions of the PDPL governing cross-border transfer, and on Supabase’s contractual security and data-protection commitments. Ireland is subject to the EU General Data Protection Regulation, which provides a high standard of protection.
8. How long we keep it
- Account and profile data — until you delete your account (Section 10).
- Notifications — 30 days, then removed automatically.
- Order records — 5 years from the end of the financial year in which the order was placed, to meet our accounting and tax obligations. This applies even after you delete your account, but the record is anonymised first (Section 10).
- Payment receipt images — 12 months after the order is completed, then deleted automatically.
- Match, rating and season history — for as long as your account exists, because it is what your level and standings are built from.
9. Security
Your data is protected by row-level security rules that let each account read only its own records; profile photos, payment receipts and community media sit in access-controlled storage, with receipts kept private and viewable only by staff through short-lived signed links. Passwords are hashed by our authentication provider and are never visible to us. No system is perfectly secure, but we will notify you and the competent authority of a breach affecting your data where the PDPL requires it.
10. Deleting your account
You can delete your account yourself at any time, in the app under Profile → Privacy & Account → Delete account, or by emailing help@padel-rivals.com.
Deletion is immediate and permanent. It removes your profile and personal details, your matches and match participation, your tournament entries, your messages, your saved addresses, your profile photo, your uploaded payment receipts and your device tokens.
Two things survive, and we want to be clear about why:
- Order records are anonymised, not deleted. We must keep the sale itself — what was bought, for how much, and when — for the tax retention period in Section 8. Your name, delivery address, contact details and payment receipt are removed from it, so the record no longer identifies you.
- Results in matches involving other players may remain in those players’ own history in anonymised form, since those records are also theirs.
11. Your rights
Under the PDPL you have the right to be informed about our processing, to access your data, to correct it, to have it erased, to restrict or object to processing, to withdraw consent at any time (without affecting what we did before), and to receive your data in a portable form.
To exercise any of these, email help@padel-rivals.com. We will respond within the period required by law. You may also complain to the Egyptian Personal Data Protection Centre.
12. Children
The Service is not for anyone under 16. We do not knowingly collect data from a child under 16; if we learn we have, we will delete it. Users aged 16 or 17 need the consent of a parent or guardian, as set out in our Terms.
13. Changes
We may update this Policy. We will post the updated version at the address linked from the app and change the "Last Updated" date, and where changes are material we will give reasonable notice in the app.
14. Contact
Padel Rivals — Karim Tamer Shawky Elsayed and Youssef Ehab Salaheldin Tawfik Wahb
Email: help@padel-rivals.com
Phone: 01501800943
Address: Cairo 11571, Egypt