Lock

Privacy Policy

This document is available in English and Spanish. The English version is shown here.

Last updated: 25 September 2026

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), PADEL'EM informs users of the PADEL'EM application and its watch applications (the “App”), as well as visitors to the padelem.com website (the “Website”), about the processing of their personal data.

This Policy supplements the Terms of Service. Terms defined there have the same meaning in this Policy unless otherwise stated.

1. Data controller

2. Categories of data processed and their sources

  • Account data: email address, password (stored encrypted) and the Google or Apple sign-in identifier (and Facebook, on old accounts). Provided by the User or the sign-in provider.
  • Profile data: first name, last name, photo, gender, date of birth, playing hand, court side, city, country, time zone and phone number. Provided by the User.
  • Match data: date, duration, type, competitive or training status, score and points, added players and notes. From the watch and the App.
  • Health and physical activity data: heart rate, calories, distance and steps, and syncing with Apple Health or Health Connect if the User turns it on. From the watch, subject to a permission requested on the watch itself, which is optional and can be withdrawn at any time.
  • Location data: the match GPS coordinates, their accuracy and time. From the watch, subject to an optional permission. Without location, the match is recorded but does not count towards the Rankings.
  • Club and area: the club, determined from the location using Google Places, and the region and country, calculated on our servers from geoBoundaries territorial boundaries.
  • Social data: Users the User follows, Users who follow them and comparisons made.
  • Contacts: phone numbers in the device address book, used solely to find friends who already use the App; they are not stored. Requires an optional permission.
  • Ranking data: positions, results of closed months, medals, XP, Prize Codes and their redemptions.
  • Competition integrity data: matches recorded as training and the reason (in technical logs), and account blocks and the reason.
  • Premium Subscription and Referral Program data: subscription status (through RevenueCat), referral codes and a one-way cryptographic hash of the email address to prevent fraud.
  • Artificial intelligence chat data: the User's messages, conversation summaries and the match data used to prepare answers.
  • Notification data: the phone's device identifier (token) and push and email notification preferences.
  • App technical data: error logs (Firebase Crashlytics), usage analytics (Firebase Analytics, subject to consent) and advertising identifiers (AdMob).
  • Website browsing data: IP address and technical request data logged by the server, and data collected through cookies as described in the Cookie Policy.

3. Purposes and legal bases of processing

  • Providing the Service (account, matches, statistics, Rankings and social features): performance of the contract (Art. 6(1)(b) GDPR).
  • Health data: a special category of data, processed on the basis of the User's explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR). It is requested on the watch, is optional and can be withdrawn at any time by turning off the permission; the App then works without that data.
  • Match location: consent (Art. 6(1)(a) GDPR), given through the optional system permission, to assign the club and area and for the Rankings. It is withdrawn by removing the permission; from then on, matches do not count towards the Rankings.
  • Contacts: consent (Art. 6(1)(a) GDPR), given through an optional permission, solely to find friends. Numbers are not stored.
  • Phone notifications: performance of the contract (Art. 6(1)(b) GDPR), as the device identifier is needed to sign in on the watch. Other notifications (matches, Rankings and prizes) can be turned off in the settings.
  • Appearing in the Rankings and on the public profile: performance of the contract (Art. 6(1)(b) GDPR). The User may object by making their profile private.
  • Fraud prevention (email hash, match checks, limits, prize cancellation and account blocks): PADEL'EM's legitimate interest in ensuring the integrity of the competition and the Referral Program (Art. 6(1)(f) GDPR).
  • App usage analytics and error logging: consent (Art. 6(1)(a) GDPR), managed from the App settings.
  • Personalised advertising: consent (Art. 6(1)(a) GDPR), given through the tracking permission on iPhone and the consent notice on Android.
  • Marketing emails: consent (Art. 6(1)(a) GDPR) or, where applicable, legitimate interest under Article 21(2) of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI-CE”). Users can unsubscribe in every email and from the settings.
  • Premium Subscription, Referral Program and Prize Codes: performance of the contract (Art. 6(1)(b) GDPR). The Prize Code is sent to the account's email address even if the User has not accepted marketing emails, as it is a transactional communication.
  • Artificial intelligence features: performance of the contract (Art. 6(1)(b) GDPR) when the User uses the chat or the analyses.
  • Retention of blocked data to address potential liabilities: compliance with legal obligations (Art. 6(1)(c) GDPR).

Match integrity is verified through automated checks whose effect is to determine whether a match counts as competitive or is recorded as training.

4. Mandatory and optional data

The data needed to create an account is essential to provide the Service. The phone notifications permission is the only mandatory permission: without it, signing in on the watch with the QR code is not possible. The location, contacts and health permissions, and consent to analytics and personalised advertising, are optional; refusing them does not prevent use of the App, subject to the limitations described in this Policy.

5. Information visible to other Users

  • Public profile: first name, last name, photo, city, playing hand, level and statistics.
  • Rankings: name, photo, city, playing hand, wins, matches, position and its change, and the history of closed months and their podiums.
  • If the User makes their profile private or deletes their account, they no longer appear, including in the history.

6. Recipients of the data

PADEL'EM does not disclose personal data to third parties except where required by law. To provide the Service, the following providers may access the data as processors or, where applicable, as independent controllers:

  • Amazon Web Services, Ireland region (EU): servers, database, image storage and email delivery. The email tool (Mautic) is hosted by PADEL'EM on that infrastructure.
  • Google: Firebase Analytics, Firebase Crashlytics and Firebase Cloud Messaging; AdMob; Google sign-in; Google Places, which receives the match coordinates to identify the club; Gemini, which receives chat messages and the match data needed to answer; and Health Connect.
  • Apple: Sign in with Apple, App Store (purchases and offer codes) and Apple Health.
  • RevenueCat: management of subscription status and granting of promotional premium periods.
  • Loggly (SolarWinds): server error logs, which include user identifiers.
  • CARTO and OpenStreetMap: the clubs map. When it is displayed, the App requests map styles and tiles directly from CARTO, which may process technical request data (IP address, device, requested tiles and time). These requests do not include the User's account or matches.

The App does not use any Facebook service. If the User opens PADEL'EM's Facebook page from the App, Meta's privacy policy applies.

Data may also be disclosed to courts, tribunals and competent authorities where there is a legal obligation to do so.

7. International data transfers

PADEL'EM's servers are located in the European Union. Some providers (Google, RevenueCat and Loggly/SolarWinds) may process data in the United States. Such transfers rely on the adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), for certified entities, or on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR).

8. Retention periods

  • General rule: for as long as the User's account remains active.
  • Account deletion: the profile (name, email, photo and other details), devices, followed Users and followers, match notes, the artificial intelligence chat and match locations are deleted, and the User no longer appears in the Rankings (in their history, the position is shown without a name). Matches and statistics are kept without any data that identifies the User. A one-way cryptographic hash of the email is kept to prevent Referral Program fraud and, blocked in accordance with Article 32 LOPDGDD, any data required by law for the limitation periods of any liabilities that may arise.
  • Technical logs: only for as long as necessary to ensure the security of the Service and to diagnose errors.
  • Backups: one (1) week.
  • Artificial intelligence chat: for as long as the User uses it. Older messages are summarised and deleted automatically as the conversation progresses, and everything is deleted when the account is deleted.
  • Contacts: not stored.

9. Data subject rights

9.1. The User may exercise the following rights at any time:

  • Access (Art. 15 GDPR): to know which data is processed and under what conditions.
  • Rectification (Art. 16 GDPR): to correct inaccurate or incomplete data.
  • Erasure (Art. 17 GDPR): to request deletion of their data, including from the App by deleting the account.
  • Restriction of processing (Art. 18 GDPR).
  • Portability (Art. 20 GDPR): to receive their data in a structured, commonly used and machine-readable format.
  • Objection (Art. 21 GDPR), in particular to processing based on legitimate interest.
  • Withdrawal of consent (Art. 7(3) GDPR), without affecting the lawfulness of processing based on consent before its withdrawal.

9.2. To exercise these rights, the User may write to hello@padelem.com. PADEL'EM may request the information needed to verify their identity and will respond within one (1) month, which may be extended by two (2) further months where necessary, taking into account the complexity and number of requests (Art. 12(3) GDPR).

9.3. If the User considers that the processing does not comply with the law, they may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the Member State of their habitual residence.

10. Minors

In accordance with Article 7 LOPDGDD, the App is not intended for children under fourteen (14), who may not register. If PADEL'EM becomes aware that a child under fourteen (14) has provided their data, it will delete it.

11. Security

PADEL'EM applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR): passwords are stored encrypted, communications are transmitted encrypted and access to data is restricted. However, no method of transmission over the Internet or of electronic storage is completely secure, and absolute security cannot be guaranteed.

12. Links to third-party sites

The Service may contain links to third-party websites that are not operated by PADEL'EM. PADEL'EM has no control over, and is not responsible for, their content, privacy policies or practices, and Users are advised to review the privacy policies of those sites.

13. Website cookies

The Website uses cookies as described in the Cookie Policy.

14. Changes to this Privacy Policy

PADEL'EM may update this Policy to reflect changes in the law or in the Service. Material changes will be notified to the User through the App. The date of the current version is shown at the top of this document.

15. Contact

For any query regarding this Policy, the User may contact PADEL'EM at hello@padelem.com.