Privacy Policy

1. Controller

The controller for data processing under the GDPR is:
Melanie Ginting, Eichenweg 4, 21357 Wittorf, contact@compadely.com. See also the Imprint. This is a courtesy translation; the German version is legally binding.

2. Overview

Compadely helps you organize padel sessions: create sessions, manage players, generate rounds, keep results and tables. The App can be used as a guest without an account; an optional account links your sessions to you and enables statistics (ELO) and invitations. We run no advertising and no personal tracking. For our website we only use anonymous, cookieless analytics (Vercel Web Analytics, see section 3e) — the App itself contains no third-party analytics. The App is not directed at children; we do not knowingly collect personal data from persons under 16.

3. What data we process

a) Guests (no account)

When adding guest players, only the entered display name is processed to assign pairings and results. Guests have no lasting statistics. Legal basis: performance of contract/use of the App (Art. 6(1)(b) GDPR) or legitimate interest (lit. f).

b) Account (optional)

For an account we process your email address and display name and login data. Authentication runs through our provider Clerk (see no. 4); sign-in is available via email code or via Google or Apple (“Sign in with Google/Apple”), whereby the respective provider transmits basic profile data (e.g. name, email) to us. Legal basis: Art. 6(1)(b) GDPR.

c) Game and session data

Session name, player display names, rounds, results, teams and – for accounts – the ELO rating are stored server-side in our database (Neon) so the session stays usable across devices and over time. Legal basis: Art. 6(1)(b) GDPR.

d) Push notifications (optional)

If you enable push, we process a device-specific push token to notify you about new rounds. Delivery runs through Expo (Expo Push Service). Legal basis: consent (Art. 6(1)(a)) via the system prompt or performance of contract (lit. b). You can disable push at any time in your device settings.

e) Server and usage data

When our servers/website are accessed, access data is technically generated (e.g. IP address, time, request) and processed by our hosting provider Vercel to ensure operation and security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

For website analytics (not the App) we use Vercel Web Analytics (Vercel, Inc., USA). The service works without cookies and collects no personal data: only anonymous, aggregated metrics are recorded (e.g. pages viewed, country of origin, device type, anonymized click events such as “App Store button clicked”). Individual persons are not re-identified. Legal basis: legitimate interest in a high-reach website (Art. 6(1)(f) GDPR).

f) Local storage on your device

For offline use, the App stores session data locally on your device (device storage). This data stays on the device and is only transmitted to sync with the server when you are online.

We use no cookies — neither on the website nor in the App, and none for tracking or advertising. On the website we only store your language and color choice in your browser’s local storage (localStorage), purely functionally, so the site remembers them on your next visit. This information does not leave your browser and does not serve re-identification. A consent banner is not required for this (§ 25(2) TTDSG: strictly necessary storage).

g) Health data (Apple Watch / Apple Health, optional)

If you use an Apple Watch and grant permission, the App records your padel game as a workout in Apple Health (heart rate, active energy, duration) and reads these values back to display heart rate, calories and fitness insights. This health data is processed and displayed exclusively locally on your device — it is not transmitted to us or third parties and does not leave your device. Processing is based on your explicit consent (Art. 9(2)(a) GDPR), which you give in Apple’s health permission dialog and can revoke at any time in iOS settings. Health data is never used for advertising.

4. Processors & third parties

We use carefully selected providers with whom data processing agreements (Art. 28 GDPR) are in place:

• Clerk (Clerk, Inc., USA) — authentication/account management.
• Neon (Neon, Inc., USA) — database/storage of session and account data.
• Vercel (Vercel, Inc., USA) — hosting of servers/website and anonymous, cookieless website analytics (Vercel Web Analytics).
• Expo (650 Industries, Inc., USA) — delivery of push notifications.
• Sentry (Functional Software, Inc., USA) — crash/error reports, only when enabled; without personal content (configured PII-free).
• Google (Google Ireland Ltd.) and Apple (Apple Distribution International Ltd.) — optional sign-in (“Sign in with Google/Apple”) and processing of in-app purchases via the respective app store.
• RevenueCat (RevenueCat, Inc., USA) — management of subscription entitlements once paid purchases are active.

This may involve a transfer to the USA. Where applicable, it is based on the EU Commission’s Standard Contractual Clauses (Art. 46 GDPR) and/or the EU-US Data Privacy Framework.

5. Retention & deletion

We store account data as long as your account exists. You can delete your account at any time in the App (Profile → “Delete account”). This deletes the account, statistics/ELO, saved groups and push tokens; session results you took part in are kept anonymized to preserve the data integrity of your fellow players. Session/guest data is deleted when the session is deleted by the host.

6. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw a given consent. For this, contact contact@compadely.com. You also have the right to lodge a complaint with a data protection supervisory authority — the authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen).

7. Changes

We adjust this privacy policy when processing changes. The version published here at the time applies.