Privacy Policy

PaddleStack ("we", "our", or "us") operates the PaddleStack mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app.

Information You Provide

• Account information: Phone number used for authentication via SMS verification.
• Profile information: Name and optional profile photo you choose to upload.
• DUPR rating: If you choose to link your DUPR account for skill-based matchmaking.

Information Generated Through Use

• Session and match data: Check-in records, match history, scores, court assignments, and queue participation.
• Device information: Device type and push notification tokens for delivering real-time updates.
• Match video: In sessions where the organizer allows recording and you have said you are OK being recorded, court cameras may stream your matches live and save them as replays. Your recording choice is saved with your RSVP.

Payment Information

• Paid sessions and events: When you pay to register for a paid session, tournament, or event, your payment is processed by Stripe, our third-party payment processor.
• Card data: Your full card number and security code are entered directly with Stripe and are never stored on PaddleStack's servers. We retain only a payment record — amount, date, status, a Stripe reference ID, and the last four digits of your card — so we can show your purchase history and process refunds.

Information We Do Not Collect

• We do not collect precise location data.
• We do not use advertising trackers or analytics SDKs that share data with third parties.
• We never store your full payment card number or security code — that data is handled entirely by Stripe.

• To create and manage your account.
• To check you into pickleball sessions and manage queue placement.
• To match you with other players based on skill level and party preferences.
• To send push notifications about match assignments, queue updates, and party invitations.
• To display match history and session recaps.
• To improve and maintain the app's functionality.

We do not sell, rent, or trade your personal information. We may share limited information in the following cases:

• With other players: Your name, profile photo, and skill rating are visible to other players in the same session.
• Match video: Live streams and saved replays of recorded matches can be watched by anyone, including on the PaddleStack website, without signing in.
• With session organizers: Admins who create sessions can see participant information for session management, including whether you have paid for a paid session or event.
• Service providers: We use Twilio (SMS), Apple Push Notification Service, Microsoft Azure (hosting), Cloudflare (video streaming and storage), and Stripe (payment processing). These providers process data on our behalf under contractual obligations. Stripe's handling of your payment information is governed by Stripe's own privacy policy.
• Legal requirements: We may disclose information if required by law or to protect our rights.

Your data is stored on secure servers hosted on Microsoft Azure. We use encryption in transit (HTTPS/TLS) and implement access controls to protect your information. Authentication tokens are stored securely on your device using encrypted storage.

We retain your account and match data for as long as your account is active. Session queue data (queue position, current match state) is ephemeral and automatically expires within 24 hours. If you delete your account, all associated data is permanently removed from our systems, including any family profiles you added (see Children's Privacy for what other players may still see).

• Access and correction: You can view and update your profile information within the app at any time.
• Family profiles: You can edit or delete a family profile, or change its PIN, from Profile → Family in the app.
• Account deletion: You can permanently delete your account and all associated data from the Privacy & Data screen in the app. This action is irreversible.
• Video recording: You can change whether you are OK being recorded from the session page in the app at any time. To have a replay you appear in removed, email support@paddlestack.com.
• Push notifications: You can disable push notifications through your device settings.

PaddleStack accounts are not available to children under 13. If someone tells us during sign-up that they are under 13, we delete the account immediately and do not keep the information they entered.

Children under 13 may play at events as guests added by the event host. For a child guest, the host provides only a first name and last initial and chooses a 4-digit PIN; we do not collect a phone number, email, photo or birth date. Child guest records for open play are deleted automatically within a few hours after the session ends. For tournaments, the first name and last initial remain on results and standings, and the PIN is removed when the tournament ends.

For tournaments rated by DUPR, the host may add a child guest's DUPR ID, provided by a parent or guardian, so results can be submitted to DUPR. We store only the DUPR ID and ratings, and remove them 30 days after the tournament ends.

Family profiles

A parent or guardian can add a child who has no phone to their own account as a family profile. The parent enters the child's first name, last initial and gender, and chooses a 4-digit PIN the child uses to check in at a venue's kiosk. We do not collect a phone number, email, photo or birth date for a family profile, and the child cannot link DUPR or enter tournaments or leagues.

• Who can see it: At a venue where the child plays, their first name and last initial appear like any player's: in queues, on court displays and in the venue's kiosk list. That venue's hosts can also see the child's PIN so they can help with check-in. Outside those venues, a family profile cannot be searched for or followed, and the child's match history is visible only to the parent and to hosts of sessions the child played in.
• Notifications: Notifications about the child (for example, that their court is ready) go to the parent's phone.
• How long we keep it: Until the parent deletes the profile in the app, or deletes their own account, which deletes every family profile with it. After deletion the profile is anonymized. Some records that other players hold may still show the child's first name and last initial: notifications other players received (kept up to 180 days), names recorded on past match results, and comments other players wrote.

A parent or guardian may ask us to remove a child's name from any results by contacting support@paddlestack.com. If we learn we have collected personal information from a child under 13 in any other way, we delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website. Your continued use of PaddleStack after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, please contact us: