Privacy Policy

Last updated: 9/10/2026

PadelSetMatch is a padel player directory operated by Moorish Arches S.L. (Madrid, Spain). This page explains what data we collect, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. Data controller

Moorish Arches S.L. is the data controller. For any privacy request you can contact us via the "Make this app better" box on your Profile screen with the word "Privacy" in your message.

2. What we collect

• Account: email, hashed password (or Google/Apple sign-in identifier).
• Profile you enter: first name, age bracket, gender, cities/clubs you play at, languages, padel level, photo, short bio, ranked traits and availability windows.
• Activity needed to run the service: matches you host or join, invites, ratings, reports and blocks.
• Messages you send to other players inside the app (stored so the chat works — see §5).

3. What we do NOT collect

• Your last name (unless you choose to type it).
• Payment data — the app is currently free.
• Precise GPS location. You type your cities/clubs yourself.
• Advertising identifiers or third-party analytics tracking.

4. Who can see what

Your first name, photo, age bracket, gender, level, cities/clubs, languages, bio, ranked traits and availability are visible to other signed-in padel players — this is what makes the directory work. Your email, exact age, blocks, reports, personality Q&A answers and feedback are private and never shown to other users.

5. Your messages and personality answers

We do not read your private messages or your personality Q&A answers. We are not interested in the content of your conversations — it's yours.

Messages are stored on our servers, encrypted at rest, for one reason: so the chat feature works across devices and so we can respond if you report abuse. The only situations in which a human at Moorish Arches S.L. would ever open a specific conversation are:

• You (or the other party) file a report about that specific chat.
• We receive a lawful order from a Spanish or EU authority.

We never use your messages or Q&A answers to train AI models, to build advertising profiles, or to share with third parties.

6. Legal bases (GDPR Art. 6)

• Contract (Art. 6.1.b): creating your account, storing your profile, running matches and chat.
• Legitimate interest (Art. 6.1.f): preventing abuse, no-shows, spam and fraud.
• Consent (Art. 6.1.a): optional push notifications; you can revoke any time.
• Legal obligation (Art. 6.1.c): responding to lawful requests from authorities.

7. How long we keep data

• Profile & messages: as long as your account exists. When you delete your account they are permanently erased within 30 days (the delay covers backup rotation).
• Reports & safety records: up to 12 months after account deletion, so a banned user can't simply re-register.
• Server logs: up to 30 days for security and debugging.

8. Where data is stored — subprocessors

Data is stored inside the European Union with the following subprocessors:

• Lovable Cloud (built on Supabase) — hosting, database, authentication, storage (EU region).
• Google / Apple — only if you choose "Sign in with Google" or "Sign in with Apple" (verifies your identity).

Access inside the database is protected by row-level security: only you can read or modify your private data; other players only see the public fields listed in §4.

9. Cookies

We use a small number of essential cookies and localStorage entries to keep you signed in and to remember your language preference. We do not use advertising cookies, cross-site trackers or third-party analytics.

10. Your rights (GDPR)

You have the right to access, rectify, export, restrict, object to and delete your data, and to withdraw consent at any time. Account deletion is one tap on the Profile screen and is permanent. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). aepd.es

11. Age

PadelSetMatch is for players aged 18 or older. We do not knowingly collect data from minors. If you believe a minor has created an account, please report the profile inside the app and we will remove it.

12. Changes to this policy

If we make material changes we will notify you inside the app before the changes take effect.