Privacy Policy

CanchaSync is a padel platform for players, clubs, venues and tournament organizers. It is operated by [CanchaSync legal entity name], registered at [Registered business address] (“CanchaSync”, “we”, “us” or “our”). We are responsible for the personal information described in this policy.

This policy applies to the CanchaSync website, web app and related services. It should be read alongside our Terms of Service.

For any privacy question or request, contact us at [Privacy contact email]. For general support, contact hello@canchasync.app. You can also write to us at [Registered business address].

[Data protection officer or representative details, if required]

Account information

• Your name, email address and password (stored only in encrypted/hashed form).
• Phone number, if you choose to add it.
• Profile photo and optional profile details you add, such as playing position, country, gender or birthday, together with your privacy settings for them.
• Your confirmation that you are at least 13 years old, and a record of which versions of our Terms and Privacy Policy you accepted and when.
• If you sign in with Google, the basic profile information Google shares with us (such as your name, email and profile picture).

Player and platform activity

• Matches, tournaments and events you join, create or organize, including registrations, rosters and waitlists.
• Results, scores, rankings, standings, statistics and partnership history.
• Court bookings, where offered.
• Club memberships, affiliations and organizer or staff roles.
• Your settings and preferences, such as notification choices and display theme.

Communications

• Messages and posts you share in community features, where available.
• Support requests, reports, feedback and other messages you send us.

Technical information

• IP address, browser type, device and operating system information.
• Usage and log data, such as pages visited, actions taken, timestamps and error reports.
• Cookie and session identifiers (see Cookies).
• Security information used to protect accounts and detect abuse.

Payment-related information

If paid bookings or registrations are offered, payments are handled by a third-party payment processor ([Payment processor name]). We receive limited information such as the amount, status and the last four digits of a card — we do not store full payment-card numbers.

We use personal information to:

• Create and maintain your account, and keep you signed in securely.
• Run CanchaSync's features: matches, tournaments, brackets, schedules, live scores, rankings, leaderboards, clubs, court bookings, profiles and community features.
• Personalize your experience, such as showing relevant clubs, events and statistics.
• Send service communications — confirmations, schedule changes, security alerts and support replies.
• Process transactions, where applicable.
• Detect and prevent fraud, cheating, abuse, security incidents and breaches of our Terms.
• Understand how CanchaSync is used so we can fix problems and improve features and reliability.
• Comply with our legal obligations and respond to lawful requests.

We will not use your information for marketing unless you have separately opted in, and we do not sell your personal information.

Depending on where you live, we rely on one or more of the following grounds to use your information:

• Performing our contract with you — to provide the features you signed up for.
• Legitimate interests — for example keeping the Platform secure, preventing cheating and improving our services — balanced against your rights.
• Consent — where the law requires it, such as optional marketing or non-essential cookies. You can withdraw consent at any time.
• Legal obligations — where we must process or keep information by law.

Legal review required: confirm the lawful bases and any consent or registration requirements under Bahrain's Personal Data Protection Law and each GCC market CanchaSync operates in.

We share personal information only as needed to run CanchaSync:

• With other players, clubs, organizers and venues, as needed for the features you use — for example, an organizer sees who registered for their tournament.
• With service providers who host and operate the Platform for us, such as cloud hosting, database, authentication and email providers, under contracts that limit how they can use the data.
• With payment processors, when you make a payment.
• With professional advisers, such as lawyers, accountants and auditors.
• With authorities, where required by law or to protect the rights, safety and property of our users, the public or CanchaSync.
• With parties involved in a merger, acquisition, financing or transfer of our business, subject to appropriate confidentiality protections.

Our current service providers are listed at [Subprocessor list link].

CanchaSync is a social sports platform, so some information is visible to others by design:

• Your name, username and profile photo may be shown to other users and on tournament rosters, brackets and leaderboards.
• Match results, scores, standings and rankings from events you take part in may be visible to other participants and, for public events or live views, to anyone with the link.
• Organizers and clubs see the registration and booking details needed to run their events.
• Optional profile details (such as email, phone, gender, birthday and country) follow the visibility settings you choose in your profile.

You can review and change your visibility settings at any time in your account settings.

Our service providers may store or process information in countries other than your own, including [Hosting regions]. Where we transfer information across borders, we use appropriate safeguards as required by applicable law.

Legal review required: cross-border transfer conditions and approvals under Bahrain and other GCC data protection laws, and the safeguards used with each provider.

We use technical and organizational measures designed to protect your information, including encryption in transit, hashed passwords, access controls and database row-level security. No online service can guarantee absolute security, so please use a strong, unique password and tell us promptly at hello@canchasync.app if you suspect unauthorized access to your account.

We keep personal information only for as long as needed for the purposes in this policy:

• Account information — while your account is active, and for [Retention period] after deletion.
• Match results, standings and rankings — [Retention period], as they form part of shared event records.
• Records of which Terms and Privacy Policy versions you accepted — [Retention period], so we can demonstrate consent.
• Support communications — [Retention period].
• Technical and security logs — [Retention period].

When information is no longer needed, we delete or anonymize it, unless we must keep it to meet legal obligations or resolve disputes.

Depending on where you live, you may have the right to:

• Access — ask for a copy of the personal information we hold about you.
• Correction — fix inaccurate or incomplete information (much of it you can edit directly in settings).
• Deletion — ask us to delete your information.
• Objection — object to processing based on legitimate interests.
• Restriction — ask us to limit how we use your information.
• Portability — receive your information in a portable format.
• Withdraw consent — where we rely on consent, at any time.
• Complain — to a data protection authority (see section 15).

To make a request, contact [Privacy contact email]. We may need to verify your identity, and we'll respond within the time required by law.

CanchaSync is not directed at children under 13. Everyone must confirm they are at least 13 years old before creating an account, and we do not knowingly collect personal information from children under 13.

If we learn that an account belongs to a child under 13, we will review the account and delete it, together with the associated personal information, or take other appropriate action. If you believe a child under 13 has created an account, please contact [Privacy contact email].

Legal review required: local age thresholds, parental-consent requirements for teen users, and youth-sports obligations in Bahrain and each GCC market.

We use strictly necessary cookies and local storage to keep you signed in, protect your account and remember basic choices such as light or dark mode. These are required for CanchaSync to work and can't be switched off.

If we introduce analytics or other non-essential cookies, we'll describe them here and, where required, ask for your consent first and give you a way to manage your preferences: [Cookie preferences link].

We may update this policy as CanchaSync evolves. Each version is dated and numbered at the top of this page, and earlier versions are kept on record. If we make a material change, we'll notify you by email or in the app before it takes effect.

If you have a question or concern, contact us first at [Privacy contact email] and we'll do our best to help. You also have the right to complain to your data protection authority: [Supervisory authority name and contact details].