Privacy Policy

Who is responsible

TournApp is operated by Nicolas Morales, Colombia (the "controller"). You can contact us about your data at support@nicodev.me.

What we collect

Account: your name, your email address and a password stored only as a one-way hash (we cannot read it).

Profile photo: only if you choose to add one. It is stored on our server.

Tournaments: the tournaments and matches you create or join, with their names, dates, the players' names (including guest names typed by organisers), schedules and scores.

Preferences: your app language and whether you want notification emails.

Levels: for each sport (padel, tennis) where you set one, the starting level that your answers to a short questionnaire give (we keep only that level and the date, not your answers), and the level changes that follow from the scored matches you play. Your current level is calculated from those matches, so it can change if a score is corrected or a tournament is deleted.

Reports: if you report a person, tournament or league, the reason, your note, who you are and what you reported. Only we see it; the person you report is not told who reported them. Reports you made are deleted with your account.

Your acceptance of the Terms and this policy: the date and version.

Technical data: our servers record requests (IP address, time, page) to keep the service secure and prevent abuse. These logs are kept for a limited time.

Only on your device, never sent to us: the sign-in details you save for Face ID / Touch ID (kept in the iOS Keychain); the camera is used on the device to read a tournament QR code and nothing is stored; the photo library is accessed only for the picture you choose.

What we do not do

We do not sell your personal data, show advertising, use analytics or advertising trackers, or follow you across other apps or websites.

How we use your data

To run the service: accounts, tournaments, scoring, standings, rankings and player levels.

To show results to the people you play with (see "Who can see your data").

To send you emails: that you were added to a tournament or match, the results when it finishes, password resets and, if an organiser invites a guest, one invitation. You can switch notification emails off in Profile; password reset emails are always sent.

To keep the service secure, prevent abuse and fix problems.

Who can see your data

Other participants of a tournament or match you are in can see its name, the players' names and the results.

People you have connected with (people you have played with) can see your name and your points in the rankings.

People you have connected with can also see your level for each sport, how reliable it is and how many matches it is based on. Your history of level changes, with the tournament names, is visible only to you. People you are not connected with do not see your level, and public tournaments do not make it visible.

The Community feed shows finished tournaments and matches that involve you or people you are connected to (people you have played with). You can disconnect from anyone in the People screen.

The owner of a tournament or league can mark it as public once it is finished: anyone signed in then sees its name, date and the winner's name in the Community feed. Nothing else about it becomes visible.

Anyone who has a tournament's share code can open its public page, which shows the tournament name, the players' names and the results.

Service providers process data for us under our instructions: our hosting provider (Contabo) and our email delivery provider (Resend).

We may disclose data if the law requires it.

Emails to guests

If an organiser types an email address to invite a guest, we use it once to send that invitation and do not store it.

Cookies (website)

The website uses two cookies, both strictly necessary: one that keeps you signed in, and one that remembers your language. We do not use analytics or advertising cookies, so there is no cookie banner. If that ever changes, we will ask for your consent first.

How long we keep it

Until you delete your account. In Profile choose "Delete account": your account, photo, levels and preferences are removed, together with every tournament and match you own. In tournaments organised by someone else your name is replaced by "Deleted player" so the others keep their results.

Backups made before a deletion keep the data until they expire, up to 26 weeks, and are not used for anything else. Server logs are kept for a limited time.

Your rights

Depending on where you live (for example under the GDPR in the EU/UK, or the CCPA in California) you can ask to access, correct, delete, export or restrict your data, and to object to its use. Write to support@nicodev.me; you can also delete your account yourself in Profile. You may complain to your data protection authority.

Children

TournApp is not directed to children under 13 (or the age of digital consent in your country). If you believe a child has an account, write to support@nicodev.me and we will delete it.

Security

Traffic is encrypted (HTTPS), passwords are hashed, each tournament is visible only to its participants, and sign-in attempts are rate limited. No system is perfectly secure.

International transfers

Our servers and providers may be located outside your country. We use providers that protect data to an appropriate standard.

Changes

If we change this policy we will update the date and version above and, for important changes, tell you in the app or by email.