Privacy Policy

1. Scope

PlyrPass is a pickleball companion app: a skill passport, live match rooms, rankings, club communities, and chat. This policy applies to the PlyrPass app, the plyrpass.app marketing site, and the waitlist form. It does not cover third-party services we link to or rely on (Apple, Google, Meta, RevenueCat) beyond describing what we send them — each has its own privacy policy governing what they do with your data.

2. Information we collect

Account & profile

• Email address and password (if you sign up directly — your password is hashed by our auth provider, Supabase; we never see or store it in plain text).
• Name, email, and profile photo from Google or Facebook, if you sign in with one of those instead.
• First name, last name, and initials.
• Birthdate (used for rankings age filters).
• Profile photo, uploaded from your camera or photo library.
• Home court, city, and region.

Gameplay & skill data

• Skill rating, rating history, tier, games played, wins, and win streak.
• Match, game, and live-room history — including scores and who you played with.
• Stamps and milestones you've earned.
• DUPR rating, if and when you connect a DUPR account (this integration is not live yet).

Clubs, social & chat

• Clubs you create, join, or are invited to, and your membership/role in each.
• Club posts, comments, likes, and announcements you author or interact with.
• Direct messages with friends and club chat messages, including club invites sent through chat.
• Friend connections and pending friend/club invites.

Location

If you turn on "Share location for nearby rooms" in Settings, we read your device's location to show you live match rooms and events near you. This is off by default, only active while you use that feature, and never shown to other players as a precise location — only used to sort and filter what's nearby.

Purchases & subscription

If you subscribe to PlyrPass Premium, RevenueCat manages the subscription and tells us your plan and its expiry. Billing itself runs through the Apple App Store or Google Play — we never see or store your card number, billing address, or other payment details.

Device & technical data

• A device identifier, used only to prevent one person from running multiple accounts to game rankings and matchmaking (see our anti-sandbagging measures). It is not used for advertising or tracking across other apps.
• A push notification token, so we can deliver notifications (club announcements, chat messages, invites) to your device.
• Standard technical data collected by our infrastructure providers — IP address, app version, device/OS type, and crash logs — for security and reliability, not for building an advertising profile.

Waitlist & website

If you join the waitlist on plyrpass.app, we collect the email address you submit, solely to notify you when the app is ready. The website also uses Vercel Analytics, which reports aggregated, anonymized visit counts and does not use cookies or track you individually.

3. How we use it

• Create and operate your account, profile, and passport.
• Calculate skill ratings, rankings, and match/room history.
• Power club features: memberships, posts, announcements, and invites.
• Deliver chat messages and push notifications.
• Show nearby live rooms and events, if you've enabled location sharing.
• Manage Premium subscriptions and unlock the features they include.
• Deter multi-accounting and abuse of matchmaking or rankings.
• Respond to support requests and notify waitlist signups when the app launches.
• Diagnose crashes and keep the app secure and reliable.

We do not use your data to build advertising profiles, and we do not sell your personal data.

4. Who we share it with

We share data only with the service providers that make PlyrPass work, and only what each needs to do its job:

• Supabase — our database, authentication, and file storage provider. Nearly all app data (profiles, matches, clubs, chat, photos) is stored here.
• Expo — delivers push notifications to your device using your push token.
• RevenueCat — manages Premium subscription status.
• Apple App Store / Google Play — process subscription payments; we only receive plan/status, never payment details.
• Google / Meta (Facebook) — if you sign in with one of these, they share your basic profile (name, email, photo) with us per your consent at sign-in.
• Vercel — hosts plyrpass.app and provides aggregated website analytics.

Other players see what you choose to make visible: your profile, rating, and activity inside clubs you share, per the visibility settings you control. We may also disclose information if required by law, or to protect the safety of our users.

5. Retention & deletion

We keep your data for as long as your account is active, so your passport, history, and club activity stay intact. You can request deletion of your account and associated personal data at any time — use our account deletion page, or email privacy@plyrpass.app. Some data — like match results tied to other players' games — may be retained in de-identified form to keep shared history and stats accurate for everyone else involved.

6. Security

Data in transit is encrypted (HTTPS/TLS). Passwords are hashed, never stored in plain text. Database access is governed by row-level security policies, so a player can only read or write the data they're allowed to — for example, private club data is only visible to members, and direct messages are only visible to their participants.

7. Your choices & rights

• Edit or remove your profile photo, name, and other profile fields at any time in Settings.
• Turn location sharing and push notifications on or off in Settings.
• Control whether you appear in public rankings and who can add you by QR code.
• Disconnect Google or Facebook sign-in from your account at any time through that provider's own settings.
• Request a copy of your data, or ask us to delete your account, by emailing privacy@plyrpass.app.

If you're in the Philippines, these rights are consistent with the Data Privacy Act of 2012. If you're in the EU/UK or California, they're consistent with GDPR and CCPA-style rights to access, correct, and delete your data.

8. Children's privacy

PlyrPass is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us at privacy@plyrpass.app and we'll remove it.

9. Changes to this policy

We'll update this page as PlyrPass changes — new features like DUPR sync may add new data categories. Material changes will be reflected here with an updated "Last updated" date, and significant changes will be announced in-app.

10. Contact us

Questions about this policy or your data? Email us at privacy@plyrpass.app.