Privacy Policy

Padelna Privacy Policy

Effective date: 27/09/2026

Padelna ("the app") helps padel players in Muscat, Oman, find players and fill their court. It is run by Mohammed Alfori, an individual developer in Oman ("we"). This policy explains what the app collects, why, who else handles it, how long it is kept, and what you can do about it.

Padelna is a service for padel players in Oman. We follow Oman's Personal Data Protection Law (Royal Decree 6/2022) and its executive regulations, wherever you downloaded the app from.

Contact: alforiapps@gmail.com

1. What we collect, and why

When you sign in (Google or Apple)

• Your email address, from Google or Apple. If you use Apple's "Hide My Email", it is a relay address. It is used only to sign you in, and is never shown to other players.

• Your name and profile photo, if your Google or Apple account provides them. They become your starting display name and photo, and you can change both.

• A user ID, which the app creates to tell accounts apart.

Your player profile

• Display name and profile photo. Other signed-in players see them.

• Preferred side (left, right or both). Other signed-in players see it.

• Gender. It is required, and it is used only to decide which matches you can join, because a match can be open to men, to women, or to both. It is never shown on your profile or to other players.

• Rating, level, tier and statistics (games played, wins, losses) and your rating history. These are calculated by the app from confirmed games, and other signed-in players see them.

• Birth year. Asked once when you set up your profile, only to check that you are 13 or older and whether you need a parent's or guardian's permission. It is never shown on your profile or to other players, and it cannot be changed in the app. If your birth year means you may be under 18, we also record when you confirmed that your parent or guardian agrees.

Playing

• The matches you create or join, the games you start or play in, the scores recorded, and your approvals or rejections of scores. If you reject a score, you can write a short reason, which the player who recorded it sees. Players in the same match see all of this.

Match chat

• The messages you send in a match's chat. Only the players currently in that match can read them, and a player can read the whole chat from the moment they join. A player who leaves the match can no longer read the chat, but the messages they sent stay for the others. Messages from a player you blocked are hidden from you.

• Every message in a match is deleted 3 hours after the match's scheduled end.

• A notification about new messages says only that there are new messages in your match and at which court. It never includes what anyone wrote, so the text of a message is not passed to Google's or Apple's push services.

Safety

• Blocks: the players you block. The blocked player is never told.

• Reports: when you report a player or a chat message, we store the reason, the details you write (up to 500 characters), and both players' display names as they were at that moment. When you report a message, we also keep a copy of that message and when it was sent. We keep those names and that copy even if either player later changes their name or deletes their account, and after the chat itself is deleted, so a report can still be understood. Only we can read reports.

Notifications

• A push notification token for each phone you use, so we can send you notifications through Google's and Apple's push services.

• The language (English or Arabic) and 12- or 24-hour clock of the app, so notifications match what you see in the app. These are stored per player, not per phone: if you use two phones, the one that opened the app most recently decides.

• A record of each notification sent to you. It may include the name of the player whose action caused it (for example, who joined your match). Sent notifications are deleted 7 days after they were sent.

Crash reports

• If the app crashes, or runs into an error it recovers from, it sends a report to Sentry: the error, where in the code it happened, the device model, the operating system and app versions, and a short trail of recent technical events (such as the app going into the background). The report contains no name, email, gender, photo, phone number, player ID, push token, device name or IP address. Anything like an ID or email inside an error message is removed on the phone before sending.

Technical logs

• Our hosting provider keeps short-lived server logs of requests, which include IP addresses, for security and troubleshooting. They are deleted automatically after a few days.

• To stop abuse, the app counts how often each account performs actions such as creating matches. These counts are deleted after two days.

On your phone only

• Your sign-in data, and the language you picked in Profile. They are removed when you delete the app.

What we do not collect: your location, contacts, text messages (SMS), the contents of your emails, payment details, or anything for advertising. There are no ads, no analytics or tracking SDKs, and we do not sell or share your data for advertising.

2. Who can see what

• Other signed-in players — adults and teenagers alike — can see your display name, photo, preferred side, rating, level, tier, statistics, rating history and the matches and games you are part of.

• The other players in a match can read the chat messages you send in it, until they are deleted.

• Nobody else in the app can see your email, gender, birth year, push tokens, language, clock setting, blocks or reports.

• We can see what is needed to run and moderate the service, including reports.

3. Who else handles your data (processors)

We use these services to run the app. Each processes data only to provide its service to us.

• Supabase: Database, sign-in, photo storage, server functions — Mumbai, India (AWS ap-south-1)

• Google Firebase Cloud Messaging: Delivering push notifications — Google's servers, worldwide

• Apple Push Notification service: Delivering notifications to iPhones — Apple's servers, worldwide

• Google Sign-In / Sign in with Apple: Signing you in — Google's and Apple's servers

• Sentry (Functional Software, Inc.): Crash and error reports, with no personal data — Outside Oman (United States or EU)

Your data is therefore stored and processed outside Oman, mainly in India. We choose providers that protect data in transit (HTTPS) and at rest.

4. How long we keep it

• While your account exists, we keep your profile and activity.

• When you delete your account, straight away:

  • your email and sign-in record are deleted;

  • your display name, photo, preferred side, gender, birth year (and the record of your guardian's agreement), push tokens, language and clock setting are erased, and your profile shows as "Deleted account";

  • every chat message you sent is deleted;

  • you are removed from upcoming matches; your unfinished games are discarded;

  • the notifications waiting for you and the blocks you made are deleted.

• What stays after deletion, without your name or photo: your rating, level, tier and statistics, and the games you played in, because they are part of other players' results and ratings. Reports keep the names as they were when the report was filed, and a copy of any reported message (see section 1). Notifications already sent to other players can show your old name until they are deleted, within 7 days.

• Chat messages are deleted 3 hours after the match's scheduled end, for everyone.

• Backups: if our hosting plan keeps backups, deleted data can remain in them for up to 7 days before they expire.

5. Deleting your account

In the app: Profile → Edit profile → Delete account. It takes effect immediately and cannot be undone.

Without the app: email alforiapps@gmail.com from the email address you signed in with, asking us to delete your Padelna account. We delete it within 7 days and reply to confirm. A parent or guardian of a player under 18 can ask the same way.

6. Age

Padelna is for players 13 and older. Under Oman's Personal Data Protection Law, anyone under 18 needs a parent's or guardian's permission to use the app, and we ask that they play with their parent's or guardian's knowledge.

When you set up your profile, the app asks your birth year. If it means you are under 13, you cannot use Padelna, and the account you just created is deleted straight away. If it means you may be under 18, you must confirm that your parent or guardian agrees before you can continue; we record when you did. Players under 18 can use the match chat like everyone else. Please remember that your profile is visible to every signed-in player, including adults you have not met. If you believe a child under 13 has an account, or a player under 18 is using the app without permission, email us and we will delete the account.

7. Your rights

Under Oman's Personal Data Protection Law you can ask us to:

• tell you what personal data we hold about you and give you a copy;

• correct it (you can change your name, photo and side in the app yourself);

• delete it (see section 5);

• stop processing it, or withdraw consent, which in practice means deleting your account.

Email alforiapps@gmail.com. We reply within 30 days. If you are not satisfied, you can complain to the Ministry of Transport, Communications and Information Technology in Oman.

8. Security

Everything between the app and our servers is encrypted (HTTPS). Every table in our database is protected so that each account can access only what the app allows, and only the app's own server functions can change ratings, scores and match status. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities as the law requires.

9. Changes

If we change this policy, we will update the effective date above, and tell you in the app or by notification if the change is significant.