Who We Are
PickleLog ("we", "us", or "our") is a recreational pickleball player performance tracking application. The app is operated independently and is not affiliated with USA Pickleball, DUPR, or any other governing body.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the PickleLog mobile app or website. By creating an account, you agree to this policy.
Data We Collect
We collect only the information necessary to provide the PickleLog service. This section is written to match the privacy categories disclosed for PickleLog in App Store Connect.
| Data Type | Examples | Linked to You | Used for Tracking |
|---|---|---|---|
| Contact information | Name, email address, and phone number if you add it | Name and email: Yes Phone: No |
No |
| User ID and account identifiers | User ID, player ID, login identifier, authentication tokens, invite/referral codes | Yes | No |
| Profile information | City, ZIP code, country, home court, gender, display name | Yes | No |
| User content and gameplay data | Match scores, score submissions, approvals, dispute reasons, MVP votes, wins/losses, ratings, XP, achievements, standings, and match history | Yes | No |
| Purchase data | Purchase history, Premium subscription status, and purchase entitlement information | No | No |
| Location data | Precise location and coarse location if you choose to add location to a match | No | No |
| Usage data | Product interaction, including app activity used to understand feature usage | Yes | No |
| Diagnostics and performance data | Crash data, performance data, and other diagnostic data | No | No |
| Local device storage | Session tokens and temporary join-flow state stored in your browser's localStorage / sessionStorage | Device only | No |
The App Store privacy categories disclosed for PickleLog are Contact Info, Location, Identifiers, Purchases, Usage Data, and Diagnostics. These categories are used for app functionality, analytics, product personalization, account management, subscriptions, score tracking, ratings, leaderboards, safety, security, and service improvement. They are not used for third-party advertising or tracking.
We do not collect contacts, browsing history, advertising identifiers for tracking, or data from other apps on your device.
Precise and coarse location are collected only when you voluntarily tap "Add Location" during a match. This is entirely optional. If you grant location permission, your device's location may be recorded alongside that match record. You can decline location access at any time in your device settings without affecting any other app functionality.
We also store limited data locally on your device (via browser localStorage and sessionStorage) to keep you logged in between sessions and to temporarily hold QR join-flow state. This data never leaves your device except as part of normal API calls to our servers.
App Store Privacy Label Summary
For App Store privacy label purposes, PickleLog's data collection is summarized as follows:
| Apple Category | Examples in PickleLog | Purpose | Tracking |
|---|---|---|---|
| Contact Info | Name, email address, phone number | Name: product personalization and linked to your identity. Email address: app functionality and linked to your identity. Phone number: analytics and product personalization, not linked to your identity. |
No |
| Location | Precise location, coarse location | App functionality, not linked to your identity | No |
| Identifiers | User ID | App functionality and product personalization; linked to your identity | No |
| Purchases | Purchase history | App functionality, not linked to your identity | No |
| Usage Data | Product interaction | Analytics; linked to your identity | No |
| Diagnostics | Crash data, performance data, other diagnostic data | App functionality, not linked to your identity | No |
The App Store listing currently discloses 11 data types: Crash Data, Precise Location, Email Address, Phone Number, Other Diagnostic Data, Product Interaction, Coarse Location, User ID, Performance Data, Name, and Purchase History.
How We Use Your Data
We use your data only for the following purposes:
- Creating and managing your PickleLog account
- Recording, approving, and displaying match scores and results
- Calculating your player rating and XP progression
- Displaying leaderboards and player statistics within your club
- Sending push notifications for score approvals, match invites, and other in-app activity (only if you grant notification permission)
- Sending password reset codes via email
- Processing Premium subscription payments
- Tracking referrals and invite redemptions to credit the correct players
- Attaching optional GPS coordinates to match records for court/venue context
- Understanding product interactions for analytics and product personalization
- Improving app performance, diagnosing crashes, and fixing bugs
Push notifications: If you grant notification permission, we store your device's push token to send you alerts about score approvals, match invites, and other activity directly relevant to your games. You can revoke notification permission at any time in your device settings. Revoking permission automatically invalidates your push token and stops all notifications — no account changes required.
Data Storage & Security
Your data is stored securely using Supabase, a US-based cloud infrastructure provider that uses PostgreSQL with row-level security. All data is encrypted in transit using TLS and at rest using AES-256.
Passwords are never stored in plaintext. We use PBKDF2 key derivation with 100,000 iterations and a unique random salt per user — the same standard used by major financial institutions.
Access to your data is restricted to authenticated API calls using your credentials. No third party has direct database access.
Data retention: We retain your personal data for as long as your account is active. If your account is inactive for more than 3 years with no logins or match activity, we may delete or anonymise your profile data. You can delete your account at any time (see Section 7). Push notification tokens are invalidated and removed when you revoke notification permission or delete your account. GPS coordinates attached to match records are retained for the lifetime of that match record but are anonymised if you delete your account.
Data Sharing
We do not sell your personal data. We do not share your data with advertisers, data brokers, or marketing platforms.
Your data is shared only in these limited circumstances:
- Within your club: Your name, match results, and rating are visible to other players in your club's leaderboard — this is core to the app's purpose.
- Service providers: Supabase (database hosting), Resend (transactional email for password resets), and our push notification delivery provider process your data solely to operate the service. Your push token is shared with the notification provider only to route alerts to your device.
- Legal requirements: If required by law, court order, or to protect the safety of users.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of your personal data | Email privacy@picklelog.com |
| Correction | Update incorrect or incomplete data | Settings → Profile in the app |
| Deletion | Delete your account and personal data | Settings → Profile → Delete My Account |
| Portability | Receive your data in a portable format | Email privacy@picklelog.com |
| Restriction | Restrict processing of your data | Email privacy@picklelog.com |
| Opt-out of sale | We don't sell data — no action needed | N/A |
These rights apply under GDPR (EU/EEA), UK GDPR, CCPA (California), PIPEDA (Canada), Privacy Act 1988 (Australia), and LGPD (Brazil). We will respond to verified requests within 30 days or as required by your local law.
Account Deletion
When you delete your account:
- Your profile (name, email, phone, gender, court name) is permanently removed
- Your credentials are deleted and you can no longer log in
- Your push notification token is immediately invalidated and removed
- Your referral and invite code history is permanently deleted
- Your match history entries are anonymised — scores remain for the integrity of other players' records but are no longer linked to your identity; GPS coordinates on those records are also anonymised
- Your XP, ratings, and achievements are permanently deleted
- Any locally stored session data (localStorage / sessionStorage) is cleared when you log out prior to deletion
Deletion is processed immediately and cannot be undone. If you have an active Premium subscription, cancelling it separately through your payment provider will stop future charges.
Children's Privacy
PickleLog is not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us at privacy@picklelog.com and we will delete the account promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users within the app.
Continued use of PickleLog after changes are posted constitutes your acceptance of the updated policy. If you disagree with any changes, you may delete your account at any time.
Contact Us
Questions about this policy, data requests, or privacy concerns?
privacy@picklelog.comWe respond within 30 days or as required by applicable law in your jurisdiction.