Draft notice. This document is currently a placeholder pending legal review. The substantive commitments are accurate but the wording will be tightened before MatchFlow leaves private beta.
1. Who we are
MatchFlow ("we", "us", "our") is operated by JDAH Ventures Limited, registered in Ireland. You can reach us at support@playmatchflow.com.
2. What we collect
- Account data: email address, name, gender, base club, preferred side, self-rated padel level, mobile number (optional), profile photo (optional).
- Match activity: RSVPs, match scores, partner history, organiser actions in groups you belong to.
- Device data: push notification token, device platform (iOS / Android), app version. Used to deliver notifications and diagnose bugs.
- Diagnostics: minimal error logs containing request id, device id, and the error type. We do not collect screen recordings or analytics on user behaviour beyond what's needed to operate the service.
3. Why we collect it
To operate MatchFlow's core features: scheduling matches, matching players, ranking leaderboards, and delivering notifications about your matches. Match activity is shared with the other members of the groups you join — this is the product.
4. Who we share it with
- Other members of your groups see your name, level, and match history within that group.
- Microsoft Azure hosts our database, function backend, and push-notification orchestration (Azure Notification Hubs). Your data is stored in the EU (Azure West Europe region).
- Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) deliver push notifications to Android and iOS devices respectively. We send only your push token and the notification content.
- We do not sell your data to anyone, ever.
5. Health and fitness data
This section describes data that never reaches us.
If you turn the health features on, MatchFlow asks your phone for permission to use Apple Health (iOS) or Health Connect (Android).
- What we read: steps, distance walked or run, and active energy burned — only for the period of a match you actually played, derived from when play really started and ended. We do not read heart rate, sleep, weight, or any other health data type, and we do not read your activity at any other time.
- What we write: if you enable it separately, each match you played is saved into your health app as a workout, with its true start time and duration.
- Where it goes: nowhere. Your health data is read on your device, shown to you, and discarded. It is never transmitted to our servers, never stored by us, and never shared. No MatchFlow system is capable of receiving it. The only thing we store is whether each switch is on or off.
Because we never receive it — including heart rate — MatchFlow does not process health data as a special category of personal data under Article 9 of the GDPR. It stays in your phone’s health app, under your control.
Reading and writing are separate permissions and neither implies the other. Both are off unless you switch them on. You can turn them off under Settings › Health in the app, or revoke access entirely in Apple Health (Sharing › Apps) or Android’s Health Connect settings.
We do not use health data for advertising, we do not sell it, and we do not use it to train any AI model.
6. AI features and automated processing
Some features use Microsoft Azure OpenAI to generate text. Where they do, this is what is sent:
- Match reports: the result of a completed match, including player names, scores and standings.
- Group name suggestions: the words you have typed while creating a group.
- The setup helper: your settings and a summary of how often and when you play. If you use it as an organiser, your group’s timing settings too.
- Chat translation: the text of the single message you ask to translate, and only when you ask.
Our Azure OpenAI deployment is hosted in Spain on Microsoft’s EU data zone tier, so this content is processed within the European Union. It is not used to train Microsoft’s or anyone else’s models, and it is not used for advertising or profiling. Health data is never sent to any AI service.
Nothing is decided about you automatically. These features produce suggestions and text; the setup helper proposes settings changes and never applies them, so you confirm every change before it is saved.
7. Your rights (GDPR)
You can request a copy of your data, correct it, or delete it at any time. Email support@playmatchflow.com and we'll respond within 30 days. You can also delete your account directly from inside the app.
8. How long we keep it
Active account data is kept for as long as your account exists. When you delete your account, we delete your profile within 30 days; pseudonymised match history (your name removed) may be retained for statistical purposes related to other players' historical rankings.
9. Cookies and tracking
The mobile app does not use cookies. This marketing website uses a single privacy-preserving session cookie set by our hosting provider (Cloudflare) for security purposes only. No third-party advertising or analytics cookies.
10. Children
MatchFlow is intended for use by people aged 16 and over. We do not knowingly collect data from children under 16.
11. Changes to this policy
If we change this policy materially we'll email account holders with at least 30 days' notice before the changes take effect.
12. Complaints
If you believe we've handled your data poorly you can complain to your national data protection authority — for Portugal that's CNPD.