Last updated 6 October 2026
Privacy policy
This policy explains what personal data RIVALZ collects, why, who we share it with and your rights. We keep it to what’s needed to run the app.
Who is responsible for your data
Noah Ryan, trading as RIVALZ, Ireland, is the data controller. Contact noah@rivalz.ie about anything in this policy.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Email address | To create your account and send sign-in links, receipts and important messages about your bookings | Contract |
| Name and preferred padel side | So other players and organisers can find you, add you to matches and see who’s on a guest list | Contract |
| Match results, padel and football levels, level history, head-to-head records | The core of RIVALZ: working out fair levels and showing your record | Contract |
| Fair-play and level ratings from opponents, teammate votes | To show sportsmanship and keep levels honest. Individual ratings are anonymous; only totals are shown | Legitimate interest |
| Bookings, tickets and payment records (amount, date, Stripe reference) | To provide what you bought, handle refunds and keep accounts for tax | Contract, legal obligation |
| Club owner details (role, phone number) | To check you’re allowed to manage a club | Legitimate interest |
| Technical logs (IP address, browser, errors) | To keep the service secure and fix problems | Legitimate interest |
Your card details go straight to Stripe. We never see or store them.
Who can see your profile
Other signed-in RIVALZ users can see your name, profile photo (if you add one), player card, levels, fair-play score and match history, so they can pick fair games and add you to results. If you enter a league, signed-in users can see your pair, division, results and league table. If you buy a ticket, the organiser sees your name and how many tickets you bought. If you book a court, the club sees the booking. Nobody else sees your email address.
Profile photos are optional. They’re shrunk on your phone before upload and stored at an unlisted web address, so anyone given that exact address could open the photo. You can change or remove your photo at any time on the My levels page. When you share your player card or a match result, the image goes wherever you choose to post it.
If you post or join an open game, signed-in users can see the game and who’s in it. To arrange league matches, the hours you mark as free are shown (as a count, alongside your name) to the other players in your matches. Notifications are kept in your inbox under the bell; if you turn on phone notifications, we store your browser’s notification address so we can send them, and delete it when you turn them off. You can choose which notifications you get at any time.
Who we share data with
- Stripe: payments, refunds, memberships and club payouts.
- Supabase: our database and sign-in, hosted in the EU (Frankfurt).
- Vercel: hosts the website and app.
- Our email provider: sends sign-in emails.
- Clubs: for bookings and events you buy from them, as described above.
Some of these companies are based in, or use staff in, the United States. Where data leaves the EU, it’s protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We don’t sell your data, and we don’t use it for advertising.
Cookies
We only use cookies that are needed to keep you signed in and to process payments securely. We don’t use advertising or tracking cookies, so there’s nothing to opt in to.
How long we keep it
We keep your account data while your account is open. If you delete your account, we delete your profile within 30 days. Payment records are kept for 6 years, as Irish tax law requires. Anonymous match results may be kept so other players’ levels stay correct, but they’re no longer linked to you.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. To delete your account or use any of these rights, email noah@rivalz.ie from the address you sign in with. We’ll reply within a month.
If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission, though we’d appreciate the chance to fix it first.
Children
RIVALZ is for people aged 16 and over. If you believe a younger child has created an account, contact us and we’ll delete it.
Changes
If we change this policy, we’ll update the date at the top and tell you about important changes by email or in the app. See also our terms and refund policy.