Privacy Policy
PiKalaro is a pickleball app for finding players, courts, and games. This policy explains what we collect, why, and what control you have over it. We do not sell your personal information, and we do not use advertising or analytics trackers.
What we collect
Account information
Your email address and password, handled by our authentication provider. Passwords are stored only as salted hashes — we never see them.
Profile information you choose to provide
Display name, birthday, sex, handedness, DUPR rating, short bio, city and state, and a profile photo. Every field except your display name is optional and can be edited or cleared at any time in the app.
Location
With your permission, the app reads your device's current position to sort and filter courts by distance. This calculation happens on your device — your coordinates are never transmitted to or stored on our servers. You can decline the permission and still browse every court by searching manually.
Photos
If you set a profile picture, the app accesses your photo library to read the single image you select. That image is uploaded and stored as your avatar. No other photos are read or uploaded.
Push notification token
If you enable notifications, we store an anonymous device token so we can deliver connection requests, event updates, and chat alerts. Turning notifications off in the app deletes the token.
Content you create
Courts you add, events you create or sign up for, connection requests, chat messages, and court reviews.
How we use your information
- To run your account and show your profile to players you choose to share it with.
- To match you with players and events using criteria like rating and location.
- To deliver messages and notifications you have asked for.
- To keep the service safe — enforcing blocks, and investigating abuse reports.
We do not use your information for advertising, and we do not sell or rent it to anyone.
What other users can see
Other players can see your display name, photo, bio, rating, handedness, sex, age, and city/state. Your email address and your exact birthday are never shown to other users — only your age is derived from it.
If you set your profile to private, it is hidden from search and visible only to players you have connected with. Locations and events can also be created privately, visible only to contacts you select.
Who we share it with
We share data only with the service providers that make the app work:
- Supabase — database, authentication, and file storage.
- Expo — delivery of push notifications to your device.
- Google Maps — renders the court map; Google receives map requests from your device under its own privacy policy.
We may also disclose information if required by law, or to protect the rights and safety of our users.
How your data is protected
- All traffic between the app and our servers is encrypted with HTTPS.
- Chat messages are encrypted at rest, and readable only through a controlled path that verifies you are a participant in the conversation.
- Row-level security is enforced on every database table, so a request can only ever read the rows it is entitled to.
No system is perfectly secure, but these controls are applied to every piece of data in the app.
Your choices
- Edit or clear any profile field from Profile → Edit Profile.
- Control visibility with the public/private profile toggle.
- Turn off notifications from Profile, which deletes your device token.
- Revoke location or photo access at any time in your device settings.
- Block another user to stop all contact from them.
- Delete your account from Profile → Delete Account. See below.
Deleting your account
You can delete your account directly in the app: Profile → Delete Account. This immediately and permanently removes your profile, photo, connections, event signups, messages you have sent, reviews, blocks, and notification tokens. It cannot be undone.
Courts you contributed remain on the map for other players, with your name detached from them. Backups are retained for a short period as part of routine disaster recovery and then expire.
Data retention
We keep your information for as long as your account exists. When you delete your account, it is removed as described above.
Children
PiKalaro is not intended for children under 13. You must be 13 or older to use it, and the app does not accept a profile age under 13. Age is self-reported and we do not verify it. If you believe a child under 13 has created an account, contact us and we will remove it.
Changes to this policy
If we make material changes we will update the effective date above and, where appropriate, notify you in the app.
Contact
Questions about your data, or requests to access or delete it: [email protected]