Privacy Policy

1. Who We Are

Smash ("we", "us", "our") operates the Smash mobile application and web platform at playsmash.io. We are a club-first padel operating system helping players organize clubs, book courts, and track their game.

2. Information We Collect

We collect the following categories of personal data:

• Account information: email address, name, phone number (optional), and avatar.
• Player profile: handedness, play style, skill ratings, match history, and XP progression.
• Club data: club memberships, session participation, and tournament results.
• Device & usage data: approximate location (when you search for venues), browser type, and interaction analytics.
• Communication data: WhatsApp phone numbers voluntarily provided for booking coordination.

3. How We Use Your Data

• To provide and improve the Smash platform and its features.
• To authenticate your identity and secure your account.
• To match you with other players and generate skill-based recommendations.
• To send transactional emails (sign-in links, session invitations).
• To display nearby venues based on your location.
• To generate anonymized analytics to improve the product.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers: hosting (Railway), email (Resend), error monitoring (Sentry), and analytics (PostHog).
• Other players: your name, avatar, skill rating, and match history are visible to club members.
• Third-party APIs: venue search data is exchanged with Google Places and Playtomic to show you nearby courts.

5. Data Retention

We retain your account data for as long as your account is active. You can request deletion of your account and all associated data at any time from the Settings page. Upon deletion, your personal data is permanently removed within 30 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and data.
• Export your data in a portable format.
• Withdraw consent for optional data processing.

To exercise any of these rights, use the Settings page or contact us at privacy@playsmash.io.

7. Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication (magic links, JWT), and access controls. No system is 100% secure, but we take reasonable steps to protect your information.

8. Children

Smash is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the app or via email. Continued use of Smash after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at privacy@playsmash.io.