Skip to content

Privacy policy

How Smash Padel handles personal data on the web and in the iPhone, iPad and Android apps. Last updated 18 October 2026.

Who we are

Smash Padel is software that padel clubs use to run tournaments and leagues. It is run by SMASH & DASH PTE. LTD.

Each club decides what it enters about its players. For names, emails and results a club enters, the club is responsible for that information and we process it for them; for your own account, we are.

What we collect

  • Your account: your email address and your password, which we keep only as a one-way hash. You can create it on the web or in the apps; both use the same account.
  • Clubs: which clubs you belong to and whether you organize or play. Organizers add the club's name, colours, fonts, logo, photos, website address and time zone.
  • Events and leagues: player and team names that organizers type in, draws, scores, check-in times and schedules. For leagues also squad places with names, email addresses and optional phone numbers (entered by organizers, captains or players registering), claim links, lineups, score reports, reschedule proposals and the notices shown in My matches.
  • Availability: the weekly times you can play and dates you can't, with an optional private note, used to schedule league matches.
  • Email: league notices, password resets and squad invitations go through an outbox; your league email setting and the secret behind your unsubscribe link.
  • Push notifications (apps): if you turn them on, a push token for that device, linked to your account, and any events you follow.
  • Billing (web, organizers): clubs subscribe on the web through Stripe. Card details go to Stripe only; we keep the club's Stripe customer and subscription IDs, plan status and trial end date.
  • AI designer (clubs that have it): what organizers type or paste, which can include players' names, and the plans it proposes.
  • Website branding: the website address an organizer pastes, and the colours, fonts, logo and photos read from that public site.

We do not use analytics, advertising or tracking tools, and we do not sell personal data. The only cookies we set keep you signed in. The apps collect nothing else from your device: no location, contacts, photos, camera or microphone.

Why we use it

  • To run the service you or your club asked for: events, leagues, scores, schedules, notices and emails.
  • To keep accounts safe and stop abuse: sign-in limits, rate limits and never mailing addresses that bounce.
  • To bill clubs for their plan, and to meet legal and tax duties.

Who sees it

  • Your club: organizers see their club's members, squads and contact details. Squad emails are shown only to organizers and the squad's captain.
  • Anyone with a share link: spectator and TV links show names, draws and scores, never emails, phone numbers or availability.
  • Service providers working for us: Convex (database and backend), Vercel (website hosting and the AI Gateway), Resend (email delivery), Stripe (payments), Browserbase (reading a club's public website for branding), the AI model provider reached through the Vercel AI Gateway (currently Anthropic; we ask the gateway to use only providers that do not train on prompts), and Expo with Apple and Google push services (app notifications). They process data only to provide their service to us.

How long we keep it

WhatHow long
Your account, club memberships and sign-inUntil you delete your account. Sign-in sessions end after at most 30 days.
Clubs, events, leagues, squads and resultsUntil an organizer deletes them, or the club is deleted.
Availability and can't play datesUntil you change them, leave the squad or delete your account.
League notices in My matchesUntil the league or your account is deleted.
Emails we queueThe address and the content are removed as soon as the email is sent or given up; a one-way hash of the address and the outcome are kept for 30 days.
Password reset requestsA one-way hash of the address, for one day.
Addresses that bounced or reported spamA one-way hash only, kept so we never email that address again.
League registration attemptsUsed only for the sign-up limits, and deleted after one hour, usually within 90 minutes.
Lists pasted into the AI designerAt most 90 days. The conversation itself stays with the club until an organizer deletes it.
Website import previewsOne day, unless an organizer applies them to the club.
Push notification tokens (app)Until you sign out on that device or delete your account.
Billing recordsStripe keeps payment records as the law requires. We keep the club's Stripe customer and subscription IDs and plan status with the club (for a club deleted with its last member, only until Stripe confirms its plan is cancelled), and an AI usage ledger of costs and token counts with no content.

Deleting your account

You can delete your account on the web at Delete your account, or in the app under Account. You enter your password again to confirm, and it cannot be undone. Your account, sign-in and sessions go at once; the rest of your data follows within minutes. A club whose plan is being cancelled disappears at once too, and its last record, the link to its Stripe subscription, is removed as soon as Stripe confirms the cancellation.

What is deleted:

  • Your account, email address, password hash, every sign-in session on every device, and your club memberships.
  • Your place on any league squad is released: your account, email, phone number, availability and private notes are removed, and the organizer gets a new link to give the place to someone else.
  • Your notices, email settings, push tokens, followed events, rate limit counters, and emails and app notifications still waiting to go, which are cancelled. One already being sent at that moment may still arrive; it is never sent again.
  • Any club where you are the only member, with all its events, leagues, plans, designer chats, logo and photos.

What stays, and why:

  • Clubs other people still use, with their events, leagues and results. Your name can stay where it was typed into a squad or a result, as part of the club's competition record that other players' tables depend on; ask the club's organizer to change it.
  • Things you made in those clubs, such as events, plans and AI designer chats, stay with the club for its other organizers, linked to no one.
  • A one-way hash of your address on our suppression list, if it ever bounced or reported spam, so we never email it again.
  • Billing records Stripe must keep by law, and our content-free AI usage ledger.
  • A content-free record that your account had its one free AI designer trial, which is given once per account.
  • For an email cancelled while it was being sent: the one-way hash of the address and the outcome, for 30 days like every other email.

If you are the only organizer of a club that has other members, make one of them an organizer in Club settings first. If you are a club's only member and its annual plan is still running, the plan is cancelled with your account: it stops renewing at the end of the period already paid, with no further charges and no refund. If a plan checkout for that club has just gone through, wait a few minutes for Stripe to confirm it, then delete your account.

Your choices

  • Turn league emails off in My matches, or with the unsubscribe link in any league email. Password resets and invitations you ask for still come.
  • Change or remove your availability at any time in My matches.
  • To see, correct or remove something a club entered about you, ask that club's organizer, or contact us.

Smash Padel is meant for adults and for clubs. It is not directed at children under 13.

Contact

Questions about privacy: support@playsmashpadel.com

We will post changes to this policy on this page.