Privacy Policy

Effective: July 9, 2026

This Privacy Policy explains what information Courtster collects, how we use it, who we share it with, and the choices you have. The short version: we collect what is needed to run a social racquet-sports app — your account details, the games you play, and basic device data — we never sell it, and you can delete all of it from the app at any time.

Contents

  1. Who We Are
  2. What Information We Collect
  3. How We Use Your Information
  4. Analytics and Crash Reporting
  5. Service Providers We Share Data With
  6. What Other Players Can See
  7. International Data Transfers
  8. How Long We Keep Your Information
  9. Your Rights and Choices
  10. Children
  11. Security
  12. Changes to This Policy
  13. How to Contact Us

1. Who We Are

Courtster ("we", "our", "us") is a mobile application for organizing and playing padel and tennis sessions — tournament generation, scoring, leaderboards, clubs, and social play. This Privacy Policy covers the Courtster mobile app and the courtster.app website.

Contact: privacy@courtster.app · Courtster App, South Tangerang, Banten 15321, Indonesia.

2. What Information We Collect

Account information you provide: email address, display name, username, and optionally an avatar photo, your city, gender, and self-assessed skill level. If you sign in with Google or Apple, we receive your name and email address from that provider (with Sign in with Apple you may choose to hide your real email).

Gameplay and social data you generate: sessions you create or join, players and scores, ratings, badges, endorsements you give and receive, club memberships and join requests, chat and direct messages, and session payment records (who has paid or settled a session fee).

Device and technical data, collected automatically: device model, operating system version, app version, network connection state, IP address, and — if you enable notifications — a push notification token.

Camera and photo library: the app asks for camera access only to take photos (for example an avatar or club logo) or to scan ball-can QR stickers, and photo library access only when you choose to upload an image. Both permissions are optional; nothing is read from your camera or library without your action.

What we do not collect: precise location, contacts, calendar, or health data. The app contains no advertising or cross-app tracking SDKs.

3. How We Use Your Information

To provide the core features: tournament generation, leaderboards, clubs, friend connections, session discovery, chat, and post-session endorsements.

To send notifications relevant to you (round generated, join request approved, payment confirmed, new messages). You can disable notifications in your device settings at any time.

To operate subscriptions and verify your entitlements.

To diagnose crashes, monitor reliability, and understand aggregate usage so we can improve the app.

We do not sell your personal information, and we do not use your data for advertising.

4. Analytics and Crash Reporting

Sentry (crash reporting): when the app crashes or hits an error, Sentry receives technical details (device model, OS version, app state, stack trace) linked to your account ID only — not your email or name. For sessions where an error occurs, a screen replay may be captured with all text and images masked.

PostHog (product analytics, hosted in the United States): receives usage events (screens viewed, features used) linked to your account ID and signup date only — not your email or name.

5. Service Providers We Share Data With

We share personal data only with the service providers below, who process it on our behalf to run the app. We do not share your data with anyone else, except if required by law or as part of a merger or acquisition (in which case this policy continues to apply to your data).

  • Supabase — database, authentication, and file storage for all account and gameplay data.
  • Apple App Store / Google Play — process all subscription payments. We never see or store your card number or payment credentials.
  • RevenueCat — validates subscription purchases and entitlements, using your account ID and purchase receipts only.
  • Expo — delivers push notifications (receives your push token and notification content) and app updates.
  • Sentry — crash reporting (see Section 4).
  • PostHog — product analytics (see Section 4).
  • Google / Apple — only if you choose to sign in with them (see Section 2).

6. What Other Players Can See

Other players in your sessions, clubs, and friend network can see your display name, avatar, city, ratings, badges, endorsements, and gameplay stats.

Public sessions you host or join may be visible to anyone using the discover feature, including your display name and avatar.

Messages you send in a session or club chat are visible to the other members of that session or club.

7. International Data Transfers

Our service providers store and process data on servers that may be located outside your country, including in the United States. Where required, we rely on our providers’ safeguards for such transfers.

8. How Long We Keep Your Information

We retain account and gameplay data while your account is active. After you delete your account, personal identifiers are removed within 30 days and backups are purged within 90 days. Anonymized, aggregate statistics (for example, session counts) may persist.

9. Your Rights and Choices

Edit your information: update your profile (name, username, avatar, city, and more) at any time from the app.

Delete your account: in the app, go to Settings → Delete Account. This permanently deletes your profile, sessions you own, players, ratings, endorsements, and chat messages. You can also manage your data at courtster.app/personal-info or email us.

Notifications: opt out any time in your device settings.

Depending on your jurisdiction — including the EU GDPR, the California CCPA, and Indonesia's Personal Data Protection Law (UU 27/2022) — you may have additional rights to access, correct, export, or delete your personal data, and to withdraw consent. To exercise any of these rights, email privacy@courtster.app. We respond to verified requests within 30 days.

10. Children

Courtster is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Security

We use industry-standard encryption in transit (TLS) and at rest, and database access is gated by row-level security policies. No system is perfectly secure; we cannot guarantee absolute protection, but we work continuously to improve our safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above reflects the latest revision. If we make material changes, we will notify you in the app or by email before they take effect.

13. How to Contact Us

Email: privacy@courtster.app
Post: Courtster App, South Tangerang, Banten 15321, Indonesia