What we collect, why, and what you can do about it
Last updated: 6 October 2026
Courtify is a tennis community platform. To work, it needs to know who you are, roughly where you play, and what matches you have played.
We do not sell your personal data, and we do not use it for advertising or ad profiling. We share it only with the service providers listed below that we need in order to run the platform.
Courtify is the data controller for the personal data described here. You can reach us at courtify.tennisapp@gmail.com.
For payments made on the web, Paddle acts as merchant of record and is a separate controller for the payment data it collects. See Payment data.
| Category | Data |
|---|---|
| Account | Email address, display name, role (player, coach, league organiser, club owner), profile photo, phone number if you add one, and a securely hashed password. We never store your password in readable form. |
| Sign-in | If you sign in with Google, we receive your name, email address and Google account identifier. We do not receive your Google password. |
| Profile | First and last name, date of birth if you provide it, skill level, biography, city, state, country and postal code, and whether you are open to play. |
| Location | An approximate geographic point for your home area, used to find nearby players, clubs and courts. See Location data. |
| Tennis activity | Matches, scores and sets, challenges sent and received, your ELO rating and its history, statistics, league participation, standings, availability you submit, reviews you write or receive, players you follow and clubs you favourite. |
| Bookings and lessons | Court reservations, blocked times, lesson requests, and coach or club schedules relevant to you. |
| Club and coach data | If you run a club or coach, the details you publish: working hours, courts, rates, certifications and affiliations. |
| Device | A push notification token and your platform (iOS, Android or web), so we can send you notifications. |
| Technical | Session and refresh tokens that keep you signed in, plus server logs containing IP address, request time and error details. |
| Subscription | Your plan, its status, renewal dates, and the customer and subscription identifiers issued by the payment provider. Not your card number. |
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, and providing the features you use | Performance of a contract |
| Matching you with nearby players, clubs and courts | Performance of a contract |
| Calculating ELO ratings, standings and statistics | Performance of a contract |
| Sending match, league, booking and lesson notifications | Performance of a contract |
| Taking payment and managing subscriptions | Performance of a contract |
| Confirming your email address and keeping accounts secure | Legitimate interests; legal obligation |
| Preventing abuse, fraud and result manipulation | Legitimate interests |
| Fixing faults and improving the platform | Legitimate interests |
| Keeping records required for tax and accounting | Legal obligation |
Courtify is a community platform, so some information is visible to others by design:
Your email address, phone number and date of birth are not shown to other users. Your precise location point is never shown to other users; it is only used to compute distance.
Courtify uses location to show you players, clubs and courts near you. On mobile, the app asks your permission before accessing device location, and you can refuse or withdraw that permission at any time in your device settings — the rest of the app continues to work.
We store a single approximate point for your home area, not a history of your movements. We do not track you in the background.
We send push notifications about things you asked for: challenges, match results, league fixtures, availability requests, bookings and lesson requests. These are delivered through Firebase Cloud Messaging (Google), which receives your device token to route the message. You can turn notifications off in your device settings.
We send transactional email — email confirmation, password reset, invitations and billing notices — through Resend, which processes your email address to deliver the message. These are necessary to operate your account and are not marketing.
League organisers can use an AI feature that proposes a match schedule from the availability players have submitted. To do this, availability patterns are sent to OpenAI for processing.
Players are pseudonymised before this happens. Each player is replaced with a short reference such as "p3", so names, emails and account identifiers are not sent. What is sent is the dates and hours of availability, a count of matches already played, and the pairings to be scheduled.
We never receive or store your full card number.
Subscriptions created before we moved to Paddle were processed by Stripe, and those records are retained for as long as the subscription is active and for the accounting period afterwards.
We share personal data only with providers that help us run Courtify, and only what each one needs:
| Provider | Purpose | Data shared |
|---|---|---|
| Render | Application and database hosting | All platform data, stored at rest |
| Paddle | Web payments, merchant of record | Email address, payment and tax details, plan |
| Stripe | Legacy web payments | Email address, plan (existing subscribers only) |
| Apple / Google Play | In-app purchases | Purchase receipts and tokens |
| Google (Firebase) | Push notification delivery | Device token, message content |
| Sign in with Google | Name, email, account identifier | |
| Resend | Transactional email | Email address, message content |
| OpenAI | AI league scheduling | Pseudonymised availability only — see section 8 |
We may also disclose data if the law requires it, to establish or defend legal claims, or to protect the safety of our users. If Courtify is ever sold or merged, data may transfer to the acquirer, and we will tell you before that happens.
We do not sell personal data and we do not share it with advertisers or data brokers.
Our servers and database are hosted in the United States (Render, Oregon region). Several of the providers above also operate in the United States. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside your region.
These transfers rely on the European Commission's Standard Contractual Clauses, or on the provider's certification under an applicable adequacy framework, to give your data a comparable level of protection.
Depending on where you live, you have the right to:
To exercise any of these, email courtify.tennisapp@gmail.com. We will respond within one month. We may need to verify your identity first.
If you are in California, you have equivalent rights under the CCPA/CPRA, including the right to know, delete, correct and opt out of "sharing". We do not sell personal information as that term is defined there.
You can delete your account from the app, or by emailing us. Deleting your account removes your profile, contact details and login credentials, and cancels any active subscription at the end of the paid period.
Match results stay on the record of the opponents you played, in a form no longer linked to your identity, so their history and ratings remain accurate.
We protect your data with encryption in transit (HTTPS), passwords stored only as salted hashes, short-lived access tokens with separate refresh tokens, role-based access controls, and managed hosting with encryption at rest.
No system is completely secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as the law requires.
Courtify is not intended for children under 16. We do not knowingly collect data from children under that age. If you believe a child has given us personal data, contact us and we will delete it.
We may update this notice as the platform develops. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect. The date at the top shows when this version was published.
For any privacy question, or to exercise your rights: