Privacy Policy Post Padel

Post Padel

Privacy Policy

Last updated: 23/06/2026

1. Introduction

Post Padel ('we', 'us', 'our') is an app developed by Padelgrips.nl, registered in the

Netherlands under Chamber of Commerce number 60954809, located at Gobatstraat 15,

1902DE Castricum, The Netherlands.

This Privacy Policy explains how we collect, use, store, and protect your personal data when

you use the Post Padel app, available on iOS (App Store) and Android (Google Play).

We process personal data in accordance with the General Data Protection Regulation

(GDPR / AVG). If you have any questions about this policy, please contact us at:

info@padelgrips.nl.

2. Minimum Age

Post Padel is intended for users aged 16 and older. By creating an account, you confirm that

you are at least 16 years of age. We do not knowingly collect personal data from individuals

under 16. If we become aware that a user is under 16, we will delete their account and

associated data promptly.

3. Data We Collect

3.1 Account Data

When you create an account, we collect:

• Email address — used for login, account management, and (with your consent)

marketing communications

• Name — optional, used for personalisation within the app

• Password — stored in encrypted form via secure hashing; we never have access to

your plain-text password

• Authentication method — whether you signed up via email/password, magic link,

Google Sign-In, or Apple Sign-In

3.2 Match and Training Data

When you log a match or training session, we collect:

• Match results (score, win/loss outcome)

• Skill ratings per shot type (forehand, backhand, volley, smash, etc.)

• Personal notes and reflections you add yourself

• Timestamps and frequency of use

3.3 Device and Usage DataWe automatically collect limited technical data to ensure the app functions correctly

and securely:

• Device type and operating system (iOS or Android)

• App version

• Crash reports and error logs

4. Marketing and Email Communications

When you register for Post Padel, you will be presented with an opt-in checkbox (pre-

ticked for convenience) to receive marketing emails from Padelgrips.nl — our padel

webshop. These emails may include:

• Product recommendations, promotions, and discount codes

• Padel tips, content, and news relevant to your game

• Updates about Post Padel and new features

If you check this box, your email address will be shared with Padelgrips.nl's email marketing

platform (Spotify & Klaviyo) and you will be added to the Padelgrips.nl mailing list.

You can withdraw your consent at any time by:

• Clicking the unsubscribe link in any marketing email

• Contacting us at info@padelgrips.nl

Withdrawing consent does not affect the lawfulness of any processing carried out before

withdrawal, and does not affect your access to the Post Padel app.

5. How We Use Your Data

We use your data for the following purposes:

• Providing the app and its core features (account management, match tracking,

performance insights)

• Generating personalised AI coaching tips based on your match data

• Sending you marketing emails about Post Padel and Padelgrips.nl — only where you

have given consent

• Improving the app based on aggregated, anonymised usage patterns

• Responding to support requests and queries

• Ensuring the security and stability of our infrastructure

6. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)) — to provide the app and its core features

• Consent (Art. 6(1)(a)) — for marketing emails and any optional data sharing

• Legitimate interest (Art. 6(1)(f)) — for improving app stability, security, and

performance

7. AI and Automated ProcessingPost Padel uses OpenAI's API to generate personalised coaching tips based on your match

data. When this feature is used, relevant match data is transmitted to OpenAI's servers

solely for this purpose.

OpenAI processes this data as a data processor on our behalf and is contractually prohibited

from using it for their own purposes. OpenAI is headquartered in the United States; data

transfers are conducted under appropriate GDPR safeguards (Standard Contractual

Clauses).

No automated decisions that produce significant legal or similarly significant effects are

made solely on the basis of your data.

8. Third-Party Service Providers

We share your data only with the following trusted third-party service providers, who

act as data processors on our behalf:

Supabase — We use Supabase to securely store your account and match data. Supabase

servers are located in the EU. More information: supabase.com/privacy

Klaviyo / Padelgrips.nl — If you have consented to marketing communications, your email

address is shared with Klaviyo / Shopify, the email marketing platform used by Padelgrips.nl.

You can withdraw this consent at any time via the unsubscribe link in any email or by

contacting us.

OpenAI — Match data is sent to OpenAI for the purpose of generating AI coaching tips. See

Section 7 for full details.

We do not sell your personal data to any third party, under any circumstances.

9. Data Retention

We retain your personal data for as long as your account remains active. If you delete your

account, all associated personal data will be deleted within 30 days, unless we are required

by law to retain it for a longer period.

Anonymised and aggregated data (not linked to you personally) may be retained indefinitely

for statistical and product improvement purposes.

10. Your Rights Under GDPR

As a user in the European Union, you have the following rights regarding your

personal data:

• Right of access — request a copy of the personal data we hold about you

• Right to rectification — request correction of inaccurate or incomplete data

• Right to erasure — request deletion of your personal data ('right to be forgotten')

• Right to restriction — request that we limit the processing of your data

• Right to data portability — request your data in a structured, machine-readable format• Right to object — object to processing based on legitimate interest or for direct

marketing

• Right to withdraw consent — where processing is based on consent, you may

withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at: info@padelgrips.nl

You also have the right to lodge a complaint with the Dutch Data Protection Authority

(Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

11. Security

We take the security of your personal data seriously. The measures we have in place

include:

• Secure authentication via magic link, email verification, Google Sign-In, and Apple

Sign-In — no plain-text passwords are stored

• All data is transmitted over encrypted connections (HTTPS / TLS)

• Access to production data is restricted to authorised personnel only

• Regular monitoring of our infrastructure for vulnerabilities

12. Cookies and Tracking

The Post Padel mobile app does not use cookies. If you visit our associated website

(padelgrips.nl), separate cookie and tracking policies apply as described on that website.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices,

technology, or legal obligations. We will notify you of any significant changes via the app or

by email. The 'Last updated' date at the top of this document will always reflect the most

recent version.

Continued use of the app after changes are published constitutes your acceptance of the

updated policy.

14. Contact

For any questions, data access requests, or complaints regarding this Privacy Policy:

Rawframes / Padelgrips.nl

Gobatstraat 15, 1902DE Castricum, The Netherlands

KvK: 60954809

Email: info@padelgrips.nl

Website: padelgrips.nl