Introduction
PWM (Play With Me) is an app for organising recreational sport matches (such as padel) with your friends and groups. This policy explains what personal data we collect, why, who we share it with, and the rights you have over it.
The data controller is Ivo van de Grift, an individual based in the Netherlands. We process your data under the EU General Data Protection Regulation (GDPR) and the Dutch implementation of it (the Algemene Verordening Gegevensbescherming, AVG). You can reach us about anything in this policy at privacy@playwithme.dev.
We built PWM to be data-light on purpose. We do not run advertising, we do not sell your data, and we do not track you across other apps or websites. We do not currently use any analytics or crash-reporting tools (see “What we don't do” below for how we'd handle that if it ever changes).
Data we collect
We only collect what the app needs to work. Specifically:
- Account & profile — your display name and a unique username. Optionally a profile photo (you supply a link/avatar; we do not upload or host photo files), and the sports you list on your profile.
- Sign-in identity — when you sign in with Apple or Google we receive an opaque provider identifier (a “subject ID”) that tells us it's you next time, and we store it. Apple and Google may also return your name and email address at sign-in. We use the name to pre-fill your display name (which you can change). We store your email address to recognise you and to link your Apple and Google sign-ins to the same account, so you don't end up with duplicates. We never use your email for marketing, and it is never shown to other users. If you use Apple's “Hide My Email,” we don't use that private relay address to link your sign-ins.
- Device & timezone — to send notifications we store a push notification token for each device and whether it is iOS or Android. Your device's timezone (e.g. “Europe/Amsterdam”) is stored so match times display correctly. We do not collect GPS or precise location.
- Your activity in the app — the groups you belong to, your friends and friend requests, the matches you create or are invited to, your responses (accept/decline), and the in-app notifications we generate for you.
- Match details you enter — for a match you may type a venue or location as free text, a date and time, and a duration. This is whatever you type; we do not look up or track real-world locations.
- Reports & blocks — if you report another user, we store the report (who you reported, the reason you chose, any details you type, and the match you were on if relevant) so our team can review it. If you block someone, we store that block so we can keep you from seeing each other.
Why we process your data (legal basis)
Under the GDPR/AVG we rely on the following legal bases:
- Performance of a contract — to provide the core service you signed up for: your account, groups, matches and invites.
- Legitimate interests — to keep the service secure, prevent abuse, and keep match and group history coherent for the other people you played with.
- Consent — for optional push notifications. You can turn notification categories on or off in the app, and revoke OS-level notification permission at any time in your device settings.
Playtomic match imports
PWM lets you import a match from a public Playtomic share link so you can carry it into the app. When you do, we read the publicly available match details from Playtomic: the venue, the time, and the names (and, where shown, skill level and gender) of the players in that match. We never send anything back to Playtomic and we do not access any private Playtomic account.
If one of those players doesn't already use PWM, we may create a minimal placeholder record for them (a name and a reference to their Playtomic identity) so the imported match makes sense. This placeholder cannot sign in and is shown as a “guest.” If that person later joins PWM and confirms the match, the records are merged.
If you are a Playtomic player who has been added to PWM this way and you'd like that placeholder removed, email us at privacy@playwithme.dev and we will delete it.
What we don't do
To be explicit, PWM does not:
- track you across other apps or websites;
- collect your precise or GPS location;
- show ads, or sell, rent, or trade your personal data.
PWM does not currently use any analytics, crash-reporting, or advertising SDKs. We may add privacy-respecting analytics or crash-reporting in the future to understand usage and fix bugs; if we do, we will update this policy and our App Store and Google Play data disclosures before that data is collected, and such tools will never be used for advertising or to track you across other services.
How long we keep data
We keep your personal data only for as long as we need it to provide the service — in practice, for as long as your account is active. When you delete your account (see below) we erase your personal data promptly. Some non-personal, anonymised records of matches and groups are kept so that other participants' history stays intact — these no longer identify you.
We also periodically review accounts that have been inactive for a long time and may remove them, so we don't hold personal data we no longer have a reason to keep.
One exception: if you submit a report about another user, or are reported, we may retain that report after an account is deleted, for as long as needed to investigate abuse and keep PWM safe. We rely on our legitimate interest in safety for this.
Your rights and deleting your account
Under the GDPR/AVG you have the right to access, correct, export, restrict, or erase your personal data, and to object to certain processing. You can edit your profile at any time in the app.
Deleting your account (right to erasure). In the app, go to Profile → Account → Delete account. This permanently and irreversibly erases your personal data: your sign-in identity (so the account can never be logged into again), your devices and push tokens, your friends, your sports, and your notifications. Your past matches and groups remain visible to the other people who took part, but you appear in them only as an anonymised “Deleted user.”
You can also exercise any of these rights by emailing privacy@playwithme.dev. You have the right to lodge a complaint with your data protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Security & international transfers
We protect your data with measures appropriate to a service of this kind: encrypted connections (HTTPS/TLS) between the app and our servers, sign-in tokens stored in your device's secure keychain, and access controls on our backend and database.
Our production data is hosted in the European Union. Some processors (for example, push notification and sign-in providers) are global services that may process limited data outside the EU; where that happens it is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Children
PWM is not directed at children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect data from children under that age; if you believe we have, contact us at privacy@playwithme.dev and we will delete it.
Changes to this policy
We may update this policy as the app evolves. When we make a material change we will update the effective date above and, where appropriate, notify you in the app. Continued use after a change means you accept the updated policy.
Contact
Questions, requests, or complaints about your privacy? Email Ivo van de Grift at privacy@playwithme.dev and we'll get back to you.