Privacy Policy
Last updated: 22nd July 2026
Padel Ultimate is a padel scorekeeping app for Garmin watches, with an optional web app for your stats. This policy explains, in plain language, what we collect, why, and the control you have. We tried to keep it short and honest.
The short version: we record only the match you play, never your watch's history. Health data is stored only with your explicit consent: per-match summaries and, so you can see how your heart responded to key moments, your heart rate at the end of each point during a match: never a continuous stream, never anything outside your match. We never sell your data or use ad trackers. You can export or delete everything at any time.
Who we are
The data controller is Gentle Pine Labs, the independent developer operating Padel Ultimate ("we"). Contact us at support@padelultimate.net for any privacy question or request.
What we collect and why
| Data | Why we collect it | Legal basis (GDPR) |
|---|---|---|
| Match data: scores, point-by-point log, set results, timestamps | To record your match and show your stats | Contract (once you have an account) / legitimate interest |
| Heart-rate summaries: average and max per match, calories, time in your heart-rate zones | To show match effort | Your explicit consent (health data) |
| Per-point heart rate: your heart rate at the moment each point ends, during a match | To show how your heart responded across the match (per point / game / set) | Your explicit consent (health data) |
| Heart-rate zones: zone boundaries read from your Garmin fitness profile | To compute accurate "time in zones" | Your explicit consent |
| Match location (optional): one map coordinate captured at the start of a match, only while the watch's "Send location" setting is on (off by default) | To draw your personal court map (the places you play) | Your consent (the on-watch toggle) |
| Account data: email address | To sign you in and link your matches | Contract |
| Waitlist email: an address entered on the waitlist form or on the sign-in page without an invitation | To let you know when access opens (invited players hear first) | Legitimate interest / your request |
| Device data: your Garmin device id / a pairing token | To sync your watch and pair it to your account | Contract / legitimate interest |
| Payment data: handled entirely by our payment provider; we never see card details | To process a premium subscription | Contract |
| Technical logs: the requested address, the time it took, and a masked IP address (the last part is removed, so it points at a network, not at you); kept 14 days | Security, abuse prevention and keeping the service fast | Legitimate interest |
We ask for your consent for heart-rate data the first time a feature uses it, and you can withdraw it at any time (see Your rights).
What we do NOT collect
- No pre-app history. We record only from the moment you open the app / start a match. We never read data that was on your watch before that.
- No continuous or background heart-rate stream. With your consent we store per-match summaries and your heart rate at the moments points end: a bounded set of readings inside your match, never a continuous recording and never anything outside it.
- No selling, no ad trackers, no third-party analytics with your personal data.
- No location by default: GPS is used only if you turn it on. With the optional "Send location" setting we store a single coordinate from the start of each match (for your court map), never a movement track.
Watch permissions and why we ask for them
Garmin shows you these permissions when you install the app. Here is exactly what each one is for. Some are for features we are still building. We say so honestly, and we do not collect anything through them until that feature ships.
| Permission | What it's for |
|---|---|
| Fit / FitContributor | Record your match as a normal Garmin activity (so it appears in Garmin Connect) with our extra fields |
| Communications | Send your finished match to our server and sign you in. This is the only way your data leaves the watch |
| Positioning | Optional GPS for the activity and, with "Send location" on, one coordinate at match start for your court map (both off unless you enable them) |
| Background | Upload a finished match in the background, so you don't have to keep the app open |
| UserProfile | Read your configured heart-rate zones, for accurate "time in zones" |
| Sensor / SensorLogging | Upcoming feature (stroke detection). Not collecting data yet |
| Notifications | Upcoming feature (on-watch reminders/alerts). Not collecting data yet |
Who we share data with
We use a small number of trusted providers ("processors") who act on our instructions:
- Hosting: our servers run on Hetzner in the EU (Germany/Finland).
- Email: Resend sends your sign-in links and recap emails.
- Payments: our payment provider (a Merchant of Record) processes payments as the seller of record; they handle your payment data under their own policy.
- Map tiles: the court map's background images load from OpenStreetMap directly in your browser. Nothing goes to them from our servers; like opening any map website, your browser's request reveals your IP address and the viewed map area to OpenStreetMap.
We do not sell your data or share it for advertising.
Cookies
We use a single strictly-necessary session cookie to keep you signed in. No tracking, advertising or analytics cookies.
Garmin's role
Data you submit through the app is sent to us (Padel Ultimate), not to Garmin. Garmin only transports it from your watch to your phone to our server, and Garmin has no responsibility or liability for it. Garmin's own handling of your device data is covered by Garmin's privacy policy.
International transfers
Your data is hosted in the EU. Where a provider (e.g. email or payments) is outside the European Economic Area, that transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep your data
- Match and account data: for as long as you keep your account. Delete your account and it is permanently erased; residual copies may persist in encrypted backups for up to 30 days.
- Anonymous matches (uploaded before you create an account): kept for 60 days, then deleted. If such a match carries heart-rate data, that data is held unused in the same 60-day window so it is still there when you connect your watch: your consent choice at connection then keeps it or deletes it, nothing is shown or used before you decide, and it is deleted automatically if you never connect.
- Unconnected watch registrations (a watch that synced but was never connected to an account): the device identifier and its access credential are deleted 60 days after the watch was last seen, once no matches remain. The watch simply re-registers if it ever syncs again.
- Waitlist emails: until access opens or you ask to be removed.
- Technical logs: 14 days, then rotated out automatically.
Your rights
Under the GDPR you can, at any time:
- Access and export your data (one-click JSON export in the web app).
- Delete everything (account deletion permanently erases your data).
- Correct inaccurate data, object to processing, and withdraw consent for health data.
What withdrawing heart-rate consent does: it stops us collecting any further heart-rate data, from that moment on. Heart-rate we already stored stays with the matches it belongs to - withdrawing consent does not delete it by itself. To remove it, delete those matches (they go to Trash for 30 days, then are erased permanently), delete your account, or ask us and we will do it for you.
Use the tools in the web app, or email support@padelultimate.net. We respond within 30 days. You also have the right to complain to your local data protection authority.
Children
Padel Ultimate is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
If we change how we handle your data, we will update this page and its "Last updated" date. Significant changes will be communicated in the app or by email.
Contact
Questions or requests: support@padelultimate.net.