Privacy Policy

1. Who we are

Pick & Paddle (the "App") is operated by ACC DIGITAL SOLUTIONS OPC, a One Person Corporation registered with the Securities and Exchange Commission (SEC Reg. No. 2026090266584-61) ("we", "us"). We are the personal information controller for the personal data described in this policy, except where section 6 says otherwise. We handle personal data in line with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

Data Protection Officer: Vj Catacutan, dpo@accdigitalsolutions.com.

2. Information we collect

• Account: your email address and login details. If you sign in with Google or Apple, we receive the basic profile details they share with us, such as your name and email. We do not collect your phone number.
• Profile: username, display name, profile photo, the city and region you set, your rating and rank tier (Pro), match record, achievements, trophies, and commendations you receive from other players.
• Matches: matches you play or score, the players in them, scores, confirmations and reports, and the resulting ratings and leaderboard positions.
• Venue check-ins: each check-in attempt, successful or not, records the venue, the time, the result, a rough distance band (inside, near, far, or more than 2 km), a location accuracy band, whether the location appeared to be faked, and your phone's platform and app version. We do not store your coordinates. See section 11.
• Clubs: the clubs you join, your role in them, and the announcements, photos, polls, poll votes and comments you post in clubs.
• Friends and community: friend requests, follows, users you block, and reports you make or that are made about your content.
• Court bookings recorded by venues: venue staff can record a booking in our venue system. The record can include your name, email address and phone number, plus the booking details. See section 6.
• Location: see section 11. Your browsing location is rounded and never stored.
• Pick & Paddle Pro: if you subscribe, Apple or Google, through our subscription provider RevenueCat, tell us your subscription status, plan, renewal or expiry date and a transaction reference, linked to your user ID. Apple or Google process the payment; we never receive your card or bank details.
• Device and diagnostics: app version, device type, a push notification token, and crash reports. Crash reports are set up not to include your personal details, and location is removed from them.
• Support: messages you send us, any attachments you add, and device diagnostics you include with a support request.

No tracking. We do not track you across other companies' apps or websites. We do not use advertising or analytics SDKs, and we do not sell your personal data. The App shows ads on the Home screen, labelled for example as Sponsored, Advertisement, Presented by or Official partner. Everyone sees the same ads; they are not chosen using your personal data.

3. How we use your data and why we are allowed to

• To provide the App (accounts, profiles, matches, ratings, leaderboards, clubs, friends, the news feed, venue check-ins and court information): to perform our contract with you (the Terms of Use).
• To calculate ratings and personalise your feed and suggestions: to perform our contract with you, and our legitimate interest in giving you balanced games. See section 4.
• To manage Pro subscriptions: to perform our contract with you.
• To host venues' booking records on their behalf: see section 6.
• To send notifications you turn on (match results, friend requests, club updates and similar): your consent, which you can withdraw in your device or App settings.
• To use your location and to send marketing messages: your consent, which you can withdraw anytime.
• To keep the App safe (preventing fake results, fake check-ins, abuse and fraud, including reviewing reported content and accounts and the check-in log): our legitimate interest.
• To fix problems and improve the App, using crash reports and support diagnostics: our legitimate interest.
• To comply with the law (tax, accounting, lawful requests from authorities): legal obligation.

4. How player ratings work

Pick & Paddle gives Pro players a skill rating, called MMR, that estimates playing level. It is calculated automatically using an Elo-style method, similar to the systems used in chess and online games.

1. Who gets a rating. Only Pro players have an MMR.
2. Which matches count. Only Verified matches change ratings. Casual matches never change a rating.
3. Getting started. New rated players play five private placement games, starting from 1,200. Ratings move more during placement.
4. How it moves. Only the result counts, win or loss. The score margin is ignored on purpose. Beating stronger opponents gains you more; losing to weaker opponents costs you more. Between evenly matched sides, a result moves ratings by about 24 points. The change is smaller when your opponents are still in placement. In doubles, each team's strength is the average of its two players' ratings.
5. When a result becomes final. For ordinary matches, players have 24 hours to respond to the score. A player who does not respond counts as agreeing, and the score settles. Matches in a Group Play or Open Play session settle faster: a Verified match after a few minutes (currently 3 minutes), and a Casual match as soon as the scorer finishes it or after 60 seconds. Venue Open Play rounds follow the venue's own rules. A match with no score entered is cancelled, after 10 minutes in Group Play or Open Play and after 2 hours for other matches. If a score is disputed and not fixed or withdrawn, it is cancelled unless the match's Verified referee upholds it.
6. What you see. MMR runs on a scale of 0 to 10,000 and is shown as rank tiers from Bronze to Diamond.
7. Recalibration. Our staff can restart a player's placement, starting again from 85% of their current rating, for example to correct a rating affected by false results. We may also recalibrate ratings periodically, for example once a year: the rating moves partway back toward 1,200 and the player plays five placement games again. While recalibration is in progress, the player's previous rank is hidden.
8. Where ratings are used. On your profile, on leaderboards, and to suggest games and players at your level.

No human reviews each rating change. Ratings are calculated automatically. They do not decide whether you can use the App, and they have no legal or financial effect on you. They are in-app estimates, not official rankings or federation ratings.

Your choices. You can dispute a score by tapping Report a problem before the match settles. If you think a result or rating is wrong, use Report a problem in the App or email support@pickandpaddle.com, and a person will review it. Pro players can opt out of leaderboards in Settings > Privacy. You can block other users. You can object to this processing by emailing dpo@accdigitalsolutions.com.

5. Who we share it with

We do not sell your personal data. We share it only with the parties below. Our service providers act on our instructions under agreements that require them to protect it.

• Other users: any signed-in player can find you by searching your username or display name, and can open your profile, unless one of you has blocked the other. Your profile shows your username, display name, profile photo, the city, region and country you set, whether you have Pro, your match record, commendations, games you have refereed, achievements and trophies, and, if you are a rated Pro player, your rating and rank. Your email address is never shown to other players. Club members and club owners or admins see what you post in their club. If you appear on a leaderboard, your position there is visible to others unless you opt out (Pro).
• Supabase (Singapore): database, sign-in and backend for the App.
• Cloudflare (R2 and Workers, global network): stores profile, club and support photos, and runs account deletion.
• Expo push service (United States), Apple and Google: delivering push notifications to your device.
• Sentry (United States): crash reports, set up not to include personal details or location.
• RevenueCat (United States): managing Pro subscription status, linked to your user ID.
• Resend (United States): sending account emails, such as sign-up codes and password resets, and support emails, including your attachments and device diagnostics.
• Google Workspace (Google): hosts the support@pickandpaddle.com mailbox where support requests are kept.
• Apple and Google: sign-in if you use it, and in-app purchases.
• Venues: see section 6.
• Authorities: only where required by law or valid legal process.

Maps. The App does not have a built-in map service. When you tap a directions link, Google Maps or Apple Maps opens outside the App, and their own privacy policies apply.

Data outside the Philippines. Some of these providers store or process data outside the Philippines, including in Singapore and the United States, and Cloudflare and Google operate worldwide. We remain responsible for your data when they do, and we use contracts that require protection comparable to Philippine law.

6. Venues and their booking records

Venues are independent businesses. Players arrange and pay for court time with the venue directly, outside the App. Venue staff can record bookings in our venue system, including a player's name, email address and phone number. The venue decides what to record and how to use it to manage its bookings. It is responsible for that data, and for anything you share with it outside the App. We store these records on the venue's behalf and use them only to provide the venue system and to keep it secure.

7. How long we keep it

• Active account data: while your account is open.
• After you delete your account: removed when the deletion completes (see section 8). A scrambled (hashed) copy of your email is kept for 30 days to stop the account from being re-created straight away. Data in our database backups is overwritten within 30 days.
• Check-in log: deleted after 90 days.
• Pro and accounting records: kept as long as Philippine tax law requires, currently five years.
• Support requests: deleted from our support mailbox and email logs one year after the request is closed.
• Crash reports: deleted automatically by our crash reporting provider within 90 days.
• Browsing location and check-in coordinates: never stored.

8. Deleting your account

You can delete your account anytime. In the App, go to You > Settings > Help > Delete Account. If you can't use the App, email support@pickandpaddle.com from the email address on your account and ask us to delete it. We may ask you to confirm the request.

• Your options: delete after 7 days, and cancel anytime during that time, or delete immediately.
• Club owners: if you own a club, you must hand ownership to another member first.
• Unfinished activity: if you are in a live match, hosting a game, or have an open court booking when your deletion is due, we may need to finish or resolve it first, so the deletion can take longer.
• What we delete: your account, profile, photos, posts and other personal data, except as listed below. Venue booking records are cleared of your name, phone number and email.
• Match history: matches you played stay in other players' histories and ratings, but your name is replaced with "Deleted Player".
• What we keep: the hashed email for 30 days, and records the law requires us to keep, such as Pro and accounting records (section 7).
• Pro subscription: deleting your account does not cancel a Pro subscription. Cancel it in your App Store or Google Play settings.

9. Security

We use encryption in transit, access controls and database row-level security. Payments are handled by Apple and Google, so we never store card details. No system is perfectly secure. If a personal data breach happens that must be reported, we will notify the NPC and affected users within 72 hours of learning of it, as the NPC's rules require.

10. Your rights

Under the Data Privacy Act you have the right to be informed; to access your data; to object to processing; to correct your data; to have it erased or blocked; to get a copy in a portable format; to withdraw consent; to claim damages; and to file a complaint with the National Privacy Commission.

To use any of these rights, email dpo@accdigitalsolutions.com. We will act on your request without undue delay and within 30 working days.

11. Location and safety

• Optional: location is used only while you are using the App.
• Browsing: to sort nearby courts, we use your location rounded to about 110 metres. It is never stored.
• Checking in with the court QR code: the App asks for your precise location and uses it once to confirm you are at the venue.
• Checking in with the venue PIN: works with location turned off. If your phone already has a location for the App, it is used only as a rough distance check; the App does not ask for location permission for this.
• What is recorded: your coordinates are never stored. Each check-in attempt is logged as described in section 2, including an automated check of whether the location appeared to be faked. Only our staff can see this log, and it is deleted after 90 days.
• We never publicly show your exact home address or real-time location.

12. Age requirement

The App is only for users aged 18 and older. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we will delete it.

13. Changes to this policy

We may update this policy. We will post the new version in the App, update the effective date and highlight material changes.

14. Contact

ACC DIGITAL SOLUTIONS OPC, a One Person Corporation registered with the Securities and Exchange Commission (SEC Reg. No. 2026090266584-61) · 3F 1900 Session Road Building, Session Road, Baguio City, Benguet 2600, Philippines

Data Protection Officer: dpo@accdigitalsolutions.com · Support: support@pickandpaddle.com

National Privacy Commission: privacy.gov.ph