Article 1 — Who is responsible for your data
The data controller is Michaël Chabaud, sole trader operating under the trade name Yune Production, 1249 avenue Jean Moulin, 13480 Cabriès, France, registered under SIREN number 932 830 144. For any question about your data, or to exercise your rights: contact@mysportapp.fr. This policy applies to the six apps in the MySportAPP family: MyPadelAPP, MyTennisAPP, MyPickleAPP, MyTableTennisAPP, MySquashAPP and MyBadmintonAPP.
Article 2 — The data we collect
IDENTITY AND ACCOUNT — email address, first and last name, username. If you sign in with Apple or Google, we receive your email address (where applicable, Apple's relay address) and your name from that service, never your password. PROFILE — photo, bio, city, date of birth, gender, height and weight, dominant hand, playing side, club, equipment, playing tags. All of these fields are OPTIONAL: only your first and last name are required. Other players see your first and last name, username, photo, bio, level, club, favourite equipment, playing side and playing tags (dominant hand included). Your city is visible only to your friends, unless you make it public. Your date of birth, gender, height and weight are visible only to you. SPORTING ACTIVITY — recorded matches, scores, partners and opponents, venues, playing conditions, equipment, level, club, play tags, trophies. HEALTH DATA — physical feeling before and after a match, fatigue, morale, declared injuries. These are covered by Article 4. SOCIAL — posts, comments, likes, friends list, private and group messages. REPORTS AND FEEDBACK — the reports you send, with a copy of the reported content, your bug reports and, if you give one, the reason for cancelling your subscription. TECHNICAL — device identifier for notifications, display preferences, error logs. SUBSCRIPTION — status and purchase history, and the purchase and renewal notifications RevenueCat sends us. NO banking data passes through or is stored on our servers: payment is handled by Apple or Google alone.
Article 3 — Why we collect them, and on what basis
PROVIDING THE SERVICE — account, match recording, statistics, messaging, subscription. Legal basis: performance of the contract formed by these terms of use. SOCIAL FEATURES — feed, friends, groups, sharing. Legal basis: your consent, withdrawable at any time by ceasing to use them or deleting the content concerned. NOTIFICATIONS — match reminders and social alerts. Legal basis: your consent, given when the system asks and revocable in your phone settings. SECURITY AND ABUSE PREVENTION — reports, blocking, fighting fake accounts. Legal basis: our legitimate interest in protecting users. We carry out NO fully automated decision-making producing legal effects concerning you. The levels, scores and statistics computed by the app are sporting indicators, with no contractual consequence.
Article 4 — Your health data
The physical feeling, fatigue, morale and injuries you record are health data within the meaning of Article 9 GDPR. They receive enhanced protection. They are OPTIONAL: the app works without them, and no such field is required to record a match. Their processing rests on your EXPLICIT CONSENT, given by filling them in. You may withdraw it at any time by clearing those fields in a match's details, without affecting the rest of your history. They are never shared with other players, never used for advertising, and never passed to an insurer, an employer or any third party. They serve only to produce your own statistics.
Article 5 — Who else has access
We sell no data and display no third-party advertising. The providers below act on our behalf and access only what is necessary to them. SUPABASE — database, authentication, photo storage and service emails. Infrastructure located in the European Union (Ireland). APPLE — app distribution and subscription billing on iPhone. iOS notifications (APNs). GOOGLE — distribution and billing on Android (Google Play), and Android notification delivery (Firebase Cloud Messaging). REVENUECAT — technical management of subscriptions and their status. RevenueCat knows your account only by its technical identifier, never by your name or email address; the subscription itself is purchased and managed through Apple or Google. INFOMANIAK — hosting of the whole mysportapp.fr website, including the legal pages and the account management page. The pages that deal with your account talk directly to our database: no data from your account is stored at Infomaniak. APPLE (WEATHERKIT) — match weather. Through our server, Apple receives rounded coordinates (about 1 km) and a date, with no identifier. PHOTON (KOMOOT) and OPENSTREETMAP — city or club search. Only the text you type or coordinates are sent to them, never your identity.
Article 6 — Transfers outside the European Union
Your data is hosted in the European Union. Some providers listed in Article 5 are nevertheless established in the United States: Apple, Google and RevenueCat. These transfers are governed by the mechanisms set out in Chapter V GDPR — the European Commission's standard contractual clauses and, where applicable, certification under the EU–US Data Privacy Framework. You may request a copy of the applicable safeguards at the address given in Article 1.
Article 7 — How long we keep them
ACCOUNT AND ASSOCIATED DATA — for as long as your account exists. INACTIVE ACCOUNT — after 3 years without any use, the account is deleted. An email warns you 30 days beforehand; signing in again is enough to keep it. AFTER ACCOUNT DELETION — your data is removed immediately from the live database. Backup copies are purged within 30 days. MESSAGES — deleted with the account, on both sides of the conversation: the messages you sent also disappear for their recipients. REPORTS, BUG REPORTS AND CANCELLATION REASONS — 12 months. IN-APP NOTIFICATIONS — 12 months. NOTIFICATION TOKENS — deleted when you sign out and when the account is deleted, and at the latest after 6 months without being refreshed. TECHNICAL ERROR LOGS — 30 days. SUBSCRIPTION EVENTS — the purchase and renewal notifications sent by RevenueCat are kept for 3 years, including after the account is deleted, as proof of the contract. They contain only the account identifier, the type of event and its date. BILLING DATA — retained by Apple or Google under their own statutory periods, over which we have no control.
Article 8 — Your rights, and how to exercise them
You have the rights of ACCESS, RECTIFICATION, ERASURE, RESTRICTION, PORTABILITY and OBJECTION, as well as the right to withdraw your consent at any time. The most direct route: Profile → Data and privacy. There you can view and change your information, download your matches as a spreadsheet (CSV) and a copy of your account (JSON file: profile, matches, friends, messages, posts). DELETING YOUR ACCOUNT — in the app (Profile → Data and privacy → Delete account), on the web at https://mysportapp.fr/supprimer-mon-compte, or by email to contact@mysportapp.fr. To obtain a complete copy of all the data we hold about you, or for anything else, write to contact@mysportapp.fr. We reply within one month, as required by the GDPR. If our answer does not satisfy you, you may lodge a complaint with your country's supervisory authority. In France: the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Article 9 — Minors
You must be at least 13 years old to create an account. The age rating shown by the App Store and Google Play describes the app's content; it is not the minimum age for opening an account. The app includes open messaging between players and allows health data to be recorded. It is aimed at an audience able to appreciate what that means. In the European Union, the age of digital consent ranges from 13 to 16 depending on the country. Below that age, creating an account requires the authorisation of the holder of parental responsibility, who may at any time view, correct or have the child's data deleted by writing to contact@mysportapp.fr. A parent who finds that an account was opened without their agreement, or by a child under 13, may request its immediate deletion at that same address.
Article 10 — Security
Traffic is encrypted with TLS. Passwords are never stored in clear text. Access to data is partitioned row by row by database-level security rules (Row Level Security), so that an account can only read what concerns it. No system is infallible. In the event of a data breach likely to result in a high risk to your rights, we will inform you and notify the CNIL within the periods laid down by the GDPR.
Article 11 — Local storage and cookies
The app uses NO advertising cookies, NO third-party trackers and NO external analytics tools. Your device's local storage serves operation only: display preferences, language, theme, saving of entries in progress, and keeping your session. Nothing there is read by a third party.
Article 12 — MySportAPP: one account, six apps
MyPadelAPP, MyTennisAPP, MyPickleAPP, MyTableTennisAPP, MySquashAPP and MyBadmintonAPP form the MySportAPP family and share a single account. SHARED across the six apps: your identity (first name, last name, email address, photo, date of birth, city, build, dominant hand), your friends list and your messages. You can therefore be friends and chat with someone who doesn't use the same app as you. SPECIFIC to each app: your matches, your statistics, your level, your club, your equipment, your playing tags, your trophies and your health data. These data are never transferred from one sport to another. A field left empty in one app stays empty there. Only the list of apps where you are active circulates, for display purposes — visible to other players as badges. It reveals neither your level, nor your club, nor your statistics in those sports. Deleting your account erases your data in all six apps, without exception.
Article 13 — Changes to this policy
This policy may change, in particular if we add a feature or change provider. Any substantial change will be signalled in the app at your next sign-in, and the update date above will be corrected. Earlier versions may be requested at the contact address.
Contact: contact@mysportapp.fr