Privacy Policy

Welcome to RacketMania. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Czech Act No. 110/2019 Coll. on the Processing of Personal Data, and other applicable European data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications (available on the Apple App Store and Google Play Store), web platforms, and any related services (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

RacketMania acts as the data controller responsible for your personal data.

• Company: RacketMania
• Location: Prague, Czech Republic
• Contact Email: support@racketmania.com

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.

We collect and process the following categories of personal data:

• Account Information: Name, email address, phone number, profile picture, and authentication credentials (including data from Google Sign-In and Apple Sign-In).
• Profile Data: Sports preferences, skill levels (RSR rating), availability, location preferences, and playing history.
• Transaction Data: Booking history, payment information (processed securely through Stripe — we do not store complete card details), wallet balances, and invoices.
• Usage Data: How you interact with our Services, including match participation, ratings given and received, and platform engagement metrics.
• Device Information: Device type, operating system, unique device identifiers, IP address, browser type, and push notification tokens.
• Location Data: With your explicit consent, we collect precise or approximate location data to display nearby venues and available matches.
• Communication Data: Messages sent through our in-app chat and support messaging system.

Under the GDPR, we process your personal data based on the following legal grounds:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to provide our Services to you, including account management, court bookings, match organisation, payment processing, and skill rating calculations.
• Legitimate Interests (Art. 6(1)(f)): Processing for our legitimate business interests, such as fraud prevention, platform security, service improvement, analytics, and dispute resolution, provided these interests do not override your fundamental rights and freedoms.
• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as marketing communications, location data collection, and optional analytics cookies.
• Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal requirements, including tax reporting obligations and law enforcement requests.

We use your personal data for the following purposes:

• Providing, maintaining, and improving our Services
• Processing court bookings and payments
• Matching you with compatible players based on skill level and preferences
• Calculating and displaying skill ratings (RSR), reliability ratings (RR), and karma scores
• Sending transactional notifications (booking confirmations, match reminders, score submissions)
• With your consent, sending promotional communications about new features, venues, and events
• Detecting and preventing fraud, abuse, and security threats
• Resolving disputes between users
• Complying with legal obligations under Czech and EU law
• Generating anonymised and aggregated analytics to improve our platform

We may share your personal data with the following categories of recipients:

• Other Users: Your public profile information, including name, profile picture, skill ratings, and match history, is visible to other users for matchmaking purposes.
• Venue Partners: We share booking information (name, contact details, booking times) with venues to facilitate your court reservations.
• Payment Processors: Stripe, Inc. processes all payments. Stripe is certified under the EU-US Data Privacy Framework. We do not store complete card details on our servers.
• Cloud Infrastructure: Our services are hosted on servers within the European Union.
• Push Notification Services: Apple Push Notification Service (APNs) and Google Firebase Cloud Messaging (FCM) for delivering notifications to your device.
• Legal Requirements: When required by Czech or EU law, court orders, or to protect our legal rights.

We do not sell your personal data to third parties. We do not share your data with third-party advertisers.

Your data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, to payment processors or push notification services in the United States), we ensure appropriate safeguards are in place, including:

• EU-approved Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• EU-US Data Privacy Framework certification of the recipient

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Active accounts: Data is retained for the duration of your account.
• After account deletion: Personal data is deleted or anonymised within 30 days, except where retention is required by law.
• Transaction records: Retained for 10 years as required by Czech tax law (Act No. 563/1991 Coll.).
• Communication data: Chat messages and support conversations are retained for 2 years after your last interaction.
• Analytics data: Anonymised and aggregated data may be retained indefinitely.

As a data subject under the GDPR, you have the following rights:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"). See our Data Deletion Policy for details.
• Right to Restriction (Art. 18): Request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20): Request your data in a structured, commonly used, machine-readable format (JSON or CSV).
• Right to Object (Art. 21): Object to processing based on legitimate interests, including profiling.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right Related to Automated Decision-Making (Art. 22): Our matchmaking and rating algorithms assist with player matching but do not make decisions that produce legal effects or similarly significant effects on you.

To exercise any of these rights, please contact us at support@racketmania.com. We will respond to your request within 30 days as required by the GDPR.

We implement appropriate technical and organisational measures to protect your personal data in accordance with GDPR Article 32, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Secure authentication mechanisms (JWT, OAuth 2.0)
• Role-based access controls and principle of least privilege
• Regular security assessments and vulnerability scanning
• Rate limiting and fraud detection systems
• Secure payment processing via PCI DSS-compliant Stripe

While we take extensive measures to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Articles 33 and 34.

Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@racketmania.com and we will promptly delete such data.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice in our Services. The "Last updated" date at the top of this page indicates when the policy was last revised.

Continued use of our Services after changes constitutes acceptance of the updated policy. If you do not agree with the changes, please discontinue use and request account deletion.

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority. For users in the Czech Republic, the supervisory authority is:

• Office for Personal Data Protection (UOOU)
• Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
• Website: www.uoou.cz

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: support@racketmania.com
• Location: Prague, Czech Republic