Privacy policy
Last updated: November 2026
Who we are
Grand Padel is a padel and tennis club in Erbil, Iraq. Grand Padel (the club) decides why and how your personal data is used in the Grand Padel app, at the club desk and on this website. Contact: dev@datacode.app or +9647500000000.
Data you give us
Your mobile phone number (to sign in), your name, your language and number style, and optionally a profile photo and your gender. If you choose, you also tell us how you feel about marketing messages. Staff at the desk may create a record for you from your name and phone number when they book for you.
Data created by using the app
Your bookings and who you play with, your wallet balance and every wallet and payment entry (top ups, payments, refunds), the matches you join or organise, the scores you enter or confirm, your level and rating per sport, and your notification settings and inbox messages. If you report or block a player, we store the report (who reported, who was reported, the reason, where in the app, and the name and photo shown at that time) and the list of players you blocked.
Technical data
A push notification token for your device, crash reports (device model, operating system version and what the app was doing when it failed), a Firebase App Check signal that tells us the request comes from the genuine app, and short lived sign in records (a hashed code, attempt counts and your network address) used to stop abuse. We do not read your contacts, your location or your photos, and we show no ads.
Why we use it
To sign you in with a code, to run your bookings and payments (contract), to match you with players of your level and keep rankings fair, to send reminders and notices you asked for, to keep the club financial records and prevent fraud and abuse (legitimate interest and legal duty), and to send marketing only if you opted in (consent, which you can withdraw in the app at any time).
Companies that process it for us
Google Firebase (database, sign in, storage, notifications and crash reports, hosted in europe-west3, Frankfurt). Meta WhatsApp Cloud API, which delivers your sign in code to your WhatsApp. An SMS provider, used only as a fallback when WhatsApp cannot deliver the code. First Iraqi Bank (FIB), which processes card and app payments; we never see or store your bank card details. They process data on our instructions. We do not sell your data.
Who sees it
Club staff see what they need to run bookings, payments and support. Other players see only your display name, photo, level and match results when your profile is public, and the names of players in a match you join. Reports are seen only by club staff, who review them and may remove a name or photo; the player you report is not told who reported them. We share data with authorities only when the law requires it.
Where it is stored
Our database and files are stored in the Google Cloud region europe-west3 (Frankfurt, Germany). Sending a sign in code or a payment involves the providers above, who may handle data outside Iraq and Germany. Iraq has no data protection law yet, so we follow store rules and GDPR style practice.
How long we keep it
Profile, device and inbox data is kept while your account exists. Sign in records expire and are deleted automatically soon after. Crash reports are kept by Firebase for about 90 days. Payment and wallet entries are kept as the financial records of the club for the period required by accounting rules, without your name or phone number once you delete your account. Past match results stay under an anonymous player.
Your choices and rights
You can edit your profile, switch notifications and marketing on or off, and make your profile private in the app. You can ask us for a copy of your data, a correction, or deletion. You can delete your account yourself in the app (Profile, Delete account) or on the account deletion page of this website; it needs a code sent to your phone. A wallet balance still left after refunds of your future bookings is forfeited once you confirm the amount.
Children
The app is for people aged 16 and over. If you believe a younger child has an account, contact us and we will delete it.
Changes
We will post changes on this page and update the date above. If a change is important we will tell you in the app.
Questions? Contact us: +9647500000000 / dev@datacode.app