Article 1 — Who is responsible for your data
The data controller is Michaël Chabaud, sole trader trading as Yune Production, 1249 avenue Jean Moulin, 13480 Cabriès, France, registered under SIREN number 932 830 144. For any question about your data, or to exercise your rights: contact@mysportapp.fr. This policy applies to the five apps of the MySportAPP family: MyPadelAPP, MyTennisAPP, MyPickleAPP, MyTableTennisAPP and MySquashAPP.
Article 2 — The data we collect
IDENTITY AND ACCOUNT — email address, first and last name, username, profile photo, date of birth, city, height and weight, dominant hand. SPORTING ACTIVITY — recorded matches, scores, partners and opponents, venues, playing conditions, equipment, level, club, play tags, trophies. HEALTH DATA — physical feeling before and after a match, fatigue, morale, declared injuries. These are covered by Article 4. SOCIAL — posts, comments, likes, friends list, private and group messages. TECHNICAL — device identifier for notifications, display preferences, error logs. SUBSCRIPTION — status and purchase history. NO banking data passes through or is stored on our servers: payment is handled by Apple or Google alone.
Article 3 — Why we collect them, and on what basis
PROVIDING THE SERVICE — account, match recording, statistics, messaging, subscription. Legal basis: performance of the contract formed by these terms of use. SOCIAL FEATURES — feed, friends, groups, sharing. Legal basis: your consent, withdrawable at any time by ceasing to use them or deleting the content concerned. NOTIFICATIONS — match reminders and social alerts. Legal basis: your consent, given when the system asks and revocable in your phone settings. SECURITY AND ABUSE PREVENTION — reports, blocking, fighting fake accounts. Legal basis: our legitimate interest in protecting users. We carry out NO fully automated decision-making producing legal effects concerning you. The levels, scores and statistics computed by the app are sporting indicators, with no contractual consequence.
Article 4 — Your health data
The physical feeling, fatigue, morale and injuries you record are health data within the meaning of Article 9 GDPR. They receive enhanced protection. They are OPTIONAL: the app works without them, and no such field is required to record a match. Their processing rests on your EXPLICIT CONSENT, given by filling them in. You may withdraw it at any time by clearing those fields in a match's details, without affecting the rest of your history. They are never shared with other players, never used for advertising, and never passed to an insurer, an employer or any third party. They serve only to produce your own statistics.
Article 5 — Who else has access
We sell no data and display no third-party advertising. The providers below act on our behalf and access only what is necessary to them. SUPABASE — database, authentication, photo storage and service emails. Infrastructure located in the European Union (Ireland). APPLE — app distribution and subscription billing on iPhone. iOS notifications (APNs). GOOGLE — distribution and billing on Android (Google Play), and Android notification delivery (Firebase Cloud Messaging). REVENUECAT — technical management of subscriptions and their status. VERCEL — hosting of the public legal pages. No personal data passes through it. OPEN-METEO and OPENSTREETMAP — match weather and city or club search. Only coordinates or the text you type is sent to them, never your identity.
Article 6 — Transfers outside the European Union
Your data is hosted in the European Union. Some providers listed in Article 5 are nevertheless established in the United States: Apple, Google and RevenueCat. These transfers are governed by the mechanisms set out in Chapter V GDPR — the European Commission's standard contractual clauses and, where applicable, certification under the EU–US Data Privacy Framework. You may request a copy of the applicable safeguards at the address given in Article 1.
Article 7 — How long we keep them
ACCOUNT AND ASSOCIATED DATA — for as long as your account exists. AFTER ACCOUNT DELETION — permanent erasure within 30 days, backups included. MESSAGES — deleted with the account. A message already received remains visible to its recipient, as in any messaging service. BILLING DATA — retained by Apple or Google under their own statutory periods, over which we have no control. TECHNICAL LOGS — 30 days at most.
Article 8 — Your rights, and how to exercise them
You have the rights of ACCESS, RECTIFICATION, ERASURE, RESTRICTION, PORTABILITY and OBJECTION, as well as the right to withdraw your consent at any time. The most direct route: Profile → Data and privacy. There you can view and change your information, export your data, and delete your account yourself. For anything else, write to contact@mysportapp.fr. We reply within one month, as required by the GDPR. If our answer does not satisfy you, you may lodge a complaint with your country's supervisory authority. In France: the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Article 9 — Minors
The app is rated 9+ on the App Store, but it includes open messaging between players and allows health data to be recorded. It is aimed at an audience able to appreciate what that means. In the European Union, the age of digital consent ranges from 13 to 16 depending on the country. Below that age, creating an account requires the authorisation of the holder of parental responsibility, who may at any time view, correct or have the child's data deleted by writing to contact@mysportapp.fr. A parent who finds that an account was opened without their agreement may request its immediate deletion at that same address.
Article 10 — Security
Traffic is encrypted with TLS. Passwords are never stored in clear text. Access to data is partitioned row by row by database-level security rules (Row Level Security), so that an account can only read what concerns it. No system is infallible. In the event of a data breach likely to result in a high risk to your rights, we will inform you and notify the CNIL within the periods laid down by the GDPR.
Article 11 — Local storage and cookies
The app uses NO advertising cookies, NO third-party trackers and NO external analytics tools. Your device's local storage serves operation only: display preferences, language, theme, saving of entries in progress, and keeping your session. Nothing there is read by a third party.
Article 12 — MySportAPP: one account, five apps
MyPadelAPP, MyTennisAPP, MyPickleAPP, MyTableTennisAPP and MySquashAPP form the MySportAPP family and share a single account. SHARED across the five apps: your identity (first and last name, email, photo, date of birth, city, height and weight, dominant hand), your friends list and your messages. You can therefore be friends and chat with someone who does not use the same app as you. SPECIFIC to each app: your matches, statistics, level, club, equipment, play tags, trophies and health data. This data is never transferred from one sport to another. A field left empty in one app stays empty there. The only information that travels, for display purposes, is the list of apps where you are active — shown to other players as small badges. It reveals neither your level, nor your club, nor your statistics in those sports. Deleting your account erases your data across all five apps, without exception.
Article 13 — Changes to this policy
This policy may change, in particular if we add a feature or change provider. Any substantial change will be signalled in the app at your next sign-in, and the update date above will be corrected. Earlier versions may be requested at the contact address.
Contact: contact@mysportapp.fr