Padelizados

Padelizados Privacy Policy

Last updated: October 23, 2026

This Policy explains what personal data Padelizados processes, why, with whom it is shared and how to exercise your rights. The data controller is MSLARCO DESARROLLO S.A.S. (Tax ID / RUC 1793168183001), Quito, Ecuador. Contact: [email protected]. We process your data in accordance with Ecuador's Organic Law on Personal Data Protection (LOPDP) and its regulations, and with the app stores' data policies.

1. Who processes your data

  • MSLARCO is responsible for your account and player-profile data (name, email, phone, level, history, avatar, friends and progress), which follow you to every club.
  • Each club where you book, play or take classes is responsible for the data generated there (bookings, payments, enrollments, notes and school evaluations). MSLARCO acts as processor of that data, following the club's instructions.
  • The insurer is responsible for your policy data if you buy the sports insurance.

2. What data we process

  • Account: first and last name, email, password (always stored hashed), phone if you add it, language and appearance.
  • Sign in with Google or Apple: if you use them, we receive your name, your email (or Apple's relay email) and an account identifier. We never see your Google or Apple password.
  • Player profile: birth date, photo, sex, playing hand and side, province and city, year you started playing, level and match history and results.
  • Activity in the app: bookings, matches, statistics, rankings, challenges, missions, XP, ranks, points, redemptions, avatar items and auras, posts, comments, reports and groups.
  • Friends: the requests you send and receive, your friendships and the people you block, with their dates. When a friendship or request ends we close it instead of deleting it, so that blocking and notifications work correctly.
  • Invitations: your invitation code, who invited you and whom you invited, the stages each invitee reached, the XP for each stage and the status of its review.
  • Invitation fraud prevention: when you view your code or use one, we store a hash (an irreversible encrypted fingerprint, computed with a secret key) of your IP address and of a random identifier the app creates when installed (it is not your phone's advertising identifier). If you verify your phone as an invitee, we also store a hash of that number. We never store the IP, the identifier or the phone in clear text for this. From them we compute risk signals (same device or network as the inviter, many accounts in a short time, a phone already used, matches only within the same circle) and a score.
  • PadelPass: your pass level each season, the rewards you claimed, purchased levels and, at close, your final level, positions and prizes.
  • School: lessons watched, test answers and scores, passed modules, your weekly streak and streak protectors, and the certificates issued, with your name, the module, the score and the date.
  • Videos: if you record your match or training, or the club records it with its cameras, the video and its marked moments.
  • Card payments on the web: processed by the Paymentez/Nuvei gateway. We keep the record of each charge (amount, date, status, card brand and last four digits), never the full number.
  • App Store and Google Play purchases: the store gives us the purchase receipt (transaction identifier, product, dates and subscription status) to credit what you paid. We do not receive your card or your Apple or Google account details.
  • Sports insurance (optional): the data the insurer requires to issue the policy (for example ID or passport, phone and emergency contact), stored encrypted and sent to the insurer only if you buy it.
  • QR codes: when you scan a code from a clothing item, a reward or an event, we record the code, the date and what was delivered to you.
  • Location: only if you allow it on your phone, to show nearby clubs. It is used at that moment to sort the search; we do not store it in your account or share it.
  • Camera and photos: only when you choose to record a video, scan a QR code or pick your photo.
  • Devices and notifications: the notification identifier of each device where you enable them.
  • Technical use: IP address, system and activity logs needed for security and auditing.

We do not ask for data the service does not need, and we do not track you across third-party apps or websites.

3. Why we use it

  • To provide the service: bookings, payments to the club, scoring, statistics, rankings, school, challenges, missions, PadelPass, avatar, redemptions, friends, invitations, community and whatever each club's modules enable.
  • To manage your membership, purchases and receipts.
  • To compute your level, XP, ranks, points and pass level, and to deliver season prizes.
  • To show the friends leaderboard and suggest players you may know (people you played with, from your groups, your clubs or your city).
  • To send service notices (confirmations, friend requests, invitations, codes, reminders and security notices). You can turn off non-essential notices.
  • To issue and maintain your policy if you buy the insurance.
  • To protect accounts, prevent fraud and comply with legal obligations.
  • To improve the service with aggregate statistics that identify no one. Sponsors only receive aggregate, anonymous figures (for example how many times something was viewed or redeemed), never data that identifies you.

We do not sell your data. The legal bases are performance of our contract with you, your consent (which you can withdraw), our legal obligations and our legitimate interest in the security of the service and in preventing fraud.

Review of possible invitation fraud

  • Legal basis: our legitimate interest in making invitation XP reward people who bring real players, and not be obtained with fake accounts. We only use hashes and signals, not clear-text data.
  • What happens automatically: if an invitation's risk score is high, new XP from that invitation is held until a person reviews it. Holding XP has no legal effect on you and does not significantly affect you: it does not touch your account, payments or membership.
  • Use of artificial intelligence: the reviewer may ask our AI (EVA AI, which uses OpenAI) for a summary of the case. We send the AI only facts about the invitation: timings, stages, signals, score and counts, with no names, emails, phone numbers or account identifiers. The AI only recommends (pay, keep held or reverse).
  • The decision is human: releasing or reversing the XP is always decided by a person on our team, with a recorded reason.
  • Your right: the LOPDP grants you the right not to be subject to decisions based solely on automated assessments that produce legal effects or significantly affect you. You can ask for a person to review the case, give your point of view and challenge the decision by writing to [email protected].

4. Children's and teenagers' data

Minors under 18 use Padelizados with the authorization of their parent or legal guardian. A minor has no public profile: nobody can search for them or add them as a friend, they do not appear in suggestions, they receive no personalized advertising, and their data is never used for commercial profiling. If a minor uses an invitation code, they do not become a friend of the inviter. Videos showing minors are only visible to authorized people from the match and the club. The guardian exercises the minor's rights.

5. Who we share it with

  • With each club where you are active, only what is needed to serve you.
  • With the people your privacy settings allow: your profile, posts and results (what you mark "friends only" is only seen by your friends). Your avatar and aura are shown on your profile; we never show how much you paid.
  • With your friends, your position on the overall leaderboard within the friends leaderboard.
  • With the person who invited you: your public name and photo, the stage you reached and the XP you gave them; never your phone or email.
  • If your certificate can be verified online, with whoever has its code: your name, the module, the score and the date, to confirm it is genuine.
  • With providers we need to operate, acting as data processors, under contract and bound by confidentiality and security obligations:
    • Hosting, file storage and email: Amazon Web Services (United States).
    • Card payments: Paymentez/Nuvei.
    • In-app purchases: Apple (App Store) and Google (Google Play).
    • Sign-in: Google and Apple, if you choose them.
    • Phone notifications: Expo, Apple and Google.
    • Real-time scoring: Pusher.
    • Phone verification via WhatsApp: Meta.
    • Artificial intelligence: OpenAI (United States), for AI features and the review of possible invitation fraud, with no sensitive data or data that directly identifies you, and instructed not to use it to train its models.
    • Public website analytics: Google Analytics, only if you accept analytics cookies.
  • With the insurer, only if you buy the sports insurance.

International transfers. Some of these providers are outside Ecuador, mainly in the United States (Amazon Web Services, OpenAI, Expo, Pusher, Google, Apple and Meta). We transfer only what each service needs, with the safeguards required by the LOPDP: contracts that require them to protect your data at a level equivalent to Ecuadorian law and to use it only to provide the service to us. We will also share data if a competent authority legally requires it.

6. How long we keep it

  • Your account, profile and activity: while the account is active.
  • Friendships, requests and blocks: while the account is active; when you delete it, they are all closed.
  • Invitations, IP, device and phone hashes, risk signals, AI analyses and decisions: while the account exists, to compare against new invitations and to support the decisions made. If you delete your account, they remain linked only to the anonymized account and are used solely for that same anti-fraud purpose.
  • Videos: for the period set by your plan or the club's; originals are removed sooner.
  • Certificates: while the account exists. If you delete it, the certificate loses your name and can no longer be verified online.
  • Payment records and electronic invoices: for the period required by Ecuadorian tax rules (SRI), even if you close your account.
  • Security logs: for the time needed to protect the service.

7. Deleting your account

You can request it from the application (Profile → Delete my account) or by following the instructions at padelizados.com/en/legal/delete-account. We handle the request within 15 days at most: your account is closed and your personal data is anonymized, meaning your name, photo, email, phone, birth date, profile and avatar are replaced with values that no longer identify you, your posts and videos stop being shown and your friendships are closed. In past match and tournament results, and in your inviter's list, you appear as "Anonymous player" or "Player". Only records the law requires us to keep, and those listed in section 6, are retained.

8. Your rights

You have the right to access, rectify, update, delete, object to, port and suspend the processing of your data, to withdraw your consent at any time and not to be subject to decisions based solely on automated assessments, under the LOPDP. You can do most of this in the application (edit your profile, privacy, friends, blocks and notifications, delete your account); for anything else write to [email protected], or ask the club if the data was generated there. We will respond within the legal deadlines. You may also file a complaint with Ecuador's Personal Data Protection Superintendency.

9. Security

Encrypted connections (HTTPS/TLS), hashed passwords, anti-fraud IP, device and phone stored only as hashes, encrypted insurance data and credentials, optional two-step verification, strict separation of each club's data, role-based permissions and an audit log. If a breach affecting your data occurs, we will notify the authority and the people affected within the legal deadlines.

10. Cookies

The website uses the cookies needed for your session, language and theme. On the public pages we use Google Analytics 4 only if you accept it in the cookie notice; you can change your choice from the "Cookies" link in the footer.

11. Changes to this policy

We will publish the current version here with its date. If a change is substantial, we will announce it within the application before it takes effect.

12. Contact

MSLARCO DESARROLLO S.A.S. · RUC 1793168183001 · Quito, Ecuador [email protected] · padelizados.com