Privacy policy

Who we are

Amigorally is a host-first padel app: a host runs a session on their phone and publishes the results to a public page. This policy explains what we collect to do that and nothing else. Questions go to [email protected].

What we collect

• Account data (hosts only). When you sign in with Google or Apple we receive the account identifier the provider issues for our app, your email address, your name and, from Google, your profile picture URL. We do not receive your password and we cannot post or read anything on your behalf.
• Session data. Everything the host enters: session title, venue, date, format and settings, player names, the rounds and scores, and the change log the phone sends when it syncs. Player names are typed by the host; players themselves do not have accounts.
• Photos. Images the host chooses to upload to a session, resized on the phone before upload.
• Technical data. Server logs with IP addresses and timestamps, kept briefly for abuse prevention and debugging. If analytics are enabled on the website, page views are measured with PostHog through our own domain.

Where it is stored

Account and session data live in a PostgreSQL database on a server we operate. Photos are stored in Cloudflare R2 object storage. Sign-in tokens are verified against Google and Apple at sign-in time; we store only the identifier they return. Data on your phone stays on your phone until it syncs.

Share pages are public

Every session has a results page at a link like amigorally.com/s/ABCD2345. Anyone with the link can open it without signing in. It shows the session title, venue, date, the host's first name, player names, standings, round results, the fairness report and the photos. Pages are unlisted by default (search engines are asked not to index them); a host can choose to make a page indexable.

Hosts are responsible for their players. By creating a session and sharing its link, the host confirms the players agreed to have their name, results and any photos appear on that page. A host can delete a session or a photo from the app at any time, which removes it from the page.

What we do not do

• We do not sell or rent your data, and we do not share it with advertisers.
• We do not show ads.
• We do not use your session data for anything other than running the app and the share pages.

Deletion

Deleting a session in the app deletes it and its photos from our servers. To delete your whole account and everything attached to it, email [email protected] from the address you signed in with; we complete deletion within 14 days. If your name appears on someone else's share page and you want it removed, contact the host or email us with the link.

Retention and security

Data is kept for as long as the account exists. Connections are encrypted with TLS, access tokens expire, and the server refuses to start without its security configuration. No system is perfectly secure; if we learn of a breach affecting you we will tell you.

Children

The app is intended for adults organising games. We do not knowingly collect accounts from children under 13.

Changes and governing law

We will post changes here with a new date. This policy is governed by the laws of the Republic of Indonesia.