Privacy notice

YAPA is a private, invitation-only tool for one group of padel players in Lisbon. It is run by the person who invited you, who is responsible for your data here.

What YAPA stores about you

• Your email address or your username, the name you choose to show, and your language.
• If you sign in with a password: a scrambled form of it that cannot be turned back into the password. Nobody, including the administrator, can read your password.
• Your padel level, preferred side, preferred clubs, minimum notice and weekly limit.
• Your weekly availability and the exceptions you enter.
• If you sign in with Google or Microsoft: the account identifier they give YAPA. Not your password, and not your contacts.
• If you choose to share your calendar: only the times you are busy for the next 14 days, and an encrypted key that lets YAPA refresh them. Never event titles, attendees or locations.
• The matches you were invited to, your answers, and who booked or cancelled.

What it is used for

Only to suggest matches between members of the group, to tell you about them (by email, if you gave an address), and to keep the service secure. There is no advertising, no analytics and no tracking, and your data is not sold or shared for other purposes.

Who else handles it

• Other members of the group see your name, level, preferred side and your answers, on matches you share with them. They never see your calendar or your exceptions.
• The group administrator can see the list of members and all matches.
• Service providers that carry the data: the hosting company for the server, Cloudflare for the network connection, and Mailgun for email. Google or Microsoft only if you choose to sign in with them or share your calendar.

How long it is kept

• Your profile and availability: until you delete your account.
• Finished matches: 365 days.
• Exceptions: 30 days after they end.
• Calendar busy times: deleted as soon as they are in the past, or at once when you stop sharing.
• Sign-in links: 15 minutes. Sign-in sessions: 14 days.

Your choices and rights

On your Account page you can download everything YAPA holds about you, stop sharing your calendar, unlink Google or Microsoft, and delete your account with all your data. You can correct your profile at any time. You may also ask the administrator, and you have the right to complain to the data protection authority (in Portugal, the CNPD).

Cookies

YAPA sets one cookie, needed to keep you signed in and to protect forms. It sets no other cookies.