Privacy policy
In effect since October 8, 2026.
1. Identity and address of the controller
The controller ABRAHAM ISRAEL URIARTE ACEDO (hereinafter “Padel Index”, “we” or “the Controller”), RFC UIAA880613552, with address at PASEO DE LAS LOMAS 109, COL. VILLALOMAS, TIJUANA, BAJA CALIFORNIA, C.P. 22034, is responsible for the processing of personal data described in this Comprehensive Privacy Policy. This Policy applies to the Padel Index app for iOS and Android, the web version, widgets, backend services, communications, payment systems, clubs, tournaments and related features.
2. Minimum age
Padel Index is intended exclusively for people aged 18 or over. We do not knowingly collect data from minors. If we detect an account belonging to a minor, we may suspend it and delete its data, except where legal retention is mandatory. Anyone who knows of a case can report it through the privacy email.
3.1 Account and authentication
• Email address, internal user identifier and verification status. • Authentication credentials securely managed by Supabase Auth. Padel Index cannot read passwords in plain text. • Data received from Apple or Google when you choose OAuth, such as the provider identifier, name and email you authorize. Padel Index does not receive the password of those accounts. • Date and time of sign-up, sign-in, sign-out and security-related activity. • Date, time and version of your acceptance of the Terms and this Policy. • Confirmation and security emails sent to your address.
3.2 Identification and profile
• First name, last name and, where applicable, second last name. • Date of birth to verify you are of legal age. • CURP, used to verify sporting identity and prevent duplicate accounts. • Phone number, email, gender, state, city and sporting category. • Optional profile photo and the associated internal URL. • Clubs you belong to and your role in them.
3.3 Sporting activity and inferred data
• Matches, teams, partners, opponents, venue, court, date, time, category and match status. • Set scores, reported results, confirmations, disputes, reviews, abandonments and annulments. • Index, Index changes, points breakdown, history, ranking position and season results. • Category, category changes, applied thresholds and historical records. • Confidence percentage and objectives, including points earned in First Steps, Competitive Level, Tournaments, Consistency and Conduct. • Statistics, streaks, playing frequency, distinct opponents, distinct partners, monthly compliance and performance against higher-Index players.
3.4 Clubs and tournaments
• Club name, location, address, description, photo, founding year, owner, members and invitation code. • Tournament registrations, partner, captain, PI100/PI250/PI500/PI1000 level, category, spots, results, progress, championships and participation status. • Tournament deposits, balances, deadlines and payment status.
3.5 Subscriptions and payments
• Plan purchased, price, currency, subscription status, period, renewal, cancellation and access entitlement. • Transaction identifiers, payment provider, amount and charge status. • Apple, Google and Stripe process payment methods depending on the channel. Padel Index does not store full card numbers or security codes. Financial or asset data that we must process directly will be subject to express consent and applicable obligations.
3.6 Conduct, reports and support
• Reports for no-shows, unsporting conduct, false scores, abandonment or other reasons. • Free-text descriptions provided by the reporter, resolution, disciplinary measures and related communications. • Support requests, clarifications, claims and exercise of rights. We do not request sensitive personal data. Avoid including health, beliefs, political opinions, sexual orientation or other sensitive information in free-text fields, unless indispensable to resolve a case and a legal basis exists.
3.7 Device, security and communications
• IP address used for security and request-rate control; kept for up to 30 days. • Push notification token, platform, app version, language and last activity date. • Technical events strictly necessary for authentication, abuse prevention, continuity and diagnostics. • Language, theme, haptics and notification preferences. • Notifications sent, associated content, internal link, read status and date.
3.8 Data stored locally
• Authenticated session and the tokens needed to maintain it. • Temporary sign-up draft until the profile is completed or 30 days pass. • Preferences and caches of home, rankings, clubs, tournaments and Confidence objectives. • Widget data: name, Index, rankings, category, Confidence, recent matches and monthly statistics. • Temporary images generated to share a profile or result.
3.9 Cookies and web technologies
The web version uses cookies, local storage or other technologies strictly necessary to sign in, maintain security, remember preferences, process payments and operate the service. Padel Index will not use advertising cookies or non-essential analytics without informing you and, where applicable, obtaining consent.
4. Source of the data
• Directly from you during sign-up, profile editing, matches, tournaments, payments, reports and support. • From other players when they invite you, register you as a participant, report a result or file a dispute. • From club and tournament owners or organizers. • From Apple, Google, app stores, RevenueCat and Stripe, under authorizations and transactions. • Automatically from use of the service, the device and system calculations.
5.1 Necessary purposes
• Create, authenticate, protect and manage your account. • Verify legal age, sporting identity and account uniqueness. • Organize four-player doubles matches and manage invitations, results and disputes. • Calculate Index, Confidence, category, rankings, statistics and rule compliance. • Apply limits, penalties, promotions, relegations, inactivity and sanctions. • Manage clubs, members, tournaments, payments, deposits, balances and prizes. • Charge subscriptions, validate access and handle renewals, cancellations, refunds and claims. • Send operational and security communications, results, invitations, reminders, payment notices and important changes. • Display authorized information in profiles, rankings, widgets and sharing features. • Prevent fraud, abuse, multiple accounts, ranking manipulation and unauthorized access. • Handle support, ARCO rights, legal obligations and authority requests.
5.2 Secondary purposes
We currently do not sell data, offer personalized advertising or use data for third-party marketing. If we introduce secondary purposes, we will update this Policy and offer consent or opt-out mechanisms as appropriate.
6. Automated processing: Index, Confidence and category
Padel Index uses automated processes to calculate scoring, classification, Confidence, category, participation limits and possible penalties. These results may affect visible position, category, access to certain tournaments or competitive status. Index does not reset at the start of a new semester or year. Ordinary category changes are processed in June and December. Confidence is made up of five blocks; each block contributes its full percentage once accumulated points reach its threshold, even if not all of its objectives have been completed. You can request an explanation, correction of source data or review of an automated result through support or the privacy email. A dispute will suspend effects when the rules or the review process so provide.
7. Visibility and disclosure within Padel Index
Other authenticated users may see sporting information needed for the community and competition, including name, photo, gender, city/state, category, club, Index, Confidence, ranking, results and history that the platform marks as visible. Match participants may view members, score, reports and status. Club members or owners may access information needed for membership and management. Organizers may access data needed for registration, payments, participation and tournament results. CURP, date of birth, phone, email, credentials, tokens, full payment data and internal reports will not be public or visible to unauthorized users. Photos are shown within the app to authenticated users. They are stored in unlisted, non-indexable storage and are not intended for public indexing; however, anyone who knows the direct link to an image could open it.
9. Processors, third parties and transfers
We may send or transfer data to providers needed to operate the service. Each provider processes information according to its role and applicable agreements: • Supabase: database, authentication, storage, backend and security. Data: account, profile, sporting activity, clubs, tournaments, payments, reports and technical data. The infrastructure is hosted in the United States. • Apple and Google: OAuth, distribution, in-app purchases and subscription management. Data: identifier, authorized email, transactions and subscription status. • RevenueCat: mobile purchase and access entitlement management. Data: user identifier, product, transaction, platform and status. • Stripe: web billing and subscriptions. Data: identifier, email, amount, currency, payment and status; card data is processed by Stripe. • Resend: sending of transactional emails (account confirmation, security and notices). Data: email address and message content. • Expo, APNs and Firebase Cloud Messaging: push notification registration and delivery. Data: push token, platform, language and notification content. • Vercel Inc.: hosting and delivery (CDN) of the web version and the site. Data: technical data and content needed to provide the service. • Clubs and organizers: membership, registration, payments, competition and support. Data: sporting profile, team, registration and payment status. • Authorities: compliance with law, rulings or valid requests. Data: strictly requested and legally required. Providers operate infrastructure outside Mexico, mainly in the United States, so data is processed internationally. Padel Index will communicate the applicable notice and purposes, require contractual safeguards and carry out transfers in accordance with the law. We do not sell or rent personal data. Transfers clause: by accepting this Policy through an express checkbox, you authorize the described transfers that require consent. Transfers necessary to fulfil a legal relationship or contract may be made under the applicable legal exceptions. You may revoke consent for non-essential transfers through the privacy email, without affecting prior lawful processing.
10. Security
We apply administrative, technical and physical measures proportionate to the risk, including authentication, access control, per-user policies, encrypted communication, restricted storage, privilege separation, request limits, backups, monitoring, updates and incident response procedures. No system is infallible. If a breach occurs that significantly affects property or moral rights, we will inform you without undue delay and provide applicable protection measures.
11. Retention and deletion
• Account and profile: when you delete your account, your email, name, last names, date of birth, CURP, phone, gender, location, photo, notifications, tokens, preferences and club memberships are deleted immediately, and your access is cancelled. • Sporting activity: matches, scores, Index and history in which you took part are kept in dissociated form, without data that identifies you and shown as “Jugador eliminado” (deleted player), to preserve the integrity of rankings and the history of other players. Pending matches you were part of are cancelled. • Club owners: if you own a club, you must delete the club before deleting your account. • Payments and subscriptions: during the relationship and the applicable tax, accounting, contractual or fraud-prevention period. • Reports and disputes: during the investigation, sanction and the period needed to defend rights. • Notifications and tokens: while necessary; invalid tokens are purged and preferences are deleted with the account. • IP and security: up to 30 days, with automatic purge. • Sign-up draft: until sign-up is completed, cancelled or 30 days pass. • Caches, widgets and temporary images: until sign-out, account deletion, data clearing or a short technical period elapses. When you request cancellation, we may block data needed for contractual or tax obligations, fraud investigation, legal defense or compliance with an authority. Once the applicable period ends, the data will be erased or anonymized.
12. ARCO rights, revocation and limitation
You may exercise your rights of access, rectification, cancellation and objection; revoke consent; or limit use or disclosure. Send your request to AURIARTE@SPORTSTRAVELS.COM.MX with: • Your name and a means to receive notifications. • A document proving identity and, if applicable, representation. • A clear description of the data and the right requested. • Documents or elements that help locate or correct the data. We will respond with a determination within 20 business days of receipt; if granted, it will take effect within the following 15 business days. Deadlines may be extended once for an equal period when circumstances justify it. Exercising your rights is free of charge, except for permitted reproduction or shipping costs. You can also correct certain data or request deletion from the app. Account deletion and subscription cancellation are separate processes: deleting your account does not replace cancelling recurring billing when the payment provider requires it to be managed through its own channel.
13. Communication preferences
You can turn off push notifications from Padel Index or the operating system. Some transactional, legal, security, payment or account communications are essential and may be sent by email or within the service while the relationship exists.
14. Changes to this Policy
We will publish changes through the app, the website, email or another suitable means. Material changes will state the effective date and, when the law requires it, we will request renewed consent. The current version will be available at https://padelindex.com.mx/privacidad.
15. Contact and competent authority
Privacy and ARCO rights: AURIARTE@SPORTSTRAVELS.COM.MX Support: AURIARTE@SPORTSTRAVELS.COM.MX Phone: 6642818290 Address: PASEO DE LAS LOMAS 109, COL. VILLALOMAS, TIJUANA, BAJA CALIFORNIA, C.P. 22034 Without prejudice to internal mechanisms, you may go before the Secretaría Anticorrupción y Buen Gobierno or the authority that is competent under current law.