Privacy policy
SmashUp (smashup.id and the Android / iOS apps) · Last updated 14 October 2026 · Contact: exe.andy.yo@gmail.com
SmashUp runs padel tournaments: an organizer sets up a session, players are added, scores are entered and standings are worked out. We collect what is needed to do that and to keep your results attached to you across tournaments. We do not sell data and we show no advertising.
What we collect
| Data | When | Why |
|---|---|---|
| Email address | When you create an account | Signs you in, and is how we would reply if you send us a bug report. Signing in with Apple may give us a private relay address instead of your real one. |
| Display name | When you create an account | Shown to organizers and on scoreboards. |
| Gender and age | Asked when you create an account | Stored on your profile. They are not used to rank you, to pair you, or to decide anything in a tournament. |
| Password, or your Google / Apple account identifier | Depending on how you sign in | Passwords are stored only as a hash — we never hold the password itself. For Google and Apple we keep the identifier and the tokens they issue, so you can sign in again. |
| Session records | While you are signed in | A session token, plus the IP address and the browser or app it was created from, so you stay signed in and so we can recognise abuse. |
| Tournament play | When an organizer adds you, or you join | The name you appear under in that tournament, the matches you played, the points scored, and the standings and rating worked out from finished matches. |
| Bug reports and feedback | Only when you send one | Your message, the screen you came from, and which browser or app you were using. A report is far more useful with those, and asking people to describe their browser never works. |
| A copy of confirmed scores | When a match is finished | Kept separately so a result can be restored if it is ever deleted by mistake. It holds the scores and the player identifiers, not names or contact details. |
Permissions in the apps
- Camera: only when you scan a QR code to link yourself to a player. The code is decoded on your device — no image is uploaded, and nothing is stored.
- Internet: tournaments are live, so the app talks to our server.
The apps do not access your contacts, location, photos or files.
Where data is stored
On our own server, in a database we operate. Signing in with Google or Apple is handled by them under their own privacy policies; we receive the identity token and the profile fields listed above, and nothing else.
Your choices
- Change your name, gender or age at any time from the account panel in the header.
- Delete your account from that same panel (Delete account), or by emailing us. This removes your account, your sign-in methods, your sessions and your name from the tournaments you played. The results of those matches stay on the scoreboards, because they are equally the record of everyone else who played them — they simply no longer carry your name. How to delete your account.
Children
SmashUp is intended for players aged 13 and over. We do not knowingly collect data from younger children; contact us and we will delete it.
Changes
We will update this page when the policy changes and show the date above.
Kebijakan privasi (ringkasan)
SmashUp hanya mengumpulkan data yang diperlukan untuk menjalankan turnamen padel: email, nama tampilan, gender dan umur pada profil Anda; kata sandi (hanya disimpan sebagai hash) atau identitas Google/Apple; catatan sesi berisi token, alamat IP, dan perangkat; data permainan berupa nama Anda di turnamen, pertandingan, skor, klasemen, dan rating; serta laporan bug bila Anda mengirimkannya. Kamera hanya dipakai saat Anda memindai QR dan gambarnya tidak pernah diunggah. Kami tidak menjual data dan tidak menampilkan iklan. Anda dapat menghapus akun dari panel akun di bagian atas aplikasi, atau lewat email exe.andy.yo@gmail.com. Hasil pertandingan tetap ada di klasemen karena itu juga catatan pemain lain, tetapi tidak lagi memuat nama Anda.