Privacy Notice

PickleQ.app Technologies OPC is the personal information controller for personal data it determines how and why to process. Club organizers may separately control the player information they enter into PickleQ. Questions and data-rights requests may be sent through Messenger.

• Club and organizer information: club name and link, locations, settings, staff credentials in protected form, recovery or contact email, and access history.
• Player and session information: names, skill level, gender when a format requires it, DUPR ID, check-in status, queue and court assignments, partners and opponents, scores, results, standings, and timestamps.
• Payment and entitlement information: payer name or contact supplied to PayMongo, payment and event identifiers, amount, currency, product, club link, payment status, and access period. PickleQ does not directly collect full card or e-wallet credentials.
• Device, security, and diagnostic information: local browser storage, anonymous or venue-level analytics identifiers, browser or device attributes, IP-derived security data, rate-limit records, feature usage, performance information, and error reports.
• Messages and requests: information you choose to send through Meta Messenger or other support channels.

Some organizer and session information is stored on the organizer's device. Cloud features send the information needed for syncing, public views, recovery, payments, or support to PickleQ's service providers.

• provide local and cloud session management, player check-in, matching, leaderboards, and exports;
• authenticate staff, recover access, secure the service, and prevent abuse;
• process and reconcile payments and activate Venue Pro access;
• send transactional messages about access, recovery, or payments;
• support users, investigate problems, and resolve disputes;
• analyze match and session data to improve matching, develop features, and produce statistics and benchmarks;
• measure feature use, diagnose errors, and improve reliability; and
• comply with accounting, tax, legal, fraud-prevention, and regulatory obligations.

Depending on the context, processing is based on consent, performance of a contract, compliance with law, protection of legitimate interests and security, or another basis permitted by the Philippine Data Privacy Act. Where consent is the basis, it may be withdrawn, although prior lawful processing remains valid.

Club pages and shareable live or completed-session links may display player names, check-in or court status, scores, results, standings, gender markers used by a selected format, and session details. These pages are intended to be shared, and recipients may reshare them. Organizers decide when to use these features and are responsible for informing players and handling their information lawfully.

We disclose only information reasonably needed for the relevant service:

• Supabase: cloud database, authentication, synchronization, and server functions;
• PostHog: limited product analytics, feature flags, and error diagnostics; automatic click capture and session recording are disabled;
• PayMongo: payment processing, fraud review, refunds, reconciliation, and transaction records;
• Resend: transactional recovery and Venue Pro notification emails;
• Meta: Messenger communications initiated through PickleQ's Facebook page; and
• GitHub Pages: delivery and hosting of the public web application.

We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction subject to appropriate safeguards, or with your direction or consent. Providers may process information in other jurisdictions subject to their contracts and applicable safeguards.

We may use or disclose statistics and datasets that have been irreversibly anonymized or aggregated so that a person cannot reasonably be singled out, linked, or identified. This may include use for research, product development, benchmarking, and commercial purposes.

We retain information only as long as reasonably necessary for the purposes above. Relevant factors include whether a club remains active, operational and recovery needs, payment and dispute periods, security requirements, and legal, tax, or accounting obligations. Browser-local information remains on a device until an organizer clears it, resets PickleQ data, or the browser removes it. Backups and security logs may remain for a limited period after deletion. We may retain irreversibly anonymized or aggregated information because it no longer identifies a person.

We use reasonable organizational and technical safeguards appropriate to the information processed, including access controls, protected staff credentials, limited public data views, rate limiting, and restricted administrative tools. No internet service can guarantee absolute security. Do not send passwords, full payment credentials, or unnecessary sensitive information through Messenger.

Subject to applicable law, you may ask to be informed about processing, access or correct your data, object to or restrict certain processing, withdraw consent, request deletion or blocking, obtain data portability where applicable, and seek damages or file a complaint with the National Privacy Commission. We may need to verify your identity and authority before acting on a request.

For player data entered by a club, contact the club organizer first when practical because the organizer controls the session and roster context. You may also contact PickleQ.

PickleQ is designed for use under the direction of organizers, not for children to create independent commercial accounts. Organizers are responsible for obtaining consent from a parent or guardian when required and for limiting information about minors, particularly on public pages.

We may update this Notice when PickleQ or legal requirements change. We will publish the new effective date here and provide additional notice when a change materially affects how personal data is used.