Privacy Policy

1. Who we are (controller)

The data controller for account, website, and app usage data is Viantech, operating the RacketLive Service. For our registered office address and company registration details, email support@racketlive.com (we will also publish those particulars on this page when they are finalized). Privacy and data-rights requests: the same address. We have not appointed a Data Protection Officer where one is not required; if that changes, we will name the DPO here.

Roles for tournament participant data: when an organizer (club, parent, coach, or event director) enters player or official details into the Service, that organizer is the controller of that participant data. Viantech acts as their processor and processes that data only to provide the Service under these terms and our organizer data-processing terms in Section 11. We remain controller of our own account, security, and product-operation data.

2. What we collect

We may process the following categories, and only where needed:

• Account data: email, password hash (we never store your raw password), display name, optional club name/slug, country/currency if you set them, and profile photo if you upload one.
• Sign-in identifiers: if you use Apple or Google, those providers send us an identity token and, where you allow it, name and email. We do not receive your Apple or Google password.
• Tournament data you or an organizer enter: event names, draws, scores, awards, and participant names (including children who compete). Organizers may also store player email, phone, or date of birth for roster and age-category management. Those contact and date-of-birth fields are not exposed on public spectator pages.
• Location (mobile, on request only): if you tap to sort tournaments by distance, the app asks for when-in-use location. We do not collect background or always-on location.
• Device and security logs: IP address, user agent, and operational logs used to keep the Service running and to prevent abuse. We do not use these for advertising profiles.
• Support messages: content you send to support@racketlive.com or admin@racketlive.com, used only to respond and improve support.

We do not collect payment card numbers on RacketLive servers. If payments are used in future, they will be handled by a PCI-compliant processor, not stored by us, and this policy will be updated before that feature goes live.

In-app notification screens may show match or tournament updates inside the app. We do not currently send push notifications via third-party push services; if we add them, we will ask for device permission and update this policy.

3. What we do not do

• We do not sell personal data, and we do not share it with data brokers.
• We do not use your content or personal data to train third-party AI models.
• We do not sell data to advertisers. On the website, Google AdSense loads on the public homepage only after you tap Accept all. In the iOS and Android apps, a tournament page may show a Google AdMob banner when that tournament has ads turned on. Those app ads are non-personalized, rated for a general audience, and are not used to build advertising profiles of children.
• We do not require an account to view public scores.
• We do not collect precise location unless you explicitly grant it for nearby sorting.
• We do not use your camera or photo library except when you choose a profile picture.

4. How we use data (purposes and bases)

We use personal data solely to operate and secure the Service: authentication, tournament operations, public spectator pages you or an organizer publish, customer support, abuse prevention, and legal compliance. We do not use personal data for unrelated marketing lists.

Where UK GDPR / EU GDPR or similar laws apply, our bases as controller are: performance of a contract (your account and the Service), legitimate interests in security, fraud prevention, and keeping historical public results coherent (balanced against your rights), legal obligation where we must retain or disclose data, and consent for optional analytics and advertising cookies. Organizers must establish their own lawful basis for participant data they enter (including parental consent for children where required).

5. Children and youth sport

Sport is for everyone, including kids. The Service is designed so clubs and families can run junior, mini, and age-group events. That means children's names, ages/categories, scores, and standings may appear in the Service when an organizer enters them and publishes an event.

• Accounts: you must be at least 13 (or the higher digital-consent age in your country) to create an account. Parents or guardians should create and manage organizer accounts for family-run events.
• Participants of any age:organizers may register child players. The organizer (not RacketLive) must have a lawful basis — typically parental or guardian consent and any club or safeguarding rules that apply — before entering a child's personal data.
• Public pages:published spectator pages may show a child's competition name and results. Do not put email, phone, or date of birth in public-facing fields. Those roster fields stay off the public player view.
• Our safeguards:we minimize what is collected by default, keep private roster fields off public pages, do not sell children's data, do not use it for third-party ads targeting, and do not knowingly create accounts for children under the account age floor. App banners are non-personalized and are not directed at children.
• Requests about a child: a parent or guardian may contact support@racketlive.com to request access, correction, or deletion of a child's personal data we hold. For data an organizer controls, we will also direct you to that organizer or assist them as processor.

6. Public tournament pages

If a tournament is published, spectator pages may show player/team names, scores, standings, and awards. Organizers control what they publish. Do not enter personal data into public fields that you do not want shown. Email, phone, and date of birth on player records are treated as private and are not part of the public player view.

7. Cookies, analytics, and ads

Strictly necessary cookies (Supabase session) keep you signed in on the website. Optional Vercel Analytics and Google AdSense are disabled until you tap Accept all. Essential only (or no choice yet) means no analytics script and no homepage ads. The mobile apps do not use that cookie banner. When a tournament has ads turned on, the app shows a non-personalized Google AdMob banner on that tournament's pages. Details are in our Cookie Policy. You can change or withdraw cookie consent anytime via Cookie preferences (footer and Cookie Policy) or by clearing this site's stored consent and reloading.

8. Processors (who we share with)

We share personal data only with processors who need it to run the Service, under contract:

• Supabase — database, authentication, and file storage (including profile photos).
• Vercel — website hosting. Analytics only if you opt in.
• Apple / Google — only to complete Sign in with Apple or Google when you choose those buttons.
• Google AdSense — homepage ads only after Accept all. Google AdMob — non-personalized banners in the iOS and Android apps when a tournament has ads turned on. See Google's partner sites policy.

We may disclose data if required by law, to protect the Service or users (including children), or in a merger/sale of the company, subject to this policy remaining in force or you being notified.

9. International transfers

Our processors may store data in the United States, the European Union, the United Kingdom, or other regions. Where UK/EU law requires a transfer safeguard, we rely on appropriate mechanisms offered by those processors (such as Standard Contractual Clauses and any applicable UK addendum or adequacy decision).

10. Retention

We keep data only as long as needed for the purposes above:

• Account profile: while the account is open; wiped on verified account deletion (login credentials and personal profile fields).
• Security and abuse logs: typically up to 12 months, unless needed longer for an active investigation or legal claim.
• Support emails: typically up to 24 months after the last message in the thread.
• Published tournament results:may remain on the Service as historical records so past events stay intact for players and clubs. On account deletion or a valid erasure request, we remove or anonymize personal identifiers we control where the law requires it. Competition names on public results may be replaced with a generic label (for example "Player") where full removal would break historical brackets; private fields (email, phone, date of birth) are deleted or dissociated.
• Organizer-controlled participant data:retained while the organizer's event or account needs it; organizers can edit or remove roster fields. After organizer account deletion we follow the same wipe/anonymize approach for personal profile data and private roster fields.

11. Organizers and processing terms

If you run a tournament, you are responsible for the participant data you enter and for having a lawful basis to enter it (including parental or guardian consent where a participant is a child, and any safeguarding or sports-body rules). RacketLive provides the software; you remain responsible for your event and for personal data you upload. Logos, photos, and flyers you upload are your content. You must have the right to upload them. RacketLive only stores and displays them to run the Service.

When we process participant data on your instructions as your processor, we will: (a) process it only to provide the Service; (b) require confidentiality from people who handle it; (c) use appropriate security measures; (d) engage sub-processors listed in Section 8 (and update this policy when the list materially changes); (e) assist with data-subject requests and security incidents where feasible; (f) delete or return participant personal data when you delete it or close your account, subject to the retention rules above and legal holds; and (g) make available information reasonably needed to demonstrate these commitments. A signed Data Processing Agreement is available on request at support@racketlive.com.

12. Security

We use industry-standard measures appropriate to a cloud SaaS product: TLS in transit, encrypted storage via our processors, hashed passwords, access controls, and operational logging. On the mobile apps, the sign-in session is stored in the device keychain (iOS) or keystore (Android), which the operating system encrypts. No method of transmission or storage is 100% secure; please use a strong unique password and tell us promptly at support@racketlive.com if you suspect unauthorized access.

13. Your rights

Depending on your location you may have rights to access, correct, export (portability), restrict, object to, or delete personal data, and to withdraw consent. California residents may also have rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information as those terms are defined under the CCPA/CPRA. We do not sell personal information. Optional AdSense after Accept all may involve advertising cookies; you can withdraw that consent anytime via Cookie preferences. App banners are non-personalized and are not a sale of personal information.

To exercise rights: email support@racketlive.com with the subject "Privacy request" and tell us whether you want access, export, correction, or deletion. To delete your account in the iOS or Android app: More → Privacy & Security → Delete account. We will complete verified requests without undue delay, and in any event within the time required by applicable law (typically 30 days, extendable where the law allows).

You may lodge a complaint with your local supervisory authority. In the UK that is the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve concerns first.

14. Changes

We will post updates on this page with a new effective date. Material reductions in your privacy protections will not be applied retroactively without notice or a new consent where the law requires it.

15. Contact

Privacy and data requests: support@racketlive.com. Operator: Viantech. General product support may also use that address; partnerships: admin@racketlive.com. Related documents: Terms of Service and Cookie Policy.