Privacy Policy | Joino UAE

This Privacy Policy describes how Joino (operated by AICO Tech L.L.C-FZ, Meydan Free Zone, Dubai, UAE, license 2646735.01, hereafter "we", "us", "our") collects, uses, stores, and protects your personal data when you use the Joino web app at joino.pro and the Joino iOS, watchOS, and iPad apps (collectively, the "Service").

1. Data we collect

When you create an account or use the Service we collect:

Account data: email address, password hash (managed by Supabase Auth), name, optional avatar URL.
Profile data: padel level, area in the UAE, availability windows, phone number (optional).
Activity data: matches you create or join, scores you record, events you register for, reviews you leave, points and streaks.
Device data: device type, OS version, app version, IP address (for security and rate-limiting), crash logs (no personal payload).
Local-network data: when you start the live scoreboard, the iPhone advertises a local web server on your Wi-Fi. No data leaves your network.

We do not collect location coordinates, contacts, calendar, photos (unless you upload an avatar), or any health / fitness data.

2. How we use your data

To run the Service (match the right players, show events).
To send transactional emails (match joined, event registered, password recovery) via Resend.
To compute your Padel DNA, leaderboard rank, and badges.
To prevent abuse (rate-limiting, anti-spam, anti-no-show restrictions).
To improve the Service (aggregated, anonymous usage analytics).

We do not sell your personal data. We do not use it for third-party advertising.

3. Who sees your data

Other players: your name, level, area, reliability score, badges, and match history are visible on your public profile. Email and phone are never shown.
Processors: Supabase (database, auth, storage), Vercel (hosting), Resend (email delivery), Apple (iCloud Sign In with Apple). All bound by data-processing agreements.
Authorities: only if compelled by valid legal process in the UAE or EU.

4. Where data is stored

Database and authentication are hosted on Supabase, EU-West-1 (Ireland). Web hosting via Vercel, global edge. Backups are encrypted at rest.

5. Your rights

You can at any time:

Access and download your data (write to us, see below).
Edit your profile directly from the app.
Delete your account (write to us; deletion within 30 days).
Withdraw consent for marketing emails (none today).
File a complaint with the relevant data protection authority (UAE DIFC DPA or your local EU authority).

6. Data retention

We keep your data for as long as your account is active. Within 30 days of account deletion all personal data is purged, except anonymized records required for legal or audit purposes.

7. Children

The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13.

8. Changes to this policy

We may update this policy. Material changes will be announced on this page and, where appropriate, by email at least 14 days before they take effect.

9. Contact

For privacy-related requests write to hello@joino.pro. Postal: AICO Tech L.L.C-FZ, Meydan Free Zone, Dubai, UAE.