LEGAL

Privacy Policy

Effective date: July 14, 2026 · Version 1.0 · Applies to the KLNZ website and the KLNZ app

THE WHOLE THING, IN SHORT We collect what a padel app needs to work: your email, profile, level, matches, and — if you allow it — your location, to show games near you. Matches are social, so your profile and results are visible to the players you play with. We don't sell your data, and we don't run ad trackers. You can see, correct, export, or delete your data anytime.

01Who we are & what this covers

This Privacy Policy explains how [KLNZ legal entity name, S.A.] ("KLNZ", "we", "us"), a company organized under the laws of Costa Rica, collects and uses personal data when you visit the KLNZ website, join the waitlist, or use the KLNZ app (together, the "Service"). It should be read together with our Terms of Service.

We are the data controller for the personal data described here. Our contact details are in Section 14.

02Information we collect

IN SHORTWaitlist: just your email. App: your profile, level, matches, messages, and optional location. Plus the basic technical data any website receives.

You give it to us

Waitlist: your email address, when you sign up for early access on the website.
Account & profile: name, email, password, and optionally a photo, city, and your starting padel level, when you create an app account.
Match activity: matches you create or join, scores you log, and the players you play with.
Messages: what you write in match chats.
Support: anything you send us when you contact us.

Collected automatically

Location (optional, app only): your approximate or precise location, only if you grant the permission, to show matches and clubs near you. You can turn this off in your device settings and search by area instead.
Derived level: a playing-level estimate we compute from the level you chose and the results you log.
Device & usage data: IP address, device type, operating system, app version, and basic logs of how the Service is used — collected by our hosting infrastructure for security and debugging.

What we don't collect

We currently collect no payment information (the Service is free), run no advertising trackers, and use no third-party analytics on the website. If that changes, we'll update this policy first (Section 13).

03How we use your information

Run the Service: match you with games and players, show open spots, operate match chat, and keep your match history.
Waitlist & onboarding: email you your early-access invite and essential launch updates.
Improve KLNZ: understand which features work, fix bugs, and refine the leveling model.
Safety & integrity: enforce our Terms, prevent fake accounts and result manipulation, and secure the Service.
Legal: comply with legal obligations and respond to lawful requests.

We do not sell your personal data, and we don't use it for third-party advertising.

04Legal bases for processing

IN SHORTMostly: because you asked us to run the app for you. Location and marketing: only with your consent.

Processing	Legal basis
Account, profile, matches, chat, match history	Performance of our contract with you (the Terms)
Location	Your consent (device permission) — withdrawable anytime
Waitlist and non-essential emails	Your consent — unsubscribe anytime
Security logs, abuse prevention, service improvement	Our legitimate interest in running a safe, working service
Legal compliance	Legal obligation

05What other players can see

IN SHORTKLNZ is social by design. Your profile, level, and shared matches are visible to other players — that's how you find a game.

Players near you can see match listings you create or join, including your display name, photo, and level.
Match participants can see the lineup, the match chat, and confirmed results.
Confirmed results become shared history: a match you played belongs to every participant's history. If you delete your account, other participants keep their record of matches they played with you, with your identifying details removed or anonymized where feasible.

Your email address and precise location are never shown to other players.

06Sharing with service providers & others

IN SHORTA short list of infrastructure providers, clubs you interact with, and the law when it demands. Nobody else.

We share personal data only with:

Service providers that host and operate our infrastructure, bound by data processing agreements. Currently: Vercel (website hosting; receives IP addresses in server logs) and Google Fonts (font delivery on the website; receives IP addresses). The app will be distributed through the Apple App Store and Google Play, which process data under their own policies. [Add your app backend/database, email provider, and any analytics here before app launch — e.g. Supabase/Firebase, Resend, PostHog]
Clubs and organizers, who can see participants of matches published on their courts (name, photo, level — the same information other participants see).
Authorities, when the law requires it or to protect rights, safety, or the integrity of the Service.
A successor entity, if we're involved in a merger or acquisition — we'd notify you before your data becomes subject to a different policy.

07International data transfers

Our infrastructure providers store data primarily in the United States. When your data is transferred outside your country, we rely on our providers' safeguards, including standard contractual clauses where required. By using the Service you acknowledge this processing; where the law requires a stronger mechanism, we will implement it.

08How long we keep your data

Data	Kept for
Waitlist email	Until you get access, unsubscribe, or 24 months of inactivity — whichever comes first
Account & profile	While your account is active; deleted within 30 days of account deletion
Match history	While participants keep it; your identity removed on your account deletion (Section 5)
Chat messages	While the match group exists; removed with your account per the same schedule
Server & security logs	Up to 90 days
Backups	Deleted data leaves backups within 90 days on the normal rotation

09Your rights

IN SHORTSee it, fix it, export it, delete it, or object — email us and we'll act within 30 days.

Wherever you live, we give you the same rights over your personal data:

Access — get a copy of the data we hold about you;
Correction — fix inaccurate data (most profile data you can edit in the app);
Deletion — delete your account and data (Section 8 describes what happens to shared match history);
Portability — receive your data in a common, machine-readable format;
Withdraw consent — e.g. revoke location permission or unsubscribe from emails, without affecting the rest of the Service;
Object or restrict — object to processing based on legitimate interest.

To exercise any right, email us (Section 14). We respond within 30 days. We'll verify it's you before acting — usually by confirming control of your account email.

Costa Rica: these rights reflect Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data. You may also lodge a complaint with Prodhab (Agencia de Protección de Datos de los Habitantes). EEA/UK users: you have the equivalent GDPR rights and may complain to your local supervisory authority.

10Cookies & tracking

IN SHORTThe website sets no cookies today. No ad trackers, no analytics pixels.

Our website currently sets no cookies and runs no analytics or advertising trackers. The app uses only the local storage needed to keep you signed in. If we ever introduce analytics or other non-essential cookies, we will update this policy and, where required, ask for your consent first.

11Security

We protect your data with encryption in transit (HTTPS/TLS), encryption at rest on our infrastructure providers, access controls limiting who at KLNZ can access personal data, and monitoring of our systems. No system is perfectly secure — if a breach affects your personal data, we will notify you and the relevant authorities as required by law.

12Children

The Service is for adults. You must be at least 18 years old (or the age of majority where you live) to use KLNZ. We don't knowingly collect data from children; if you believe a child has provided us personal data, contact us and we will delete it.

13Changes to this policy

When our data practices change — new features, new providers, new markets — we'll update this policy. For material changes we'll give you at least 30 days' notice by email or in-app notice before they take effect. The current version and effective date are always shown at the top of this page.

14Contact

Privacy questions and rights requests: [privacy@klnz.app — replace with your real privacy email]

[KLNZ legal entity name, S.A.] · San José, Costa Rica

This policy is a draft for review and does not constitute legal advice. Have a qualified attorney review it — and confirm it matches your actual data practices — before public launch.