ClubPad — clubb.ie
The data controller for data processed through the ClubPad platform is:
Travis George trading as ClubPad, Ireland.
Contact: privacy@clubb.ie
When you use ClubPad, we collect the following categories of personal data:
When (and only when) you opt in via the "Help Improve ClubPad" toggle in your Profile, the app sends diagnostics and usage analytics to Firebase Crashlytics, Firebase Performance Monitoring and Google Analytics for Firebase:
These reports are not linked to your name or ClubPad account; usage analytics is pseudonymous (a per-install identifier, not your identity). You can disable diagnostic and usage data collection at any time via your Profile settings. See Section 5 for the processors involved.
We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
Processing necessary to provide the ClubPad service to you, including: account creation and management, session bookings, payment tracking, club membership management, and communications directly related to your use of the platform.
Processing necessary for our legitimate interests (or those of the club), including: club administration and session management, sending relevant notifications about sessions and bookings, sending occasional service and product updates about ClubPad from us as the developer (not third-party marketing), which you can opt out of at any time (see Your Rights), maintaining platform security, preventing abuse, and improving the service. We balance these interests against your rights and freedoms.
Where you have given explicit consent. A single in-app toggle ("Help Improve ClubPad", in your Profile settings) governs four consent-gated activities:
You may withdraw consent at any time via your Profile settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
| Data Category | Purpose |
|---|---|
| Account data | Authentication, account identification, age verification |
| Profile data | Displaying your profile to other club members, session balancing, skill-appropriate pairings |
| Club membership data | Managing your membership, role-based access controls, approval workflows |
| Booking data | Processing session bookings, managing waitlists, payment reconciliation |
| Session and game data | Recording match results, displaying history, skill progression tracking (if opted in) |
| Social data | Displaying comments and reactions to club members, photo galleries |
| Communication data | Responding to feedback, diagnosing and resolving bugs. If you contact support, the content of your request may be shown to an AI assistant to help our support team answer it — see Section 5. |
| Notification data | Delivering push notifications and emails about sessions, bookings, club updates, and occasional ClubPad service and product updates (opt-out available) |
| Analytics preference | Respecting your choice on analytics processing |
| Diagnostic & usage data | Diagnosing crashes and errors, monitoring app performance and reliability, and understanding aggregate feature usage to improve the app. Collected only with your consent; never used for advertising or profiling. |
| My Game Plus analysis | Producing the written interpretations of your own match history that the My Game Plus subscription provides — session reports, fortnightly insights and month wrap-ups. Only for subscribers who have separately consented to this analysis; see the subsection below. |
| Subscription data | Recording whether your My Game Plus subscription is active, so the app can show you what you have paid for and stop showing it when the subscription ends |
| Invite data | Managing club invitations and tracking invite usage |
My Game Plus is an optional paid subscription that produces written interpretations of your own pickleball history — a report on each session you play, insights across your sessions every two weeks, and a monthly wrap-up. This subsection describes that processing specifically, because it is by far the largest use we make of an external language-model provider. It is not the only one: ClubPad also asks the same provider to write the one-line greeting on your dashboard, using your first name and whether you have a session coming up. That is listed in the processor table in Section 5.
This analysis happens only if you both subscribe and give a separate, explicit consent to it. Consent to the analysis is asked for on its own and is not bundled into accepting this policy or into creating an account. You can withdraw it at any time in your My Game settings. If you withdraw it, no further analysis is carried out; interpretations already produced remain readable to you, because you paid for them. Withdrawing consent does not cancel your subscription — you cancel that through the app store — and cancelling your subscription does not delete interpretations already produced.
Only your own recorded pickleball history, across every club you belong to: the games you played, their results and scores where your club records them, the order you played them in, the session format, your rank and any awards from the session, and the clubs and dates involved. It also uses the rating information your club holds for you — the skill rating you set for yourself, any rating a coach at your club has recorded for you, and your DUPR rating if you have linked a DUPR account — along with the rest of the profile information you have entered yourself, such as your preferred playing style. It also uses the ratings of the partners and opponents you played with, sent as unnamed numbers so the report can describe how evenly matched each game really was — see “What happens to other members’ data” below for how that is handled.
It does not use your contact details, your payment details, your location, your device information, or any diagnostics or usage data. It is never used for advertising, for credit or eligibility decisions, or to build a profile of you for anyone other than you.
The interpretations you read may refer to the people you played with and against — for example, that a partnership of yours has a strong record. This is unavoidable, because pickleball is played in pairs against pairs, and it is what makes the feature useful.
No other member's name, email address, account identifier or contact detail is ever sent to the language-model provider. Other players reach the provider only as anonymous position labels — the provider is told the equivalent of "partner 1" or "opponent 2", never who that person is. Their first name is filled in on your device, from data your club already shows you.
Alongside those labels, the provider also receives the rating of each partner and opponent you played with, as an unnamed number attached to the anonymous label and nothing else. This is used only to help interpret your own results — for example, how evenly matched a game really was.
Another member's rating is never shown, as a number, to anyone but that player themselves. In the interpretation you read, other players are described only by relative strength — "a clearly stronger pair", "marginally above your usual level" — never by a figure, and never as a numeric gap between your rating and theirs, which would reveal their rating by subtraction.
If a member you have played with deletes their account, their name is replaced with “Former Member” in any interpretation that referred to them. The record of the games remains, because those games happened and are part of your history too.
The derived summary described above is sent to Anthropic, which operates the language model that writes the interpretation. Anthropic acts as our processor for this purpose, processes the summary only to produce that output, and does not use it to train its models. Anthropic is based in the United States; see Sections 5 and 6.
Your month wrap-up can be exported as an image and shared outside ClubPad. This only ever happens when you tap Share. That image may contain the first names of members you played with, and you can turn those names off before sharing. Once you have shared an image, it is outside ClubPad and we cannot recall or delete it.
This feature produces written commentary for you to read. It is not automated decision-making that produces legal effects or otherwise significantly affects you within the meaning of Article 22 of the GDPR: it does not determine your access to anything, your standing in a club, your eligibility for sessions, or any price you pay.
We use the following third-party services to operate ClubPad. Each processes only the data necessary for their function:
| Processor | Service | Location | Data Processed |
|---|---|---|---|
| Google Firebase | Firestore database, Authentication, Cloud Storage | EU (europe-west1) | All account and application data |
| Resend | Transactional and service-update email delivery | US | Email address, name, role, country |
| Vercel | Web application hosting | Global CDN | Web traffic, IP address (not stored) |
| Expo / EAS | Push notification delivery | US | Push notification tokens, notification content |
| Apple (APNs) | Push notifications to iOS devices | US | Push tokens, notification payloads |
| Google (FCM) | Push notifications to Android and web | US | Push tokens, notification payloads |
| Google Ireland Limited (Firebase Crashlytics) | Crash reporting (native app only) | US (sub-processor; data-receiving entity: Google Ireland Limited, IE) | Device identifier, OS version, app version, stack traces, custom keys — only when you have enabled data sharing in your profile settings. Legal basis: explicit consent (Art. 6(1)(a) GDPR). |
| Google Ireland Limited (Firebase Performance Monitoring) | App performance metrics (native app only) | US (sub-processor; data-receiving entity: Google Ireland Limited, IE) | App start time, screen render times, custom traces, and automatic network-request metadata (request URL, HTTP method, response code, request/response payload sizes, response time) — only when you have enabled data sharing in your profile settings. Legal basis: explicit consent (Art. 6(1)(a) GDPR). |
| Google Ireland Limited (Google Analytics for Firebase) | Usage analytics (native app only) | US (sub-processor; data-receiving entity: Google Ireland Limited, IE) | Pseudonymous app-instance identifier, screen views, session counts, app/OS version — only when you have enabled data sharing in your profile settings. Legal basis: explicit consent (Art. 6(1)(a) GDPR). |
| Anthropic | Language model that writes My Game Plus interpretations | US | A derived summary of your own match history: counts, records, scores, dates, clubs, formats, anonymous position labels for other players, and the rating of each labelled player as an unnamed number. No name, email address, account identifier or contact detail of any other member. The My Game Plus analysis is processed only for subscribers who have consented to it (legal basis: explicit consent, Art. 6(1)(a) GDPR). Separately, your first name and whether you have a session coming up are sent to generate the short greeting line on your dashboard (legal basis: legitimate interests, Art. 6(1)(f) GDPR). Neither is used to train models. |
| RevenueCat | In-app subscription management and purchase validation | US (no EU data residency available) | A pseudonymous app-user identifier, the app store's purchase receipt and subscription status, and the country and device platform reported by the store. We do not send RevenueCat your name or email address. Card and payment details are handled entirely by Apple or Google and never reach ClubPad or RevenueCat. Processed only if you purchase a subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). |
| SpaceX Limited | AI assistant ("GrokBot") used to help handle customer support requests | US | The content of your support request, plus the minimal account context our support team can already see through ClubPad's read-only support console: your display name, email address, club membership and role/status, and booking records (including payment status). No password, no card or payment details (ClubPad never holds these), no message content from your clubs, and no photos. Processed only if you contact support. SpaceX Limited acts as our processor solely to help answer your request and does not use it to train models. Legal basis: legitimate interest, in providing customer support (Art. 6(1)(f) GDPR). |
Your primary data is stored in Google Firebase within the EU (europe-west1 region). However, some third-party processors are based in the United States (Resend, Expo/EAS, Apple, and Google's push notification services). If — and only if — you opt in to diagnostics and usage data (see Section 2), Firebase Crashlytics, Firebase Performance Monitoring and Google Analytics for Firebase also process that data in the United States as sub-processors.
Three further processors operate outside the EU, and each applies only if you choose the relevant optional feature or contact support:
These transfers are protected by appropriate safeguards including:
We ensure that all international transfers of personal data comply with Chapter V of the GDPR.
Club organisers (admins) and coaches have elevated access within their club as part of managing club operations. They can view:
This access is necessary for session planning, skill-appropriate pairings, and club administration. You have the right to request access to any coach or organiser notes held about you — see Section 10: Your Rights.
Your data is stored in Google Cloud Firestore and Google Cloud Storage, both located in the EU (europe-west1 region, Belgium). We implement the following security measures:
Your personal data is retained for as long as your account remains active on the platform.
If you leave a club, your membership data is preserved for 30 days so you can rejoin without losing your history. After 30 days, club-specific data may be deleted by a club administrator.
When you delete your account, the following occurs immediately:
Two categories of operational records are not automatically removed by the in-app delete flow today and so may persist after account deletion until they are removed by another mechanism: (1) push and email delivery event logs — retained for diagnosing notification problems and reconciling email-service usage — which are not deleted by the account-deletion cascade and persist until you request manual removal; and (2) operational and security logs stored in Google Cloud Logging, which roll off automatically under the 90-day retention window described below, with the limited exceptions noted there (some audit records may be preserved longer where required by law). To request manual removal of the delivery event records during or after account deletion, contact privacy@clubb.ie. We plan to add automatic cleanup of these records to the in-app delete flow in a future privacy enhancement.
Session reports are retained for as long as your account is active, so that your archive of past reports stays available to you. Fortnightly insights are not archived: each one replaces the previous one of its kind, so only the current interpretation exists at any time. Month wrap-ups are retained for as long as your account is active. All of them are deleted when you delete your account.
Anthropic does not retain the summary after answering, and does not use it to train its models. We do keep part of it: each interpretation stores the specific facts it was written from, so that the figures shown with it always match what it says. Those stored facts carry no other member’s name, email address, account identifier or contact detail. They can include another player’s rating as an unnamed number, on the same terms described above — attached to an anonymous label, never shown to anyone but that player, and never printed as a number in the interpretation itself. They last as long as the interpretation does and are removed with it.
If you withdraw your consent to My Game Plus analysis, no further summaries are sent, and interpretations already produced remain readable to you. They are removed when you delete your account.
When a member is removed from a club by an administrator, a one-way cryptographic hash of their email address is retained. This is used solely to prevent the removed individual from re-joining the club. The hash cannot be reversed to recover the original email address.
If you opt in to diagnostics and usage data, the retention periods below are set by Google and apply only while — and after — you have that setting enabled. Disabling the "Help Improve ClubPad" toggle stops new collection; data already sent ages out on these schedules:
We retain operational and security logs in Google Cloud Logging — including server-side request logs, Cloud Function execution logs, and Cloud Audit Log entries — for up to 90 days for service operation, security monitoring, fraud prevention, and dispute resolution. After this period, these logs are automatically deleted. Log entries may include your account ID, device type and operating system version, IP address, and the timestamps of actions you took in the app.
Where required by law or by our legitimate interest in defending against legal claims, individual audit records (for example, administrator actions, account deletions, role changes) may be preserved for longer than 90 days. Push and email delivery event records (covered in the "Delete Account" section above) are not automatically purged when you delete your account; they remain until you submit a manual removal request to privacy@clubb.ie.
This processing is based on our legitimate interest under GDPR Article 6(1)(f) (Recital 49 — network and information security).
Under GDPR Articles 15–22, you have the following rights regarding your personal data:
We will respond to all data rights requests within 30 days, as required by the GDPR.
We use browser localStorage and IndexedDB for authentication session persistence only. These are necessary for the platform to function and keep you signed in.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No data is shared with advertising networks or data brokers.
ClubPad is not intended for anyone under 16 years of age. We do not knowingly collect personal data from children under 16. Users must confirm that they are at least 16 years old at sign-up.
If we become aware that we have collected data from a person under 16 without appropriate consent, we will delete that data promptly. If you believe a child under 16 has created an account, please contact privacy@clubb.ie.
We may update this Privacy Policy from time to time. When we make material changes, we will:
We encourage you to review this policy periodically. Continued use of ClubPad after changes have been notified constitutes acceptance of the updated policy.
For any privacy-related questions, data access requests, or concerns about how your data is handled:
Travis George trading as ClubPad
Email: privacy@clubb.ie
Website: clubb.ie
Version 2.7 — Last updated: August 2026
← Back to ClubPad