Privacy policy
Last updated: 8 November 2026
This policy explains what personal data the BuddySmash app (iOS and Android) and the service behind it process, why, and what rights you have. BuddySmash is a hobby app for organising sports groups (padel, tennis, beach volleyball and the like); it has no advertising, no tracking and sells no data.
Who is responsible
Hendrik Heyer
c/o STARTPLATZ, Im Mediapark 5, 50670 Köln, Germany
Email: support@buddysmash.com
What we process
- Account: your name, email address and a hashed password (we never see the password itself).
- Profile (optional): profile picture, short bio, avatar colour and the self-rated skill values you enter.
- Groups and games: which groups you belong to and your role, matches and abos you create or join, waitlist places, set results, payments ticked off, Man-of-the-Match votes, kudos/blame you give or receive and their notes, late cancellations, and reports you file.
- Technical data: when you last used the app, and — in our web server logs — IP address, time and requested address. Logs are deleted after 14 days.
- Email: when you reset your password we email you a one-time code. If you write to us, we use your address and message to answer you.
We do not use analytics or advertising SDKs, do not track you across apps or websites, and do not access your contacts, location, camera or microphone. If you pick a profile picture, the app reads only the photo you choose.
Why (legal basis)
We process this data to provide the service you signed up for — your account, your groups and their statistics (Art. 6(1)(b) GDPR) — and to keep it secure and stop abuse, e.g. reviewing reports and rate-limiting sign-in attempts (Art. 6(1)(f) GDPR, legitimate interest in a safe service).
Who can see it
Your name, picture, bio, skill values and game data are visible to the members of the groups you're in — not to the public and not to other groups. Your email address is visible only to you. Group admins can remove members.
Processors
- Hosting: Hetzner Online GmbH, Germany — our servers and database are in the EU.
- Email delivery: Brevo (formerly Sendinblue), France, sends the password-reset codes and processes your email address and the message for that purpose only.
- Email forwarding: ImprovMX Inc., USA, forwards mail sent to support@buddysmash.com (your messages to us and the app's notifications about reports) to our inbox.
- App stores: Apple and Google deliver the app and may collect data under their own policies.
Apart from that forwarding, we don't transfer your data outside the EU/EEA ourselves.
How long we keep it
As long as you have an account. When you delete your account (in the app: Profile → Settings → Delete account, or see this page), your name, email, password, picture, bio and skill values are deleted immediately and you leave all groups. Set results and attendance you were part of stay in your groups' history in anonymised form (“Deleted player”), so other players' statistics remain correct. Backups are overwritten within 30 days.
Your rights
You can ask us for access to your data, to correct or delete it, to restrict or object to processing, and for a copy in a portable format (Art. 15–21 GDPR). Most of this you can do directly in the app. You also have the right to complain to a data-protection supervisory authority.
Children
BuddySmash is not meant for children under 16, and we don't knowingly collect their data.
Changes
If this policy changes we'll update the date above; for significant changes we'll tell you in the app.