Privacy Policy

Pickld is operated by Josh Rapaport, registered with the Philippine Department of Trade and Industry (DTI) as a sole proprietorship. We are the personal information controller for all data processed through the Pickld platform, including the web application at pickld.ph and any related services.

Data Protection Officer / Contact:
Email: admin@getpickld.app
Address: Metro Manila, Philippines

We collect the following categories of personal information:

• Identity information: Full name, display name, date of birth, gender, profile photo
• Contact information: Email address, phone number
• Location information: City, region (Philippines), home province/state
• Platform activity: Match results, PPR ratings, tournament registrations, court bookings, partner requests, social interactions on the platform
• Payment references: We store only the last four digits of a card, the payment method brand, and a transaction reference number. We do not store full card numbers, CVV codes, or bank account credentials. All payment processing is handled by PayMongo Inc., our licensed payment partner.
• Device and session data: IP address, browser type, device type, session duration, and pages visited, collected automatically when you use the platform
• Communications: Messages you send through the platform's messaging features, support requests submitted to us

We process your personal information for the following purposes:

• Account management: Creating and maintaining your Pickld account, authenticating your identity
• PPR Ratings: Calculating your Philippine Pickleball Rating based on verified match results
• Tournament management: Processing tournament registrations, generating brackets, communicating event updates
• Court bookings: Processing and confirming court reservations, coordinating with court managers
• Payments: Processing booking and tournament entry fees through PayMongo
• Platform communications: Sending transactional notifications (booking confirmations, result verifications, rating updates)
• Safety and fraud prevention: Detecting and preventing unauthorized access, fraudulent transactions, and misuse of the platform
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve features and performance

Legal basis for processing: We process your data on the basis of your consent (where provided), the performance of a contract (fulfilling your bookings and tournament registrations), our legitimate interests in operating a safe and functional platform, and compliance with applicable law.

We do not sell your personal information to third parties. We share your data only with:

• Court managers and tournament organisers: When you make a booking or register for a tournament, we share relevant booking details (your name, contact, booking reference) with the relevant court manager or organiser.
• Other players: Your display name, PPR rating, and match history are visible to other registered players on the platform. Your full contact details are never shared with other players unless you choose to share them.
• PayMongo Inc.: For payment processing. PayMongo is a BSP-regulated payment processor licensed to operate in the Philippines.
• Supabase Inc.: Our database and authentication infrastructure provider. Data is hosted on servers located in the United States. Supabase is SOC 2 Type II certified.
• Anthropic PBC: Certain AI-powered features (such as the Erne chat assistant) use Anthropic's API. Conversation data is processed by Anthropic in accordance with their privacy policy. We do not send personally identifiable information to Anthropic APIs.
• hCaptcha: Our bot prevention provider. hCaptcha processes your IP address and browser signals during the login process.
• Legal authorities: We may disclose information when required by Philippine law, court order, or government regulation, including the National Privacy Commission (NPC).

Some of our service providers (Supabase, Anthropic, hCaptcha) are based in the United States. By using Pickld, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines. We ensure that such transfers are subject to appropriate safeguards, including standard contractual clauses and service provider data processing agreements.

We retain your personal information for the following periods:

• Account data: Until you request deletion of your account, after which we anonymise or delete your data within 30 days, except where retention is required by law.
• Match results and PPR history: Retained indefinitely as part of the official Philippine Pickleball Rating system. Match results form part of the public competitive record.
• Payment records: Retained for 7 years in compliance with Philippine Bureau of Internal Revenue (BIR) requirements for financial record-keeping.
• Session and device data: Retained for 90 days, then automatically deleted.
• Messages: Retained while your account is active. Deleted when you close your account, subject to a 30-day grace period.

As a data subject under RA 10173, you have the following rights:

• Right to be informed: You have the right to know how your data is being collected and processed, which this policy describes.
• Right to access: You may request a copy of the personal information we hold about you.
• Right to correction: You may update or correct inaccurate information through your Account Settings page, or by contacting us.
• Right to erasure (Right to be Forgotten): You may request deletion of your account and associated personal data. We will process this within 30 days, subject to retention obligations above.
• Right to data portability: You may request an export of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your data for direct marketing or where we rely on legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.

To exercise any of these rights, email us at admin@getpickld.app. We will respond within 15 business days.

Pickld uses the following types of cookies and similar technologies:

• Essential cookies: Authentication session cookies set by Supabase to keep you logged in. These are strictly necessary for the platform to function.
• Security cookies: hCaptcha sets cookies during the login process to distinguish humans from automated bots.
• Analytics: We use Vercel Analytics (privacy-first, no cookies) and PostHog for product analytics. PostHog may set a cookie to identify your session across visits.

You can manage your cookie preferences through the consent banner shown on your first visit, or by clearing your browser cookies. Declining optional cookies will not prevent you from using the platform.

We implement appropriate technical and organisational measures to protect your personal information, including:

• All data in transit is encrypted using TLS 1.2 or higher
• Database access is controlled by Row Level Security (RLS) policies — you can only access your own data
• Authentication uses one-time magic links, eliminating password-related vulnerabilities
• Payment data is tokenised by PayMongo and never touches our servers in raw form
• Regular automated backups with Point-in-Time Recovery

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the National Privacy Commission within 72 hours of becoming aware, and notify affected data subjects within a reasonable time, in compliance with RA 10173.

Pickld is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at admin@getpickld.app.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the "Last updated" date at the top of this page. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

For any questions about this Privacy Policy or to exercise your data subject rights: