Privacy Policy

1. Who we are

The Hong Kong Pickleball League ("HKPL", "we", "us") is the data controller for personal information collected through this platform. Contact: hello@hkpl.com.hk.

2. What we collect

• Account data: name, email, phone, gender, date of birth (optional age bracket), preferred language
• Pickleball profile: DUPR ID + ratings, team membership, match history, photos
• Activity: login times, device type, IP address (for security)
• User-submitted: bug reports, feedback voice notes, chat messages, scoresheet photos

3. How we use it

To run league operations: register players, schedule matches, calculate standings, submit ratings to DUPR, send notifications, moderate chat, and provide support.

4. Who we share it with

• DUPR (Dynamic Universal Pickleball Rating): we submit your match results to DUPR's platform if you have consented during signup. This is a cross-border transfer (DUPR's servers are outside Hong Kong).
• Google AI (Gemini): scoresheet photos and feedback voice notes may be sent to Google's AI APIs in the United States for transcription / OCR. We do not share your contact details with Google.
• Apple / Google / WeChat: if you sign in via these providers, they authenticate you and return a token; we do not share data back.
• We never sell your data.

5. Your rights (PDPO)

• Access: request a copy of your data via hello@hkpl.com.hk. We will respond within 40 days per PDPO §19.
• Correction: update your profile at any time from the app, or write to us for help.
• Deletion: use Account → Delete Account in the app. Some data (match history, audit trail) is retained for league records; PII is scrubbed.
• Complaint: contact the Privacy Commissioner for Personal Data, Hong Kong (PCPD) at www.pcpd.org.hk.

6. Cookies + tracking

We use a single session cookie (hkpl_sid) to keep you logged in. No third-party analytics or advertising cookies.

7. Data retention

Account data: kept while your account is active. Match history: kept for the duration of the league's records (typically 7 years for sport audit purposes). Audit logs: kept up to 3 years, then pruned.

8. Children

Players under 18 require parental consent and a signed indemnity per HKPL rulebook §1.3-1.4. The app declines registration for users under 13.

9. Security

We use HTTPS, secure session cookies, bcrypt-hashed match codes, rate-limited authentication, and an audit log of all sensitive admin actions.

10. Changes to this policy

We will notify you in the app + by email if this policy materially changes.