Privacy Policy

1. Who we are

The Hong Kong Pickleball League ("HKPL", "we", "us") is the data controller for personal information collected through this platform. Contact: hello@hkpl.com.hk.

2. What we collect

• Account data: name, email, phone, gender, date of birth (optional age bracket), preferred language
• Pickleball profile: DUPR ID + ratings, team membership, match history, photos
• Activity: login times, device type, IP address (for security)
• User-submitted: bug reports, feedback voice notes, chat messages, scoresheet photos

3. How we use it

To run league operations: register players, schedule matches, calculate standings, submit ratings to DUPR, send notifications, moderate chat, and provide support.

4. Who we share it with

• DUPR (Dynamic Universal Pickleball Rating): we submit your match results to DUPR's platform if you have consented during signup. This is a cross-border transfer (DUPR's servers are outside Hong Kong).
• Google AI (Gemini): scoresheet photos and feedback voice notes may be sent to Google's AI APIs in the United States for transcription / OCR. We do not share your contact details with Google.
• Apple / Google / WeChat: if you sign in via these providers, they authenticate you and return a token; we do not share data back.
• We never sell your data.

5. Your rights (PDPO)

• Access: request a copy of your data via hello@hkpl.com.hk. We will respond within 40 days per PDPO §19.
• Correction: update your profile at any time from the app, or write to us for help.
• Deletion: use Account → Delete Account in the app. Some data (match history, audit trail) is retained for league records; PII is scrubbed.
• Complaint: contact the Privacy Commissioner for Personal Data, Hong Kong (PCPD) at www.pcpd.org.hk.

6. Cookies + tracking

We use a single session cookie (hkpl_sid) to keep you logged in. No third-party analytics or advertising cookies.

7. Data retention

Account data: kept while your account is active. Match history: kept for the duration of the league's records (typically 7 years for sport audit purposes). Audit logs: kept up to 3 years, then pruned.

8. Children

Players under 18 require parental consent and a signed indemnity per HKPL rulebook §1.3(8). The app declines registration for users under 13.

9. Security

We use HTTPS, secure session cookies, bcrypt-hashed match codes, rate-limited authentication, and an audit log of all sensitive admin actions.

10. Changes to this policy

We will notify you in the app + by email if this policy materially changes.

Optional website analytics

Only after you allow analytics do we load Google Analytics to measure website use. It may use analytics cookies and Google processes the browsing data. We do not intentionally send member names, email addresses, telephone numbers or URL query parameters. Use Analytics settings at the bottom of a page to reject or withdraw your choice; sign-in remains available. Google explains its data processing at: Google Privacy & Terms.