Privacy Policy

Effective April 4, 2026  ·  Last updated April 4, 2026

Club Social, LLC ("we," "our," or "us") built Clubhouse as a commercial app. This Privacy Policy explains how we collect, use, and protect your information when you use Clubhouse.

By using Clubhouse, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the app.

1. Information We Collect

Information You Provide Directly

• Account information: When you create an account, we collect your email address, first name, and last name. You may optionally provide your phone number, date of birth, gender, city, country, bio, and profile photo.
• Skill assessment: If you complete a skill assessment, we collect your self-reported skill levels across several padel categories to calculate your player rating.
• Chat messages: If you participate in league chat, we collect message content and sender information. Chat messages are automatically deleted after 90 days.
• Support requests: If you contact us for support, we collect your email address and the content of your message.

Information Collected Automatically

• Location data: Clubhouse collects precise location data to detect when you arrive at a padel club and notify staff of your arrival. Location data is collected in the background only with your explicit "Always" permission. You may use the app with "When In Use" permission (for nearby club discovery) or deny location access entirely.
• Device information: We collect your device identifier (identifierForVendor) to register your device for push notifications. We also collect device model, OS version, and app version for crash diagnostics.
• Diagnostic data: If errors occur, we collect error logs including error type, context, and device state. Error and warning logs are sent to our servers for monitoring. Debug logs remain on your device only.
• Booking and match data: We record your court bookings, match participation, match scores, and results to provide scheduling, rating, and leaderboard features.
• Player ratings: We calculate and store skill ratings based on your match results using a Glicko-2 rating algorithm. Rating history is retained for 13 months.

Information We Do NOT Collect

• We do not use advertising identifiers (IDFA).
• We do not track you across other apps or websites.
• We do not access your contacts, photos, camera, microphone, or health data.
• We do not use cookies or web tracking technologies.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain Clubhouse's core functionality (booking, scheduling, matchmaking, leagues, tournaments)
• Calculate and update player skill ratings and leaderboards
• Send push notifications about bookings, match updates, league messages, and arrival alerts
• Detect your arrival at clubs via geofencing to notify staff and enhance your check-in experience
• Generate player recommendations and engagement nudges based on your activity and skill level
• Provide club owners with aggregated analytics about court utilization and player activity
• Fix bugs, resolve technical issues, and improve the app
• Process payments through Stripe for court bookings and memberships

We do NOT use your information to:

• Sell your data to third parties
• Build advertising profiles
• Serve targeted advertisements
• Make automated decisions that significantly affect you

3. How We Share Your Information

We do not sell, rent, or trade your personal information.

We may share information in the following limited circumstances:

• Other players: Your first name, last name, skill rating, and match results are visible to other players in leaderboards, leagues, tournaments, and match lobbies. Your email, phone number, date of birth, and precise location are never shared with other players.
• Club owners and staff: Club owners and staff at clubs you book with can see your name, booking details, and arrival status. Club staff who are your instructors can see your lesson history.
• Service providers: We use third-party services to help operate Clubhouse (see Section 4). These providers only access data necessary to perform their services.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Safety: We may disclose information to protect the safety, rights, or property of our users or the public.
• Business transfers: If Clubhouse is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Third-Party Services

Clubhouse uses the following third-party services:

Service	Purpose	Privacy Policy
Amazon Web Services (AWS)	Cloud infrastructure, data storage, authentication	AWS Privacy Policy
Amazon Cognito	User authentication and account management	AWS Privacy Policy
Stripe	Payment processing for court bookings and memberships	Stripe Privacy Policy
Apple Push Notification Service (APNs)	Push notifications delivery	Apple Privacy Policy

Payment data: We do not store your credit card number, CVV, or full payment card details. All payment processing is handled by Stripe, which is PCI DSS Level 1 certified. We store only payment transaction metadata (amount, status, timestamp, and Stripe reference IDs).

5. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request (available in Settings > Account > Delete Account).
• Booking history: Retained while your account is active. Deleted upon account deletion.
• Match results and ratings: Rating history is retained for 13 months on a rolling basis. Deleted upon account deletion.
• Payment transactions: Anonymized (not deleted) upon account deletion for financial record-keeping and legal compliance. Original user identity is removed.
• Chat messages: Automatically deleted after 90 days.
• Notification history: Automatically deleted after 90 days.
• Arrival logs: Automatically deleted after 90 days.
• Push notification tokens: Deleted upon account deletion or device unregistration.
• Diagnostic logs: Retained for up to 30 days, then deleted.

6. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) for all network communications
• Encryption at rest (AES-256) for all data stored in our databases
• Secure token storage using the iOS Keychain with hardware-backed protection
• Biometric authentication (Face ID / Touch ID) option for app access
• Role-based access controls limiting data access by user role (Player, Club Owner, Staff, Admin)
• AWS managed security controls including IAM policies, VPC isolation, and audit logging
• Stripe webhook signature verification to prevent payment tampering

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take commercially reasonable steps to protect your data.

7. Your Rights

You have the following rights regarding your personal information:

• Access: View your profile, booking history, match history, and ratings within the app.
• Correction: Update your profile information at any time through the app.
• Deletion: Delete your account and all associated data through Settings > Account > Delete Account. This action is permanent and cannot be undone.
• Withdraw consent: Revoke location permissions, notification permissions, or biometric authentication at any time through your device settings.

To exercise any additional rights or for requests we cannot fulfill through the app, contact us at hi@clubhousesports.ai. We will respond within 30 days.

For European Union Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Data controller: Club Social, LLC, hi@clubhousesports.ai
• Lawful basis for processing: We process your data based on: performance of a contract (providing the booking, matchmaking, and rating services you requested); your consent (location tracking, push notifications — which you can withdraw at any time); and legitimate interests (improving our service, security, fraud prevention, aggregated analytics).
• Data subject rights: In addition to the rights above, you have the right to request a portable copy of your data, restrict processing of your data, object to processing based on legitimate interests, and lodge a complaint with your local Data Protection Authority.
• Data transfers: Your data is stored on AWS servers in the United States (us-east-1). We rely on AWS's Standard Contractual Clauses for EEA-to-US data transfers.
• Data retention: We retain personal data only as long as necessary for the purposes outlined in Section 5.

For California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information via the in-app account deletion feature or by contacting us.
• Right to opt-out: We do not sell or share your personal information for cross-context behavioral advertising.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, use the in-app deletion feature or contact us at hi@clubhousesports.ai.

8. Children's Privacy

Clubhouse is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hi@clubhousesports.ai.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify you through the app via push notification (for significant changes)

Your continued use of Clubhouse after changes are posted constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: