Privacy Policy
King Paddle Coach
This policy explains how this application handles information and how to contact us about privacy.
Information we process
King Paddle Coach stores your optional local name, playing level, training focus, goals, drill completion dates, technique checklists, match dates, optional opponent names, scores, results and tactical notes on your iPhone. Reminder settings and a cached exercise catalog are also stored locally. The app automatically creates a random installation identifier, a unique authorization secret and an encryption key in the iOS Keychain in iPhone device builds. When connected, it sends an encrypted coaching snapshot to our backend. The backend stores that encrypted snapshot, the random installation identifier, a hash of its authorization secret, revision and version numbers, and creation and update timestamps. The encryption key is not sent to the server. Public content and privacy-page requests also reach the server. Railway and network infrastructure receive connection and request metadata such as IP addresses, request time, route and response status. Temporary in-memory request identifiers and counters are used for rate limiting. Local synchronization preferences include the last server version, a hash of a pending encrypted upload, and an offline deletion flag; these contain no plaintext coaching record.
How we use information
Local records power your daily practice plan, exercise checklists, match history, goals and progress charts. Encrypted server snapshots provide backup and synchronization for the same installation while its Keychain identity and encryption key remain available. Public endpoints provide coaching exercises and tips. Authorization records, version numbers, request metadata and temporary rate-limit counters support secure access, reliability and prevention of stale data returning after deletion. Notifications remind you to practice only when you enable them. Your privacy contact email is not requested by the app and no account, advertising, analytics, marketing or outbound email feature is provided.
Service providers and sharing
The backend and its persistent SQLite storage are hosted on Railway, which processes network requests and infrastructure metadata to operate the service. Apple provides iOS system services including local notifications, device storage and Keychain. The app contains no third-party analytics, advertising or social sign-in SDKs. We do not sell coaching records or intentionally send them to marketing providers. Infrastructure operators may process operational logs as part of hosting; the application does not log coaching snapshots, authorization headers or secrets. Information may be disclosed when legally required.
Data retention
Local coaching records remain until you delete them or remove the app, subject to iOS backup and storage behavior. Keychain material may survive app removal on the same iPhone but this is not guaranteed, and it is configured not to migrate to another device. The server keeps the most recent encrypted snapshot until it is replaced or deleted; it does not intentionally keep a snapshot history. Minimal installation authorization metadata and a deletion version remain after coaching-data deletion to reject unauthorized access and stale uploads. Temporary rate-limit data is held in memory and periodically cleared. Hosting logs and any provider or device backups are subject to the applicable infrastructure retention practices; we do not promise a fixed retention period or immediate removal from provider backups.
Deleting your information
Delete All My Data in Settings clears your local coaching records, profile, goals and pending reminders and requests removal of the server snapshot. If offline, a pending deletion flag prevents upload and retries server deletion when a connection returns. The backend clears the stored snapshot and revision and checkpoints its database journal; it retains the installation identifier, authorization-secret hash, version and timestamps for access control and to prevent stale data from returning. Removing the app alone does not send a server deletion request. Provider or device backups may retain copies until their normal lifecycle completes. If the installation key is lost, the app cannot authenticate to recover or delete that installation through the normal API. Contact greer.fane@icloud.com with privacy questions; do not send secrets or encryption keys.
Permissions and your choices
Notifications are optional. Permission is requested only when you enable a practice reminder. Notification text and scheduling are handled locally through iOS, without an advertising or remote-push service. You can turn reminders off in the app or withdraw notification permission in iPhone Settings. The app does not request camera, photo library, microphone, contacts or location access and does not embed geographic maps. Network access is used for backup, public coaching content and viewing the privacy page.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of personal information and to contact a data protection authority. You can inspect and edit your profile, goals and matches in the app and use its deletion control. Send privacy-related questions or rights requests to greer.fane@icloud.com. We may need enough information to understand and validate a request, and we cannot decrypt your coaching backup or promise to identify an installation after its secret has been lost. No account or email registration is required.
Security
The client uses HTTPS for deployed API requests, a separate random authorization secret per installation, and AES-GCM authenticated encryption for coaching snapshots. Secrets and the encryption key are held in the iOS Keychain; the server stores a hash of the authorization secret and checks authorization for each private request. Local records use iOS file protection and atomic writes. Server version checks prevent conflicting uploads and stale snapshot resurrection after deletion. No system can guarantee absolute security, and losing the installation key prevents backup recovery. During unsigned Simulator testing, when Keychain is unavailable, installation credentials use a local file with restrictive permissions and exclusion from backup. This fallback is compiled out of iPhone device builds, which use Keychain.
Children’s privacy
King Paddle Coach is intended for adult recreational and competitive padel players and is not directed to children under 13. It does not ask for age or knowingly seek information from children under 13. If you believe a child has provided information through the service, contact greer.fane@icloud.com so the circumstances can be reviewed. Coaching guidance is general practice information and does not replace age-appropriate supervision or professional instruction.
Changes to this policy
This policy may be updated when the app or its processing practices change. The current policy is available from Settings and at this public URL, with its effective date shown on the page. Review it periodically. Material changes will be described in an updated policy and, when appropriate, in the app.