Privacy Policy

1. Introduction

The Bold Apps, LLC ("we", "us", "our") operates Ace, a padel and tennis platform that helps players find matches, track ratings, join communities, and connect with other players through web and mobile apps. This Privacy Policy explains what data we handle when you download, install, access, or use Ace, and how we collect, use, share, and protect that data.

This policy applies to all visitors and users of the Ace website and mobile apps, regardless of location. It is updated from time to time and supersedes any prior version. By using Ace, you acknowledge the practices described here.

2. Data We Collect

We collect the following categories of data:

• Account info: name, email, phone number (optional), profile photo, gender, country, date of birth, and password hash.
• Profile and activity: padel or tennis level, match history, scores, ratings, win/loss record, communities joined, posts, comments, reactions, achievements, and follow relationships.
• Content: photos, videos, text posts, comments, score entries, and messages you upload or send through Ace.
• Device and usage: device model, operating system version, app version, device language, IP address (truncated), session timestamps, screens visited, features used, crash reports, and performance metrics.
• Location: approximate (city-level) location to surface nearby matches, players, and venues. Precise location is collected only if you grant explicit permission.
• Identifiers: device ID, advertising ID (where permitted), push token, FCM/APNs token, OneSignal player ID, AppsFlyer ID, Meta install ID, and Apple/Google sign-in IDs.
• Communication: support emails, in-app messages, feedback submissions, and chat with us.
• Payment data (where applicable): processed by Apple, Google, or Stripe. We receive transaction confirmations and metadata, not your full card or banking details.

3. Public Profile and Public Data

Important: by creating an Ace account, certain data is public by design. Your public profile and competitive data are visible to all Ace players, to anyone with a share link, and may be indexed by search engines or surfaced in public rankings, leaderboards, marketing materials, social media, or partner integrations.

Public data includes:

• Display name and profile photo
• Country and approximate region
• Padel/tennis level and rating
• Match history with scores, opponents, and dates
• Win/loss record and achievements
• Communities joined, posts, comments, and reactions
• Follower and following relationships

You cannot opt out of the public listing of core competitive data (name, level, results, ratings) while keeping an active account. Deleting your account is the way to remove this data going forward, subject to the retention rules below.

4. In-App Messaging

Ace provides in-app messaging so players can coordinate matches, communities, and events. Messages are stored on Ace servers so we can deliver them and so they are accessible to the sender, the recipient(s), and Ace for moderation, abuse review, safety, and legal compliance.

Ace is not responsible for the content of communications between players. You contact other players at your own risk. If you experience harassment, abuse, spam, or any inappropriate content, use the in-app reporting tools. Reports are reviewed within 24 hours and may result in content removal or account action.

5. How We Use Your Data

We use the data described above to:

• Provide, operate, and maintain the Ace app and website
• Authenticate users and protect accounts from unauthorized access
• Create and maintain public profiles, ratings, leaderboards, and rankings
• Power match-finding, player recommendations, and personalized suggestions based on your activity, level, and location
• Send transactional messages (push, email, in-app) about matches, events, communities, and account activity
• Send marketing and promotional communications, with opt-out where required
• Measure product performance, analyze usage patterns, and improve features
• Deliver personalized advertising and measure ad effectiveness, subject to consent where required by law
• Detect, prevent, and respond to fraud, abuse, spam, harassment, and safety issues
• Comply with legal obligations, respond to lawful requests from authorities, and enforce our Terms of Service
• Conduct research, trend analysis, and develop AI/ML systems that improve match recommendations, ratings accuracy, content moderation, and user experience
• Generate aggregated or de-identified analytics that we may use or share with partners for any business purpose

6. Photos and User-Generated Content

By uploading photos, videos, posts, comments, scores, or any other content to Ace ("User Content"), you grant The Bold Apps, LLC and its affiliates a perpetual, irrevocable, worldwide, royalty-free, fully-paid, transferable, sublicensable, non-exclusive license to host, store, use, display, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, and otherwise exploit your User Content for any Ace-related purpose.

Permitted uses include, without limitation: operating and improving the service, marketing and advertising, partner and platform integrations, training AI and machine learning models, and creating derivative or aggregated works.

This license survives the termination or deletion of your account to the extent your User Content has already been used in materials that have been published, distributed, or shared with third parties before deletion. See our Terms of Service for additional details on User Content.

7. How We Share Data with Third Parties

We share data with the following categories of recipients to operate Ace, run our business, and deliver a personalized experience:

• Service providers who host and operate Ace (Supabase for database, authentication, and storage; Vercel for hosting).
• Analytics partners (Firebase Analytics, Firebase Crashlytics, Firebase Remote Config) to measure usage, diagnose crashes, and improve features.
• Attribution and measurement partners (AppsFlyer, Meta) to understand how users discover Ace and measure the effectiveness of marketing campaigns.
• Push notification providers (OneSignal, Apple APNs, Google FCM) to deliver in-app and push notifications.
• Communication providers (Resend) to deliver transactional and marketing email.
• Authentication providers (Apple Sign-In, Google Sign-In) to authenticate users.
• Advertising partners (Meta and other ad networks now or in the future) to serve, target, and measure ads on and off Ace.
• Payment processors (Apple, Google, Stripe) to process subscriptions and in-app purchases where applicable.
• Affiliates of The Bold Apps, LLC who help operate, support, market, or develop the service.
• Business successors in the event of a merger, acquisition, financing, restructuring, asset sale, bankruptcy, or similar transaction. Your data may be transferred as part of that transaction.
• Legal and law enforcement authorities when required by law, court order, subpoena, or to protect the rights, safety, or property of Ace, our users, or the public.
• Other players and the public through your public profile, posts, content, and competitive data as described in Section 3.

8. Personalized Advertising

We may use your data to serve personalized advertising on Ace and on other apps and websites, and to measure how those ads perform. This may include showing you ads based on your usage, interests, level, location, communities, and similar signals.

Where required, we obtain consent before processing your data for personalized ads (for example, on iOS via Apple's App Tracking Transparency prompt, and in the EU/UK via consent banners under GDPR and ePrivacy rules). You can manage your choices at any time:

• iOS: Settings, then Privacy & Security, then Tracking
• Android: Settings, then Privacy, then Ads (reset or delete advertising ID)
• EU/UK web: cookie and consent banner, when displayed
• In-app advertising preferences, where available

9. Cookies and Similar Technologies (Web)

On the Ace website we use cookies and similar technologies for essential operation (login, session), analytics (understanding usage), and advertising (measurement and personalization). Visitors in the EU, UK, and other regions with applicable consent laws are shown a consent banner the first time they visit, and can update their choices at any time through the banner or browser settings.

10. International Data Transfers

Ace operates globally. Your data may be transferred to, stored in, and processed in the United States and other countries that may have different data protection laws than your country of residence. For personal data of users in the EU, UK, and Switzerland, we rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses and supplementary measures where required, to provide an adequate level of protection.

11. Data Retention

We retain your account data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. For legal, financial, and compliance records, this period is typically up to 7 years.

Backups and disaster-recovery copies may persist in encrypted, time-limited form beyond active deletion windows. Aggregated or de-identified data that no longer identifies you may be retained indefinitely.

12. Your Rights and Choices

Depending on where you live, you have rights regarding your personal data, including:

• Access to the data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure (deletion) of your data, subject to legal retention
• Restriction of certain processing
• Data portability in a machine-readable format
• Objection to processing, including direct marketing
• Withdrawal of consent at any time, where processing is based on consent
• Lodging a complaint with your local supervisory authority

EU/UK/EEA users: contact us using the details below. We respond to verified requests within 30 days, with extensions where allowed by law.

California users (CCPA/CPRA): you have the right to know what data we collect, to delete and correct your data, to opt out of the "sharing" of personal information for cross-context behavioral advertising, and to non-discrimination for exercising these rights.

You can submit requests by emailing support@aceplay.app or by deleting your account in-app from the Profile screen.

13. California "Do Not Sell or Share" Notice

We do not "sell" your personal information for monetary consideration. However, under the broader CCPA/CPRA definitions, certain disclosures of identifiers and usage data to advertising and analytics partners for cross-context behavioral advertising may qualify as "sharing".

California residents have the right to opt out of this "sharing". To opt out, email support@aceplay.app with the subject line "Do Not Share - California", or use the in-app advertising preferences and OS-level controls (App Tracking Transparency on iOS, Ad ID controls on Android) where available.

14. Children

Ace is not directed to children under 13 globally, or under 16 in the European Economic Area, the United Kingdom, or Switzerland. We do not knowingly collect personal data from children in these age groups. If you are a parent or guardian and believe your child has provided us with personal data, please contact support@aceplay.app and we will take steps to delete that data.

15. Security

We use industry-standard safeguards to protect your data, including encryption in transit (TLS), encryption at rest, multi-factor authentication for administrative access, row-level security on our database, and regular reviews of our infrastructure.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security or that unauthorized parties will never defeat our safeguards. You are responsible for keeping your device, password, and authentication factors secure, and for promptly notifying us of any suspected unauthorized access to your account.

16. Account Deletion

You can delete your Ace account at any time from the Profile screen in the app. After deletion, your account becomes inaccessible and your public profile is removed from active surfaces.

Some data may persist after deletion as needed and permitted by law: legal and financial records, abuse and safety reports, content already shared with other players (such as match scores in their history), aggregated and de-identified analytics, and content already used in published materials under the license in Section 6.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through an in-app notice, an email to the address on file, or another reasonable method before the changes take effect. Your continued use of Ace after the effective date means you accept the updated policy.

18. Contact and Data Protection

For any privacy questions, requests, or complaints, contact: support@aceplay.app

The Bold Apps, LLC is the controller of personal data processed through Ace. EU/UK/EEA users also have the right to contact their local data protection or supervisory authority directly.