Who we are

Padel KW is an app for finding padel matches in Kuwait. It is operated from Kuwait by Tamreen Sports Consulting Co., which is responsible for the data described in this policy.

Commercial registration: 531660. Licence: 2026/4823.

This policy sets out what is collected, why, and who can see it. It describes the app as it is today, not as it intends to be.

How you get in

Email and password: we receive your email address, your phone number and your password. The password is never stored in readable form. Before an account is created it is checked against a list of common passwords and against a public breached-password service, which is sent only the first five characters of a one-way fingerprint of the password, never the password itself.

Continue with Google: we receive your Google account identifier, your email address and whether it is verified, your name, and the address of your profile picture.

Continue with Apple: we receive your Apple account identifier and an email address, which may be a relay address Apple issues instead of your real one, and your name on the first sign-in only.

Whichever way you sign in, your connection comes from a network address, as every connection on the internet does. The service that runs sign-in keeps that address, and the name of the app or browser the connection came from, with each session you are signed in to, and removes them when you sign out or delete your account. Each attempt to create an account with an email address also writes the address it came from into a list that is used only to stop repeated attempts from one place. That list is not attached to any account and nobody can read it in the app. It is needed for one hour, but today old entries are cleared only from time to time, so an entry can stay for some weeks.

What you give us

Your name, your date of birth, your gender, your level, your preferred side of the court, your hand, and your phone number.

And if you choose to: your photo, and a bio of up to 200 characters.

We do not collect your address, your area, or your location. The app never asks for location permission, and location is switched off at the page level.

We collect no payment method, because the app takes no payment.

What is recorded as you use the app

The matches you publish or join, the seats, join requests, invitations, results, disputes, your current level, how many matches you have played, and your show-up rate.

Who you follow, follow requests, who you have blocked, your reports, support requests and their messages, your notifications, chat messages, the moment you accepted the terms, and the language you chose.

The gear you put up for sale, the tournaments you host or enter, and the short fault reports your phone sends when something in the app breaks.

Who sees your phone number

Your phone number is private by default. Only you and the app’s owner can see it.

If you turn on Show my number on my profile, every signed-in player can see it, except anyone you have blocked or who has blocked you. You can turn it off again at any time.

Who sees your date of birth and your email

Your date of birth is seen only by you and the app’s owner. It is shown to no player and it never leaves in a share link. The app works your age out from it and stores no age.

Your email address is seen only by you, the owner and the admins. It is shown to no player, and a reviewer cannot see it.

Your password is seen by nobody.

What every signed-in player can see

The profile the app publishes about you can be read by every signed-in account on Padel KW. It carries your name, your photo, your avatar, your gender, your level, your side and your hand, your matches played and won and your show-up rate, your bio, the privacy settings you chose, the moment you accepted the terms, and the list of accounts you follow.

The bio is free text you write yourself and every signed-in player can read it. Do not put your number or your email in it.

You can choose who sees your past matches and who sees your upcoming ones: everyone, the people who follow you, or nobody. You can choose not to appear on the monthly boards. And you can pause your account, which takes you out of search and out of the boards.

A match link

A match link can be opened by somebody who is not signed in, but the service hands out nothing unless the match is public, upcoming, still ahead, and its mode is open or training. Otherwise it returns nothing, and it does not distinguish a match that does not exist from one that exists and is closed.

What the link carries: the club’s name and its area, the date, the time and the duration, the level range, the mode and the format, the price note, whether the court is booked, how many seats are open, and for each seat its team, its side, its state, and whether it is the host’s seat.

A first name and a level appear only for the host and for players who chose to let everyone see their upcoming matches. If the host switched names off, no name appears at all.

What the link never carries: a phone number, an email address, a date of birth, anybody’s family name, a photo, a bio, a gender, the court number, or the host’s message.

Chat

A match chat is readable by the players in that match, its host, its co-admin, and staff. Nobody else.

A direct thread is readable by its two people and by staff. Nobody else.

In a private conversation a photo or a voice note can be sent only to somebody who has allowed it. Every private conversation starts closed to them in both directions. The person receiving chooses how long to allow it: 24 hours, 7 days, 30 days, or until they take it back, which they can do at any moment. A block takes it back at once, both ways.

A photo is redrawn on your phone before it is sent, and that removes everything the camera wrote into the file with it, including the time and the place it was taken. A voice note is at most two minutes long, and the microphone runs only while you are recording. Both are kept in private storage that only the two people in the conversation can open. Staff can open one only when one of those two people has reported it.

A photo or a voice note is removed from storage when its message is deleted. When the sender takes one back, it disappears for the other person at once, but the file itself may be kept in private storage for up to 7 days, so that the other person can still report it. In that time staff can open it only through such a report, and then it is removed. And the ones you sent are removed when you delete your account.

The person a photo was sent to can open it full screen, save it to their phone’s photos, and share it through their phone’s share sheet. A copy saved or shared that way is on their phone, or wherever they send it, outside the app, and deleting the message, taking the photo back or deleting your account does not reach it. So send a photo only to somebody you are happy to have it.

When you edit or delete a message, the text it had before is kept for 90 days so that a report about that conversation can be ruled on. Only staff can read it. You cannot, and neither can the other people in the thread.

Selling gear

If you put gear up for sale, the listing carries the photos you chose, a title, a price, a category, its condition and your description, with your name and your profile as the seller. Staff read every listing before anybody else sees it. Once it is live every signed-in player can see it, and it comes down by itself after thirty days. A listing never carries a place: where to meet is for you and the buyer to settle in a private conversation.

Listing photos are redrawn on your phone before they are uploaded, which removes the time and the place the camera wrote into the file. Like a profile photo, a listing photo is kept in public storage, which anybody can open without signing in.

A listing that you withdraw, that staff refuse, or that reaches its thirty days stops being shown, and deleting your account removes your listings. Their photos, though, are not removed from storage today: they stay in that public storage after the listing has gone. To have them removed, write to Padelkw@MyTamreen.com.

You see how many people opened your listing, never who. To count each person once a day, the app notes that an account opened a listing on that day, and it does the same for the banners on the home screen when one is seen, tapped or shared. Nobody can read these notes, not the seller and not staff; only the numbers are shown. A banner note is removed within a day, and a listing note when the listing comes down.

Tournaments

A tournament host can enter somebody who has no account by typing their name. That name is shown in the draw, the schedule and the table to everyone who can see the tournament. It belongs to no account and never counts toward anybody’s record or level. The host can take the entry out before the tournament starts; after that it stays with the tournament’s results. If you add somebody this way, make sure they are happy for their name to be shown.

Staff

There are four rungs of staff: owner, super admin, admin, and reviewer. A reviewer reads and decides nothing.

Staff can read profiles, match messages and direct threads, reports, support requests, notifications, and follow and block lists. Email addresses are seen by the owner and the admins but not by a reviewer, and a date of birth or an unpublished phone number is seen only by the owner.

That access exists so a report or a dispute can be ruled on, and it is used for that.

Gender and women-only matches

Gender is collected because women-only matches exist and cannot work without it, and the database itself is what stops anyone not eligible from seeing them or entering them.

Gender is stated once. Asking to change it opens a support ticket carrying the value you asked for and your note if you wrote one, which staff read and decide on with a written reason. A change away from female is refused while you hold a seat in, or host, an upcoming women-only match.

Reports and blocking

A report carries the reason, what you wrote, and the witnesses you named. Staff read it. The person reported is never told who reported them.

Blocking works both ways, and it cuts the follow between the two accounts.

Notifications on your phone

If you allow Padel KW to send you notifications, your phone is given a device token by Apple or by Google, and we store it. It is the address a notification is sent to. It identifies the handset and not you: it carries no name, no number and no email. The phone reissues it on its own after a reinstall, after a restore from a backup, or whenever the system decides to, so the app registers it again each time you sign in.

Nobody reads it. Not another player, and not staff. The table it is kept in has no read permission of any kind, and no screen in the app or in the staff panel shows a token.

It is used for one thing: delivering the notifications you chose. Only some kinds reach a phone at all: the ones that are tied to a time, and the ones that are waiting on your answer. The rest stay inside the app. Anything you switch off in your notification settings is never raised in the first place, so nothing about it is sent to your phone or anywhere else.

What goes out with it: the words you see on the lock screen, which kind of notification it is, and the identifier of the match or conversation it points at, so that tapping it opens the right screen. When a notification is about something another player did, it names that player, says what they did, and gives the club and the time of the match; for a message, it carries the start of what was written. These are the notifications that do it: a message, in a private conversation or a match group; an invitation to a match; somebody asking you to be their partner, or entering a tournament with you as their partner; a request to join your match, and your request being accepted; the host calling a match off or changing it; a result waiting for you to confirm; a player looking for somebody to take their place; a player leaving your match; and a request to follow you. A match being called off, changed or a request being accepted names the player only when it was the host who did it. In Arabic, a sentence about what somebody did changes with whether they are a man or a woman, so a notification in Arabic names the player only when their profile says which; otherwise it uses a fixed sentence that names nobody. A message names its sender either way. It also carries the address of that player’s profile photo, if they have one, and your phone fetches the photo from our storage to show it beside the words. This is the same name and profile photo every player already sees on that player’s profile. A reply from support names nobody, and neither does a declined request. On an iPhone it is handed to Apple, because Apple is the only route a notification can take to an iPhone. On an Android phone nothing is handed to Google today: that route is not switched on, so nothing goes out at all and the notification waits for you inside the app. When it is switched on, Google carries it to an Android phone the way Apple carries it to an iPhone. Neither is given your number or your email, and the only name either is given is the name of the player the notification is about.

The token is removed when you sign out on that handset, when Apple or Google tells us the handset is gone, and when you delete your account. Turning notifications off for Padel KW in your phone’s own settings stops your phone showing them.

When something in the app breaks

When something in the app fails, your phone sends us a short report about the fault: what kind of fault it was, its technical name, where in the app’s code it happened and in which file, a sentence describing it, the screen you were on, whether you are on the web, an iPhone or an Android phone, the app’s version, the language you chose, and the time on your phone. One is also sent when the app could not read something it needed from the server, naming which read failed.

Before it leaves your phone, that sentence has email addresses, numbers, identifiers, the end of any web address, most text in quotation marks, and all Arabic or other non-Latin text taken out of it, and it is cut to 160 characters. The server takes the same things out again before it is stored. The report describes the fault and not you: it carries no message, no photo, no contact and no location.

The report is recorded against your account, so that a fault can be traced when you write to us about it. It is sent only while you are signed in, and at most 20 in an hour from one account. Only staff can read it, it is used for nothing but finding and fixing faults, and it is deleted after 30 days. If you delete your account, reports already sent stay until their 30 days are up, with your account taken off them.

Where the data is held and who processes it

Your data passes through outside companies, each for one purpose. Hosting the site: Vercel. The database and sign-in: Supabase. Sending account email: Brevo. Delivering a notification to your phone, and only if you allowed them: Apple on an iPhone. On an Android phone that route is not switched on, so nothing goes to Google today; when it is switched on, Google delivers the notification and does nothing else with it.

The database is hosted in Singapore, which means your data is held outside Kuwait.

Account email means your email address leaves the system for that one purpose, and the email provider keeps its own record that the message was sent.

The app sends nothing to any advertising, analytics or tracking service. There is none in it.

Your session and your own copy of the app’s data are kept in your browser’s storage on your own device.

Deleting your account

You can delete your account from the Account and Security screen inside the app. Deletion is permanent.

What is deleted: upcoming matches you host are cancelled and then removed with their seats, requests, results and messages. Seats you hold in other people’s matches are opened again if the match is still ahead, and locked and labelled as a deleted account if the match has been played. Your requests, invitations and direct threads go, and so do your profile, your photo, your date of birth, your phone number, your recorded email address, your follow and block lists, your notifications, the notification registration of every phone you signed in on, your support tickets and their messages, your gear listings, the photos and voice notes you sent in private conversations, and any staff role.

What is deleted from a conversation: every message you wrote loses its words and loses your name. What is left where each one stood is a marker saying a message was deleted, and nothing else. Nothing you wrote survives and nothing naming you survives. The marker is there so that the conversation the other people are still in does not become a set of replies to nothing.

What stays without your name: records that belong to other people keep their shape and your name is emptied out of them. Who decided a request, who entered or edited a result, and who was a co-admin on somebody else’s match.

What stays: reports. A report you filed keeps its content and loses its link to you. A report filed about you stays as it is. A report is a record of something that happened, and a record its subject can erase is not one.

Age

Padel KW is for people aged 16 and over. Sign-up will not accept a date of birth that makes its owner younger than that, and any account found to belong to someone under that age is removed.

Your rights and contact

You can see and correct your details inside the app, control whether your number is published, control who sees your matches, and control whether you appear on the boards. You can pause your account, and you can delete it outright.

Under Kuwaiti law you may ask to see the data held about you, ask for it to be corrected, and ask for it to be deleted. To ask, write to Padelkw@MyTamreen.com.

Changes

This policy may change, and a change is shown inside the app before it takes effect.

Last updated: 26 September 2026.