Privacy policy

1. Who we are

uControlTennis / uControlPadel ("the service") is an app that runs tennis and padel leagues in Israel and books courts.

Questions and requests about personal data: @ucontroltennis_bot (on Telegram).

2. What we collect

• Account: sign-in is with Telegram only. We receive your Telegram ID, first and last name, username (if any) and language. We do not receive your phone number.
• Player profile: name, gender, date of birth, playing level, home court and how far you will travel. You can also create profiles for family members, including minors — whoever creates them confirms they are the parent or guardian.
• League activity: entries, matches, scores, times and standings, and the messages you send your opponent through the app or the bot.
• Liability waiver: before taking part we keep a record of the signature — the name typed, role and relationship (e.g. parent), age, time signed, IP address, browser or device type and the document version.
• Payments and bookings: invoices, amounts, discounts and credit. Payment is made with PayPal; we receive order and payment IDs, never card or bank details. Court bookings: the court, time, price and status.
• Court providers: business name, contact phone and email, the payout details you give, the contract, monthly statements, and the courts, schedules and prices.
• Location: when you tap "use my location", your device's position is used to find nearby courts or place the map. It is not stored in your profile.
• Technical: a sign-in cookie and preference cookies (language, sport, waiver reminder, referral code), and the browser type of each sign-in. There are no ads and no third-party tracking or analytics tools.

3. Court providers' calendars

Only for a court provider who chooses to connect a calendar, and only the calendars they choose:

• Google or Microsoft: with your permission we read the start and end times of events (and whether an event is marked free or cancelled) — never titles, descriptions or attendees — to block times when your court is taken. We also add each confirmed booking to the calendar (court, time, the player's first name and the booking reference). We store the account's email address and encrypted access tokens.
• iCal link: the private address you paste is stored encrypted, and we read busy times from it only.
• You can disconnect a calendar at any time in the app, or revoke access in your Google or Microsoft account settings. Disconnecting deletes the tokens and the busy times read from it.

4. How we use it

• Running the leagues: divisions, scheduling, scores, standings and reminders.
• Court bookings, charging, credit and paying court providers.
• Telegram messages about matches, bookings and payments.
• Waiver records, support, security and legal obligations.

We do not sell personal data or use it for advertising.

5. Who we share it with

• Other players see your name, level, results and standings. Your opponent receives your messages, but not your Telegram account — messages are relayed through the bot.
• A court provider sees the bookings at their courts, including the booker's name.
• Service providers working for us: Telegram (sign-in and messages), PayPal (payments), Cloudflare (network), Google and Microsoft (only when a provider connects a calendar), OpenStreetMap (maps and looking up court addresses), Open-Meteo (weather forecasts by court location), and Google Fonts and cdnjs (loading fonts and files; they see your IP address).
• When the law requires it.

6. Information from Google

uControlTennis / uControlPadel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Calendar data is used only to block busy times and to add bookings to the provider's calendar.
• It is not sold, not used for advertising, and not used to train AI models.
• No person reads it unless you ask us to (for example in a support request), for security, or when the law requires it.

7. How long we keep it

• Account and profiles — while the account is active, or until you ask us to delete them.
• A sign-in expires after 180 days without use.
• Messages to opponents are deleted after 400 days.
• Busy times from calendars — only for the coming booking window, replaced on every read.
• Invoices, payments, bookings and waiver records are kept as long as the law requires, or as long as they may be needed as evidence.

8. Your rights

Under Israel's Protection of Privacy Law, 5741-1981, you may see the information about you, ask to correct it and ask to delete your account. Contact us: @ucontroltennis_bot (on Telegram). If we do not answer to your satisfaction, you can turn to the Privacy Protection Authority.

9. Minors

The profile of a player under 18 is created and managed by a parent or guardian, who is also the one who signs the waiver.

10. Security

All communication with the service is encrypted (HTTPS). Calendar access tokens and private calendar addresses are stored encrypted. Sign-ins are stored as one-way hashes, not as passwords.

11. Changes

When we change this policy we update the date below, and we announce material changes in the app or on Telegram.

Last updated: 27 September 2026