PADLR by Rebel Lion Labs | Last updated: 2026-04-07
This Privacy Policy explains how Rebel Lion Labs ("we", "us", or "our") collects, uses, and protects your information when you use the PADLR mobile application ("App").
1. Information We Collect
We collect the following categories of personal data:
Account information: Email address and display name (required for account creation)
Match data: Match results, scores, participants, and match history you log in the App
Social data: Posts, comments, reactions, and follow relationships you create
Device information: Push notification tokens (FCM), device type and OS version for app functionality
Usage data: In-app interactions and feature usage for analytics and improvement
Contact information: Phone contact names and numbers are locally hashed on your device for the "Find Friends" feature. Only irreversible cryptographic hashes are transmitted to our servers — we never see or store your raw contacts.
Crash and performance data: Crash logs, stack traces, device model, and OS version collected by Firebase Crashlytics to diagnose and fix technical issues
2. How We Use Your Information
Calculate your padel skill rating using the Weng-Lin Bayesian algorithm
Enable partner discovery and compatibility matching
Deliver push notifications for match confirmations, rating updates, and social interactions
Display your profile and match history to other users
Improve the App through anonymised usage analytics
Provide customer support
Comply with legal obligations
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area, we process your personal data on the following legal bases:
Contract performance: Account creation, match logging, rating calculation, and subscription management — necessary to provide the Service you signed up for
Legitimate interest: Analytics, crash reporting, fraud and manipulation detection, and service improvement — balanced against your rights with minimal data used
Consent: Personalised advertising (AdMob), optional contact matching, and marketing communications — you can withdraw consent at any time
Legal obligation: Responding to lawful requests from authorities and complying with tax and financial regulations
4. Automated Decision-Making
PADLR uses the Weng-Lin Bayesian rating algorithm (OpenSkill) to calculate your skill rating automatically based on match results. This constitutes automated profiling under GDPR Article 22. The system considers match outcomes, score margins, and opponent ratings to produce a skill estimate on a 0–7 scale.
You have the right to:
Request a human review of any rating decision that materially affects you
Express your point of view regarding your calculated rating
Our manipulation detection system may also flag suspicious match patterns automatically. Flagged accounts are reviewed by a human before any account restrictions are applied.
5. Third-Party Services
We use the following third-party services to operate the App:
Firebase / Google: Authentication, cloud database (Firestore), push notifications (FCM), and analytics. Google Privacy Policy: policies.google.com/privacy
Firebase Crashlytics: Crash reporting and performance diagnostics. Collects crash logs, stack traces, device model, and OS version. Data is processed by Google under their Data Processing Addendum.
Google AdMob: In-app advertising displayed to free-tier users. Google Privacy Policy applies. You can opt out of personalised ads in your device settings.
6. Advertising and Tracking
Free-tier users see ads served by Google AdMob. On iOS, we request your permission via Apple's App Tracking Transparency (ATT) framework before enabling personalised advertising. If you decline, you will still see ads, but they will not be personalised based on your activity across other apps and websites.
You can change your tracking preference at any time in your device's Settings > Privacy & Security > Tracking.
7. Data Sharing
We do not sell your personal data. We share data only:
With third-party service providers listed above, who process data on our behalf
When required by law or to protect our legal rights
With your consent for any other purpose
Your display name, profile photo, ratings, and match history are visible to other users of the App as part of the social features.
8. Data Retention Periods
We retain your data for as long as your account is active. When you request account deletion:
Your account enters a 30-day grace period during which you can cancel the deletion
After 30 days, all personal data (profile, matches, social content) is permanently deleted
Your Apple ID sign-in token is revoked immediately upon deletion request
You can request account deletion at any time from within the App under Settings > Account > Delete Account.
Specific retention periods:
Account and profile data: Retained while your account is active, plus the 30-day deletion grace period
Match history and ratings: Retained while your account is active; permanently deleted with account
Crash logs: Retained for 90 days by Firebase Crashlytics
Analytics data: Retained for 14 months by Firebase Analytics, then automatically deleted
Contact hashes: Deleted immediately upon account deletion
Push notification tokens: Revoked and deleted upon account deletion or when you disable notifications
9. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
Access: Request a copy of the personal data we hold about you
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your personal data (see account deletion above)
Portability: Export your match data in JSON format (available in Settings > Export Data)
Object: Object to processing of your data for direct marketing purposes
Restrict: Request restriction of processing in certain circumstances
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.
10. Your Rights (California — CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:
Right to know: Request the categories and specific pieces of personal information we have collected about you in the past 12 months
Right to delete: Request deletion of your personal information
Right to correct: Request correction of inaccurate personal information
Right to opt-out: We do not sell your personal information. We do not share personal information for cross-context behavioural advertising unless you have opted in via the ATT prompt.
Non-discrimination: We will not discriminate against you for exercising any of these rights
To exercise these rights, contact us at rebellionlabsofficial@gmail.com. We will verify your identity and respond within 45 days.
11. Children's Privacy
PADLR is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
12. Data Storage Location
Your data is stored on Google Firebase servers located in the United States (us-central region). By using the App, you consent to the transfer and storage of your data in the United States. We rely on Google's standard contractual clauses and data processing agreements to ensure appropriate safeguards for international data transfers in compliance with GDPR Article 46. For more information about Google's data protection practices, see Google's Data Processing Addendum.
13. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS and stored securely in Google Firebase.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by email. The "Last updated" date at the top of this page reflects the most recent revision.
15. Contact
If you have any questions about this Privacy Policy, please contact us: