Privacy Policy

Effective 14 October 2026 · Applies to the RackScore iPhone, Apple Watch, Android and web apps

RackScore keeps score for padel, tennis, badminton and squash. To do that we need to know who you are, which games you're in, and how those games went. This policy explains what that means, in plain English.

The short version

We collect your name, your sign-in details, and the games you play.
Your Apple Health data never reaches us. If you turn it on, your iPhone can send a match's workout straight to Strava.
Other RackScore players can see your name, your stats and your match history.
If you connect Strava, we post each match you finish to your Strava account. You can disconnect at any time.
The people who run RackScore can see your account, your games and your devices, to help you and fix problems. Every change they make is recorded.
The iPhone and Android apps report how they're used — app version, device type, crashes — so we can improve them.
We don't sell your data, show ads, or track you across other apps and websites.
You can delete your account on the website, in your profile. You can ask for a copy of your data, or for it to be corrected, by emailing privacy@rackscore.app.

01 Who we are

RackScore is run by Optionomical Ltd, based in the United Kingdom. We are the data controller for the personal data described here, which means we decide how it is used and are responsible for protecting it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

You can reach us about anything in this policy at privacy@rackscore.app.

02 What we collect and why

We only collect what RackScore needs to run. Each row below says what the data is, what we use it for, and the legal basis we rely on. For almost everything, that basis is contract: you asked us to keep score for you, and we can't do it without this information. We may also keep or share information where the law requires it (legal obligation).

What	Details	Why we need it	Legal basis
Your account	Email address, display name, and how you sign in (email and password, Google, or Apple). Your password is handled by our sign-in provider — we never store it.	To create your account, sign you in, and reset your password if you forget it.	Contract
Your profile	Display name, the colour of your player badge, and running totals: matches and sets played and won, points played, and how often you play each sport.	To show who you are in a game and give you your stats.	Contract
Your settings	The choices you make in the app: which sport, match type, format and deuce scoring new games start with, how the court display shows the score, and whether you want match notifications. Only you can see them.	To set up new games the way you like, and to send match notifications only if you want them.	Contract
Your Strava connection	Only if you choose Connect with Strava in Data & privacy. We store the keys Strava gives us to post to your account, your Strava athlete id and name, your time zone, and a note of each match posted. Only our servers can read the long-lasting key; your phone is given a short-lived one, which only lets it upload activities, when it posts a match itself. For each match you finish, Strava is sent the sport, when it started, how long it took, the score, whether you won, and the first names of the other players. If you also turn on Include heart rate, calories, distance and route on your iPhone, your iPhone sends Strava your Apple Watch workout for the match as well (see section 03). That goes from your iPhone directly to Strava; it never passes through our servers.	To post your matches to Strava, as you asked us to.	Contract; your explicit consent for health data
Games	The sport, scoring format, court name, the live score, who is serving, start and finish times, who created the game, and who joined which team.	To keep score in real time on every player's device and on the court display.	Contract
Match history	For each match you play: the result, set scores, your teammates and opponents, the date, and — if a player later corrects the teams — who made that change and when.	To keep a record of your matches and calculate your stats.	Contract
Notifications	A push notification token for each phone or tablet you sign in on.	To tell you a match has finished and show you the result.	Consent
App usage (iPhone and Android)	The iPhone and Android apps include Google's Firebase Analytics toolkit. It records when the app is opened and updated, which version of the app you're running, your device model and its operating system version, the country your connection comes from, and an identifier for your installation of the app. It is not linked to your name or email address, and it doesn't record what you type or the games you play.	To see which versions and features are actually being used, find problems and crashes, and decide what to improve next.	Legitimate interests
Your devices and their versions	For each device you sign in on, we store which version of RackScore it is running, the device model, its operating system version, and when we last saw it. For an iPhone this includes the same details for an Apple Watch paired to it, because the Watch app cannot record them itself. We store this in your account. Other players can't read it; you can, and so can the people who run RackScore (see section 04). It is identified by a code we generate for that installation — not by your name, your email, or any identifier shared with other apps.	So that when something breaks we can tell which versions are affected and who is still running one with the fault in it.	Legitimate interests
Records of changes we make	If someone who runs RackScore changes your account or a game you played in — for example correcting your display name, closing a game that got stuck, hiding a match, sending you a password reset link, suspending your account, or deleting it at your request — we record what was changed, who changed it and when. The record includes your account id and, for some changes, your email address.	So that every change made to someone's account is accountable, and so we can investigate if anything goes wrong.	Legitimate interests
Technical data	Your IP address and basic request information, recorded by our hosting and database providers when your device connects.	To deliver the service, keep it secure, and investigate faults.	Legitimate interests

You can turn match notifications off at any time in the app (Profile, then Notifications) or in your phone's settings; you'll still be able to use everything else. We don't use your data for advertising, we don't track you across other companies' apps or websites, and we don't make automated decisions about you that have legal or similarly significant effects.

App usage data, and your devices and their versions: we rely on legitimate interests for both, because we can't keep RackScore working well without knowing which versions and features people actually use. Neither is ever used to advertise to you or sold to anyone. You have the right to object to it: turn off Help improve RackScore in Manage profile in the iPhone or Android app, or in your account on the website. Turning it off stops both, and deletes the record of the device you turn it off on. You can also email privacy@rackscore.app and we'll do it for you.

Cookies and browser storage

We don't use advertising or tracking cookies. The website keeps a small amount of information in your browser so that you stay signed in; the site can't work without it, so we don't ask for consent. Our web pages load their fonts from Google Fonts, so your browser sends your IP address to Google when you visit.

03 Apple Health

On iPhone, RackScore can connect to Apple Health, but only if you allow it. If you do, RackScore:

saves each match you play to Apple Health as a workout, and
reads your heart rate and active energy for the time of a match, to show them on that match's details screen.

This health data never reaches us. RackScore never sends it to our servers, and we never see it. We don't use it for advertising or marketing, and don't sell it.

The one exception is Strava, and only if you turn it on. If you've connected Strava and turn on Include heart rate, calories, distance and route in Data & privacy, then for each match your iPhone reads your Apple Watch workout from Apple Health (heart rate, active energy, distance, and your route if your Watch had a GPS fix) and sends it directly to Strava, to show on that match's activity. It goes from your iPhone to Strava; RackScore's servers never receive it. While this is on, your Apple Watch records your location during a match to draw the route, if you allow it to; on an indoor court there is usually no fix, and no route is sent. This relies on your explicit consent: it's off until you turn it on, and turning it off stops it for future matches. Workouts already on Strava stay there until you delete them on Strava.

You can change or withdraw this permission at any time in the Health app, under Sharing → Apps → RackScore. Workouts RackScore has already saved stay in Apple Health until you delete them there.

04 What other players can see

RackScore is a shared scoreboard, so some of your information is visible to other people by design.

Anyone signed in to RackScore can see your display name, badge colour, stats and match history.
Players in your game can see your name and team, and can move players between teams if the sides were picked wrong — including after the match, from match history.
Anyone who can see the court display — a TV or tablet at the court — can see the names and live score of the game on that court.
People who follow another player on Strava — if a player in your game has connected Strava, the match posted to their account names the other players by first name, with the score.

Other players cannot see your password, your settings or your Apple Health data. Choose a display name you're happy for other players to see.

What the people who run RackScore can see

A small number of people who run RackScore can use a staff dashboard. Each person is given access individually, at the lowest level they need, and it can be taken away at any time. Through it they can see what our database holds about you: your profile and email address, your stats and match history, the games you've played in, and the versions and models of your devices. The dashboard doesn't show your settings, and it can't show your password or your Apple Health data, because we never store them.

They use it to help you, look into problems and keep RackScore running — for example, closing a game that got stuck, correcting stats that have gone wrong, changing a display name, hiding a match, suspending or restoring an account, sending a password reset link, or deleting an account when you ask. Every change made this way is recorded, with who made it and when (see section 02).

Your email address: if you created your account on the RackScore website, your email address is currently stored with your player profile, where another signed-in player could retrieve it with technical know-how, although the app never displays it.

05 Who processes your data

We use a small number of trusted companies to run RackScore. They handle your data only on our instructions and under contracts that require them to protect it.

Google Firebase (Google Ireland Ltd / Google LLC) — sign-in, the database that holds your account and games, the servers that send match notifications, hosting for the web app, and the analytics in the iPhone and Android apps.
Apple — Sign in with Apple, on iPhone and on the website, if you choose it, and delivery of push notifications to your iPhone.
Google — Sign in with Google, if you choose it.

If you connect Strava (Strava, Inc.), we send it your matches at your request. Once a match is on Strava, Strava holds it under its own privacy policy, and who can see it is set by your Strava privacy settings.

If you sign in with Apple and choose Hide My Email, we receive a private relay address from Apple instead of your real one.

Otherwise, we only share your data if the law requires it (for example, a court order), or with a new owner if RackScore is ever sold or reorganised, in which case this policy continues to apply.

06 Where your data is stored

Your data is stored mainly in the European Union. Our providers may also process some of it in other countries, including the United States. Where they do, the transfer is protected by the safeguards UK law requires, and you can ask us for details of them.

07 How long we keep it

Your account, profile and settings — until your account is deleted.
Match history — until your account is deleted. Removing a match from your history hides it from you; it is permanently deleted when your account is.
Games — games that have finished, or that nobody is using any more, are closed. We keep the record of who played in each game, because it's how we check that someone correcting a match was actually in it.
Notification tokens — removed when you sign out of that device, or when they stop working.
Your Strava connection — until you disconnect Strava or delete your account. Disconnecting deletes the keys and our notes of posted matches, and tells Strava to cancel RackScore's access. Matches already posted stay on Strava until you delete them there.
App usage data — kept by Google for the period set in our Firebase Analytics settings, currently retention period.
Your devices and their versions — until your account is deleted, or until you turn off Help improve RackScore on that device, whichever comes first.
Records of changes we make — kept as the record of who changed what. They are not removed when an account is deleted.
Technical logs — kept by our providers for a limited period.

When your account is deleted, we delete your account, profile, settings, stats and match history. Other players' own match histories keep their record of games they played with you, with your name replaced by "Deleted player". We also keep a note of the deleted account's id, so it can't be recreated, and the records of any changes we made to the account.

08 Your rights

Under UK data protection law, you have the right to:

get a copy of the personal data we hold about you, including in a format you can reuse elsewhere;
correct anything that's wrong — you can change your display name and badge colour in the app yourself;
delete your data;
restrict or object to how we use it;
withdraw consent for anything that relies on it, such as notifications or Apple Health;
stop matches being posted to Strava, by choosing Disconnect in Data & privacy, or stop your health data going with them by turning off Include heart rate, calories, distance and route.

To use any of these rights, email privacy@rackscore.app from the address on your account. There's no download option in the app — we'll send you a copy of your data by email. We'll reply within one month, or tell you if we need longer, as the law allows. There's normally no charge.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

09 Deleting your account

You can delete your account yourself on the website: sign in, open your profile, and choose Delete account at the bottom of the page. We ask you to sign in again first, because it can't be undone. Deletion happens straight away.

This removes your profile, your settings, your stats and your match history, and your sign-in. Games you played in stay in the other players' own match history and in the game's record of who played, with your name shown as "Deleted player", so their records and stats aren't changed by your leaving. We keep one note of the deleted account's id, so the account can't be recreated by a device that was still signed in. The only other thing we keep is the record of any change the people who run RackScore made to your account (section 02) — which, if we sent you a password reset link, suspended your account or deleted it for you, includes your email address.

If you can't sign in, email privacy@rackscore.app from the address on your account and we'll do it for you within one month.

Workouts already saved to Apple Health aren't affected — they're on your iPhone, not with us — and you can delete them in the Health app.

If you connected Strava, deleting your account disconnects it and tells Strava to cancel RackScore's access. Matches already posted to Strava stay there until you delete them on Strava.

10 Children

RackScore is not intended for children under 13, and we don't knowingly collect their data. If you believe a child under that age has created an account, contact us and we'll delete it.

11 Security

Your data is encrypted when it travels between your device and our servers, and when it is stored. Access rules on our database limit what each signed-in user can read and change — for example, only you can edit your profile. Our own access is limited too: only the people who run RackScore can use the staff dashboard, each with no more access than they need, and every change made through it is recorded. No system is perfectly secure; if a breach ever affects your data, we'll notify the ICO, and you, where the law requires.

12 Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. If a change is significant, we'll let you know before it takes effect.

13 Contact us

Questions about this policy or your data: privacy@rackscore.app