Privacy Policy
Last updated: August 30, 2026
This Privacy Policy explains how Dinkeroo Software Development Services, a sole proprietorship registered in the Philippines with the Department of Trade and Industry ("dinkeroo", "we", "us"), collects and uses personal data when you use the dinkeroo mobile app, the dinkeroo website, and related services (together, the "Service").
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, the "DPA"), dinkeroo is the Personal Information Controller for the data described here.
Contact: hello@dinkeroo.app
1. Who this policy covers
This policy applies to everyone who uses the Service:
- Players who create an account to book open play, get matched, and track a rating.
- Club admins who organize sessions and manage rosters.
- Venue contacts who receive and respond to booking requests.
- Visitors to the dinkeroo website who submit an interest form or browse the site.
2. Data we collect
2.1 Data you give us
| Data | When | Whether required |
|---|---|---|
| First name, last name | Sign up | Required |
| Email address | Sign up | Required |
| Mobile phone number | Sign up | Required |
| City or area | Sign up | Required |
| Password | Sign up | Required (stored only as a secure hash by our authentication provider) |
| Existing DUPR ID and self-reported rating, or a self-assessed experience level | Sign up | Optional — used only to seed your first few matches |
| Profile photo | Profile setup, later edits | Optional |
| Game Card photos and captions | After a match, if you choose to post one | Optional |
| Venue interest details (your name, email, contact number, venue name and address) | Submitting the "Partner your venue" form on the website | Required to submit that form |
2.2 Data created as you use the Service
- Play record — bookings you join, check-ins, no-shows and cancellations, waitlist position, and a booking reliability score derived from your attendance history.
- Match and rating record — match results, your hidden matchmaking rating (MMR), visible tier, confidence score, games played, and an immutable history of every rating change. The rating history is kept as a permanent audit record for dispute resolution and competitive integrity.
- Social connections — players you connect with or follow, and clubs you follow.
- Stories and Game Cards you post, and who is allowed to see them.
- Notifications we generate for you and their read state.
- Payment records — for a booking with a fee, the amount owed and whether it has been marked paid, and the method noted (for example, GCash or cash). dinkeroo does not collect or store card numbers, bank details, or e-wallet credentials — see Section 6.
2.3 Data collected automatically
- Device location — if you grant permission, the app reads your device's location to show pickleball courts near you and to sort the courts list by distance. This happens on your device. We do not send your location to our servers and we do not keep a history of where you have been. You can turn this off in your device settings at any time; the courts list still works without it.
- Diagnostic data — if the app or website crashes or hits an error, we receive a technical report (for example, device model, operating system version, app version, and the error and the steps that led to it) through our error-monitoring provider. This helps us fix problems.
- Server and access logs — our hosting providers automatically log technical information such as IP address, browser or app version, and timestamps for security and reliability.
We do not use advertising trackers, and we do not build advertising profiles.
3. Why we use your data, and our legal basis
| Purpose | Legal basis under the DPA |
|---|---|
| Create and secure your account; sign you in | Performance of our agreement with you (the Terms of Service) |
| Run open play: bookings, check-in, matchmaking, scoring, ratings, leaderboards | Performance of our agreement with you |
| Show your name, photo, tier and Game Cards to other players as the Service is designed to work | Performance of our agreement with you; your consent through your visibility settings |
| Send you service messages (booking confirmations, reminders, approval requests, password resets) | Performance of our agreement with you |
| Show nearby courts and directions | Your consent (device location permission) |
| Diagnose crashes, prevent abuse, protect competitive integrity, keep the Service secure | Our legitimate interests, balanced against your rights |
| Respond to venue interest forms and support requests | Steps taken at your request; our legitimate interests |
| Comply with legal obligations | Compliance with a legal obligation |
4. Who we share data with
We do not sell your personal data. We share it only in these situations.
4.1 Service providers ("Personal Information Processors")
We use the following providers to run the Service. Each processes personal data only on our instructions and under a contract.
| Provider | Role | Where processing occurs |
|---|---|---|
| Supabase | Database, authentication, and file storage (profiles, photos, all app data) | Cloud infrastructure in Asia Pacific (Seoul), South Korea |
| Resend | Delivery of our transactional emails | United States, with email delivery routed through Asia Pacific infrastructure |
| Sentry | Crash and error diagnostics for the app and website | United States |
| Vercel | Hosting of the dinkeroo website and admin portal | Global edge network |
| Expo (EAS) | Mobile app build service and push-notification delivery | United States |
| Google Maps Platform | Map display, "near me" location dot, and directions in the app | Google global infrastructure |
Because some providers are located outside the Philippines, your data may be transferred abroad. Where that happens, we rely on contractual protections with the provider and take reasonable steps to ensure a comparable level of protection, as required by the DPA.
4.2 Other players and clubs
The Service is social by design. Depending on your settings and how you use it, other users can see your name, profile photo, city, visible tier, match results, and any Stories or Game Cards you post. Club admins can see the roster and attendance for sessions you join. Venue contacts can see the booking details and participant count for sessions at their venue.
4.3 When you share to another app
If you choose to share a Game Card to Instagram or Facebook Stories, the image is handed to that app on your device and is then governed by that company's own terms and privacy policy. dinkeroo does not send your account data to Meta.
4.4 Legal and safety
We may disclose data if required by law, by a lawful order of a Philippine court or government authority, or where we believe in good faith it is necessary to protect the rights, safety, or property of dinkeroo, our users, or the public.
4.5 Business transfer
If the Service is transferred to another operator, your data may be transferred as part of that change. We will notify you and require the new operator to honor this policy or a materially similar one.
5. How long we keep data
- Account data is kept for as long as your account is active.
- If you ask us to delete your account, we anonymize it: we remove or scramble your name, email, phone number, photo, and other identifying fields, but we keep the underlying account record and your match and rating history in de-identified form. This is necessary to keep past matches, bookings, and leaderboards intact and to protect the competitive integrity of other players' records.
- Diagnostic data is retained on a rolling basis by our monitoring provider (typically up to 90 days).
- Backups are held on a rolling basis and are overwritten in the ordinary course.
- Venue interest form submissions are kept for as long as needed to follow up and for our records of partner outreach.
6. Payments
dinkeroo is not a payment processor. For a paid session, the app records how much you owe and whether the organizer has marked it as paid. The actual payment is made directly between you and the club admin or venue, outside dinkeroo (for example, by GCash or cash). We never receive or store your card, bank, or e-wallet login details. Any payment you make through a third-party app is subject to that app's own terms and privacy policy.
7. Your rights
Under the DPA you have the right to:
- Be informed about how your data is processed (this policy).
- Access the personal data we hold about you.
- Correct inaccurate or outdated data — you can edit most of it directly in the app.
- Object to or withdraw consent for certain processing (for example, turning off location or push notifications).
- Erasure or blocking — request that we anonymize your account as described in Section 5.
- Data portability — request a copy of the data you provided in a portable format.
- Damages — be indemnified for damage caused by unlawful processing, as provided by law.
- Lodge a complaint with the National Privacy Commission (privacy.gov.ph).
To exercise any of these, email hello@dinkeroo.app. We may need to verify your identity first, and we will respond within the period required by law.
8. Security
We use recognized measures to protect your data, including encryption in transit, hashed passwords, access controls and row-level security on our database, and limiting staff access to what is needed to operate the Service. No system is completely secure, but we work to protect your data and, in the event of a personal data breach that is likely to put your rights at serious risk, we will notify you and the National Privacy Commission as required by the DPA.
9. Children
The Service is intended for people 18 years of age and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will remove it.
10. Changes to this policy
We may update this policy from time to time. If we make a material change, we will notify you through the app or by email before it takes effect. The "Last updated" date above always reflects the current version.
11. Contact us
Questions, requests, or complaints about your privacy:
Dinkeroo Software Development Services Attn: Data Protection Officer City of Malolos, Bulacan, Philippines hello@dinkeroo.app