ScoreTap Padel Privacy Policy Effective: 7 November 2026 Operator: Mitra Visual Group IT Support and privacy contact: multicamplanner@gmail.com ScoreTap supports offline scoring without an account. Accounts and cloud sync are optional. On-device data Player names/photos, matches, history, language and clicker settings are stored on your device. Camera/photo access is used when you select photos or scan a QR code. Bluetooth connects clickers; local networking connects LED displays. Older Android versions require location permission for BLE scanning; we do not use it to track your location. Score announcements use device text-to-speech (TTS) and select only voices available for offline processing. Score text stays on the device and is not sent to a cloud speech synthesis service. Languages and voice characteristics depend on installed voices; install an offline voice in device settings if needed. Accounts and cloud Registration processes your name, WhatsApp number, password hash, verification status and sessions. Passwords and OTP codes are not written to application logs; the server stores hashes rather than raw passwords or codes. Enabling sync uploads matches and history included by the sync flow, including player names/photos. Obtain players' permission before uploading their names or photos. Service providers and sharing Your phone number and verification code pass through the Cloudia/WAHA WhatsApp sender and WhatsApp (Meta) to deliver OTP messages. Hosting and Cloudflare process network requests and metadata such as IP addresses to operate and protect the service. Scores/photos are displayed on the LED receiver you connect on your local network. We do not sell personal data, serve advertisements or use cross-app advertising tracking. Infrastructure providers may process data in other countries under their own policies. Android QR scanner diagnostics The Android QR scanner uses Google ML Kit. Google processes device and app information, installation identifiers, scanner configuration, input/output sizes, event types, error codes and performance metrics for SDK diagnostics and usage analytics. Scanned images are processed on the device. SDK metadata is sent over HTTPS; ML Kit documentation states that this metadata is not transferred to third parties. The iOS scanner uses Apple Vision on the device. See https://developers.google.com/ml-kit/android-data-disclosure for SDK practices and Google policies on its retention. Retention and deletion Account/cloud data is kept while your account is active. Delete your account in Account & sync → Delete account, or at https://livegear.id/courttap/delete-account. Password confirmation deletes the account, all sessions, pending OTP for that number and cloud matches owned by that account. Local copies on your devices remain; use device settings to erase app data. ScoreTap database backups expire within 7 days. A deletion HMAC containing no name/number is retained for 30 days to prevent deleted accounts being recovered from backups. Rate-limit records are cleared within 24 hours; infrastructure logs follow provider retention practices. Security, choices and children Account requests use HTTPS and app sessions use OS-backed secure storage. No system guarantees absolute security. You may use the app without an account, stop sync, decline optional permissions, request data access/corrections by email, or delete your account. ScoreTap is not specifically directed to children. Parents/guardians may contact us about children's data. Changes We update this policy's date when our processing practices change. Contact multicamplanner@gmail.com for questions or privacy requests.