Privacy Policy
Last updated: May 25, 2026
Picklly is a multi-tenant platform for pickleball communities. This policy explains
what we collect, how we use it, who else sees it, and how to remove it. It applies
to picklly.co, every community site at
*.picklly.co, the Picklly mobile app (iOS & Android), and any
other Picklly-operated surface.
What we collect
Account information
When you create a Picklly account we collect your email address, password (stored as a one-way BCrypt hash — we never see your plaintext password), display name, and optionally your first name, last name, and avatar image. If a community admin invites you, we associate your account with that community.
Player profile within a community
Each community you join may have its own player profile for you, including stats from matches and check-ins, a customizable card frame and tagline, and any photos or videos that have been uploaded with you tagged. Your community's admins manage this data on your behalf.
Location (mobile app only)
When you tap Check in in the mobile app, the app reads your current GPS coordinates one time and sends them to our server to verify you're within your home court's configured radius. We don't continuously track your location, run anything in the background, or store location history beyond the check-in row's record of when (not where) you were at the court.
Photos and videos you upload
You may upload photos and videos to your community's gallery. Photos are stored in Microsoft Azure Blob Storage with the community. Videos are uploaded through Picklly to your community's YouTube channel (if configured by the admin) and are subject to YouTube's terms in addition to ours.
Match and activity data
Challenges, matches, league participation, and check-ins are recorded against your player profile to power stats, leaderboards, and badge progression. Each community sees its own data; cross-community aggregates (e.g. your global stats on the mobile Home screen) are derived from the same records.
Payment information
When you purchase from a community's swag shop, payment is processed by Stripe directly. We never see or store your full card number; we receive only Stripe's tokenized customer reference and order metadata (line items, totals, shipping address you provide).
Push notification tokens
If you opt in to push notifications in the mobile app, the operating system gives us a device-specific token we use to send you alerts about upcoming play sessions at your home court. The token is not personally identifying on its own.
Device and connection metadata
Our servers log standard request information (IP address, user agent, timestamps) for security and reliability monitoring. These logs are retained for up to 90 days and are not used for advertising.
How we use it
- Operate the service — sign-in, community access, stats, leaderboards, photos, check-ins.
- Communicate with you — transactional emails (account verification, password reset, order confirmations) and push notifications you've opted in to.
- Improve Picklly — aggregate, non-identifying analytics about which features get used and where errors happen.
- Comply with the law — respond to lawful requests, enforce our terms, prevent fraud.
We do not sell your personal information. We do not run ads inside Picklly products and have no advertising-targeting profile of you.
Who sees your data
- Your community's admins see your player profile, check-ins, match data, and uploaded media within their community.
- Other players in your community see your display name, avatar, public stats, leaderboard ranking, and media in which you're tagged.
- Service providers we use to run Picklly — Microsoft Azure (hosting, storage, databases), SendGrid (transactional email), Stripe (payments), YouTube (video hosting). Each has its own privacy policy. We share only the minimum data each needs to do its job.
- App-store reviewers from Apple and Google may temporarily access a test account during their review of the mobile app.
Security
All data in transit is encrypted with TLS. Passwords are hashed (BCrypt). Database and blob storage are encrypted at rest by Azure. Access to production data is limited to Picklly operators and is audited.
Retention and deletion
You can delete your account at any time by visiting accounts.picklly.co/account/delete (also reachable from the mobile app: Profile → Delete account). Deleting your account removes your identity, contact information, and personal profile fields. We may retain anonymized match records (without your name or email) where doing so is needed to keep historical community stats intact for other players. We may retain billing and tax records as required by law.
To request a copy of your data, email privacy@picklly.co. We respond within 30 days.
Children
Picklly is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.
Changes to this policy
We'll update this page when our practices change. The "Last updated" date at the top reflects the most recent revision. For material changes that affect what we collect or how we use it, we'll notify active users by email.
Contact
Privacy questions: privacy@picklly.co
General support: support@picklly.co
Picklly — Houston, Texas, USA