Privacy Policy
Last updated: July 10, 2026
Information we collect
We collect information you provide directly: name, email address, profile photo, city, tennis skill ratings (NTRP/UTR), role preferences, and social links. We also collect information generated by your use of the platform: sessions you post or join, availability responses, payment history, messages and conversation content, group memberships, and notification preferences. With your permission, we additionally collect precise device location, tennis workout and activity data from Apple Health (HealthKit) on iOS, and a device push token — each described in its own section below.
How we use your information
We use your information to operate the platform, connect you with other players and coaches, process peer-to-peer payments, send in-app and email notifications about sessions you are involved in, and improve our service. We do not sell your personal information to third parties.
Information sharing
Your display name, profile photo, city, and tennis profile are visible to other signed-in users. Session details you post are visible according to the privacy settings you choose. We share information with our payment processor (Stripe) solely to complete transactions you initiate. We may disclose information as required by law or to protect rights and safety.
On-device photo checks
When you set a profile photo, an optional check may run entirely on your device to gauge whether the photo shows you clearly. This powers only a soft, dismissible suggestion to use a clearer photo — you can always keep the photo you chose. Your image is not uploaded for this check, no facial data is sent to or analyzed by our servers, and we do not create, store, or use any facial recognition or biometric data to identify you.
Location
With your permission, we collect precise (GPS) device location to show nearby courts and sessions and to attach a check-in location to sessions you attend, which helps resolve no-show disputes. Location is only accessed while you are using the app, only when you grant the permission, and you can revoke it at any time in your device settings — the app remains usable without it. We do not track your location in the background or build advertising profiles from it.
Health and fitness data
On iOS, if you choose to connect Apple Health (HealthKit), we read the tennis workout and activity data you share (such as heart rate, active energy, and workout duration) solely to log your session activity stats and link them to the sessions you play. This data is used only to power features you see in the app. We do not use HealthKit data for advertising or share it with third parties, and you can disconnect it at any time in your device's Health settings.
Payments
Payments are processed by Stripe. We do not store full payment card numbers. Transaction records (amount, date, session) are retained for financial compliance and dispute resolution even after account deletion.
Push notifications
If you grant permission, we store a device push token so we can send push notifications about session activity, messages, and invites. The token identifies your device to Apple's and Google's push services for delivery only. We clear it when you sign out or delete your account. You can manage notification preferences in the app under Profile → Notifications, or revoke permission at any time in your device settings.
Data retention
We retain your account data for as long as your account is active. If you delete your account, your personal information (name, email, photo, profile data) is removed within 30 days. Payment and session records are retained as required for financial compliance. You can delete your account at any time from the app under Profile → Edit Profile → Account.
Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@sunnysets.com or by using the in-app account deletion feature. California residents have additional rights under the CCPA, including the right to know what personal information is collected and to opt out of its sale (we do not sell personal information). To exercise any rights, contact us at hello@sunnysets.com.
Children's privacy
Sunny Sets is intended only for adults 18 and older and is not directed at children. We do not knowingly collect personal information from anyone under 18, and in particular not from children under 13. If we become aware that we have collected personal information from someone under 18, we will delete it promptly.
Security
We use industry-standard security measures including TLS encryption in transit and access controls on stored data. Supabase Auth manages authentication credentials; we never store passwords in plain text. No internet transmission is completely secure and we cannot guarantee absolute security.
Third-party services
The app uses the following third-party services that have their own privacy policies: Supabase (authentication and database), Stripe (payment processing), MapTiler and Mapbox (interactive maps and static map images), GIPHY (GIF search in chat), Open-Meteo (weather data), Expo / Apple / Google (app delivery and push notifications).
Changes to this policy
We may update this policy periodically. We will notify you of material changes via email or a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.
Questions or privacy requests? hello@sunnysets.com