Privacy Policy

Skelter is operated by Skelter Padel, a business based in the United Kingdom. There are no advertising partners. If you have questions about your data, email hello@skelter.app.

We only collect what we need to run the app:

• Account data — your email address, and the first and last name you choose to display. You can edit these at any time from Settings.
• League data — the leagues, sessions, matches, scores, predictions and player records you and other members create.
• Avatar choices — colour and emoji preferences you pick for your in-app avatar. We do not host uploaded photos.
• Push notification tokens— if you opt in to match reminders on iOS, your device’s Expo push token and the preferences you set (e.g. session reminders on/off).
• Authentication metadata — sign-in timestamps, password hashes and one-time invite or reset tokens, handled by our auth provider.
• Basic technical logs — server-side error logs and high-level usage analytics and performance metrics (page loads, app version, load speed) so we can fix bugs and improve performance. These do not include the contents of your league data.
• Cookies and local storage — short-lived sign-in session data, your last active league and a native-app marker so the iOS app can show the right experience.

Skelter does not collect health data, location, contacts, photos or microphone input, and we do not sell or rent any data to third parties.

• To create your account and let you sign in.
• To show you and your league members your matches and stats.
• To send you the notifications you have explicitly opted in to.
• To diagnose crashes, prevent abuse and improve the app over time.
• To respond to your support requests.

We use a small number of trusted service providers to run Skelter. They process data on our behalf under their own privacy commitments:

• Supabase — database hosting and authentication (your account, profiles, leagues, matches).
• Vercel — web hosting, privacy-friendly traffic analytics and performance insights.
• Expo — push-notification delivery on iOS, only if you opt in.
• Apple — App Store distribution.

Inside a league, your name, avatar, match results and predictions are visible to other members of that league. They are not visible to anyone outside it.

Skelter is hosted on infrastructure in the European Union and United States. Some of our service providers may process limited data outside your country; in those cases we rely on standard contractual clauses or equivalent safeguards.

• Account data is kept for as long as your account exists.
• League data(sessions, matches, predictions, stats) is kept while the league exists, even after a member leaves, so the league’s history stays intact.
• Push tokens and preferences are removed when you disable notifications or delete your account.
• Server logs are kept for a short rolling period (typically up to 30 days) for debugging.

You can delete your Skelter account at any time from Settings → Delete account inside the app. When you do:

• Your name, email and avatar are removed.
• Your matches, scores and predictions stay in the league’s history but are shown as “Deleted player”, so other members’ records are not lost.
• Your push tokens and notification preferences are deleted.
• Your sign-in is permanently disabled.

If you are the only admin of a league, you will be asked to transfer admin to another member before deletion. Deletion is permanent and cannot be undone.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to certain processing, and to withdraw consent for things you opted in to (such as push notifications). Most of these you can exercise directly inside the app. For anything else, email hello@skelter.app and we will respond within 30 days.

Skelter is not directed to children under 13 (or under 16 in some regions). We do not knowingly collect personal data from children. If you believe a child has signed up, contact us and we will delete the account.

We protect your data using standard industry practices: TLS in transit, hashed passwords, row-level access controls in the database, and short-lived auth tokens. No service is 100% secure, so please use a strong password and keep it private.

We may update this policy when the app changes — for example when we add a feature that processes new kinds of data. If a change is material we will surface it inside the app. The “Effective” date at the top of this page always shows the latest version.

Questions, requests or complaints? Email hello@skelter.app.