Privacy Policy
Last updated: September 22, 2026
1. Data controller
RacketBuddy LLC, registered in the State of Delaware, USA, with its address at 8 The Green, Ste D, Dover, DE 19901, USA, is the data controller for the personal data you provide when you create a profile and use the platform.
If you have questions about how we process your personal data, you can contact us at racketbuddy.app@gmail.com.
Because the company is established outside the EU, we have appointed an EU representative under Article 27 of the GDPR. If you are located in the EU, you may contact Magnus Kongshammer, Denmark, at m.kongshammer@icloud.com directly regarding your personal data.
If you use the platform as a member of a club, the club is an independent data controller for the personal data it processes about you. In that context, RacketBuddy acts as a data processor for the club.
2. Personal data we process
We may process the following information about you:
- Name, email address and, where provided, phone number
- Your playing level and area
- Your bookings and payment history
- Content you create on the platform
- Technical information such as IP address and login timestamps
We do not store your payment card details. Payments are handled by Stripe, Inc., which acts as an independent controller for payment data where applicable.
3. How we use your personal data
To perform our agreement with you (GDPR Article 6(1)(b)): to create and maintain your profile, process bookings, send receipts and enable communication between users.
To comply with legal obligations (Article 6(1)(c)): for example, accounting rules may require us to retain certain financial records for five years.
For our legitimate interests (Article 6(1)(f)): to operate and secure the platform, prevent misuse, support users and improve the service, where those interests are not overridden by your rights and interests.
4. Who we share personal data with
If you book a court, we may share your name, email address and booking details with the relevant club so it can provide the booking and any required access. If you book a coaching session, the corresponding information may be shared with the coach.
If you choose to connect with another player through the platform, information you choose to provide may be shared as necessary to enable that interaction.
We use service providers including Render Services, Inc. for hosting and infrastructure, Stripe, Inc. for payments, and Resend, Inc. for transactional email. Where required, appropriate data processing agreements are in place.
We do not sell your personal data or use it for third-party advertising.
5. International data transfers
Our application servers and database are hosted in Frankfurt, Germany. RacketBuddy is operated by a U.S. company, and some service providers, including Stripe and Resend, may process data in the United States. Where required, international transfers are protected through recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses and the relevant providers' transfer frameworks.
6. How long we keep personal data
Your profile is retained for as long as you have an account. If you delete your account, profile information is deleted within 30 days, except where we are legally required to keep specific records for longer.
Booking and payment records may be retained for five years after the end of the relevant financial year where required by accounting law.
Closed player posts may be deleted after 12 months.
7. Children and young people
The platform is intended for users aged 18 and over. If you are under 18, a parent or legal guardian must create the profile and be responsible for the booking.
If we become aware that we hold personal data about a child under 18 without the required parental or guardian involvement, we will delete it as soon as reasonably possible. Contact us at racketbuddy.app@gmail.com if you believe this applies.
8. Your rights
Depending on applicable law, you may have the right to:
- access the personal data we hold about you
- correct inaccurate personal data
- request deletion where we no longer have a lawful reason to retain the data
- request restriction of processing
- receive certain personal data in a machine-readable format
- object to processing based on legitimate interests
Contact racketbuddy.app@gmail.com to exercise your rights. We aim to respond within one month where the GDPR applies. You can also delete your account directly from your profile in RacketBuddy.
If you are located in Denmark and are dissatisfied with how we handle your personal data, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark.
9. Cookies
We use a strictly necessary cookie to keep you signed in. This cookie does not require consent because the service cannot function without it.
We do not use cookies for advertising, cross-site tracking or marketing analytics. We may count page views in aggregate by day without storing a tracking cookie, IP address or a record of the specific pages viewed in a way that identifies you.
10. Security
Passwords are stored using one-way password hashing and cannot be read back by us. Traffic to and from the platform is encrypted in transit, and access to personal data is limited to people who need it for their work.
If a personal data breach creates a risk to individuals, we will notify the relevant supervisory authority within the time limits required by applicable law and notify affected users directly where the risk is high.
11. Push notifications in the mobile app
If you enable push notifications, we store your device push token and notification preferences. We use Expo and Apple or Google push notification services to send notifications about bookings, reminders, coaching requests and unread messages. Push notifications do not include the content of your chat, payment card details or club access credentials.
You can change your notification preferences or disable push notifications from your profile. Device registration is removed when you log out or delete your account and otherwise expires with your login session. Technical delivery records are removed after 30 days. Your device settings also control whether notifications are displayed.