Privacy Policy

1. Controller

The controller responsible for the processing of personal data under the General Data Protection Regulation (GDPR) is:

Stoll 5to11 GmbH
Döllingerstr. 20, 80639 München
Germany

Email: support@getrankd.app

If you have any questions about data protection at Rankd, you can contact us at the email address above.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• the Rankd website at https://getrankd.app
• the Rankd web application at https://app.getrankd.app
• related pages, communications and services connected to Rankd

Rankd helps tennis players find other players, arrange matches and record verified match results.

3. Categories of Personal Data We Process

Depending on how you use Rankd, we may process the following categories of personal data:

Account Data

• name
• email address
• login information
• account status
• registration date
• technical authentication data

Profile Data

• player name
• profile photo, if uploaded
• city or playing area
• preferred tennis location
• playing level or self-assessment
• availability information
• preferred distance or radius
• sport preferences
• optional profile information

Match Data

• match invitations
• accepted or declined challenges
• proposed date and time
• proposed tennis location
• court-related information
• match status
• match chat or coordination messages, where available
• match result submissions
• confirmed results
• disputed or corrected results
• RTP or other Rankd score information

Communication Data

• messages sent to Rankd support
• emails sent by or to Rankd
• system emails, including login links, match notifications or account-related messages

Technical Data

When you visit the website or use the app, technical information may be processed automatically, such as:

• IP address
• browser type and version
• device type
• operating system
• date and time of access
• requested pages or resources
• referrer URL
• server log data
• error logs and security logs

4. Purposes of Processing

We process personal data for the following purposes:

• providing the Rankd website and app
• creating and managing user accounts
• enabling login and authentication
• creating and displaying player profiles
• helping players find compatible tennis partners
• enabling match invitations and match coordination
• recording and confirming match results
• calculating and displaying Rankd scores or rankings
• maintaining platform integrity and preventing misuse
• providing support and responding to enquiries
• sending necessary system and service emails
• improving reliability, security and usability
• complying with legal obligations

5. Legal Bases for Processing

We process personal data on the following legal bases:

Performance of a Contract — Art. 6(1)(b) GDPR

We process data that is necessary to provide Rankd, including account creation, login, player profiles, match challenges, match coordination and result confirmation.

Legitimate Interests — Art. 6(1)(f) GDPR

We process data where necessary for our legitimate interests, including:

• operating and securing the website and app
• preventing misuse
• improving platform reliability
• handling support requests
• maintaining the integrity of matches and results

Our legitimate interests are balanced against the rights and freedoms of users.

Legal Obligations — Art. 6(1)(c) GDPR

We may process data where required to comply with legal obligations.

Consent — Art. 6(1)(a) GDPR

Where processing requires consent, we will ask for it separately. This may apply, for example, to optional cookies, analytics or marketing tools if introduced in the future.

6. Account Registration and Login

Rankd may use passwordless login or magic-link authentication.

When you register or log in, we process your email address and authentication-related technical data to identify you and provide secure access to your account.

System emails related to login or account access are necessary for using Rankd.

7. Player Profiles

Rankd allows users to create player profiles so they can be discovered by other users and matched for tennis activities.

Depending on the available product features, your profile may include:

• name
• profile photo
• city or playing area
• playing level
• availability
• preferred distance
• sport
• match activity
• Rankd score or match-related statistics

Some profile information may be visible to other Rankd users where necessary for player discovery and match coordination.

Please do not add information to your profile that you do not want other users to see.

8. Match Challenges, Coordination and Results

Rankd processes match-related data to enable users to arrange and confirm tennis matches.

This may include:

• who challenged whom
• proposed date, time and location
• match status
• coordination messages
• submitted results
• confirmed or disputed results
• RTP updates or match-history information

Rankd may use match and result data to update player profiles, rankings, scores or activity status.

9. Rankd Scores and Rankings

Rankd may calculate platform-specific scores, including RTP or similar rating systems, based on confirmed match results and related match data.

These scores are proprietary Rankd platform indicators. They are not official tennis federation ratings, league classifications or externally verified sporting classifications.

10. Communication and Support

If you contact Rankd by email or another available communication channel, we process the information you provide in order to respond to your request.

This may include:

• name
• email address
• message content
• related account or match information
• date and time of communication

11. Website Hosting and Server Logs

When you visit the Rankd website, hosting providers may process technical data required to deliver the website securely and reliably.

This may include IP addresses, access times, requested files, browser information and error logs.

This process is necessary to provide the website, ensure security and diagnose technical problems.

Website hosting provider: IONOS
Server location: Germany

12. App Infrastructure and Backend Services

Rankd may use external infrastructure providers to operate the app, authentication, database, storage and related backend services.

This may include processing account data, profile data, match data and technical data.

Backend / database provider: Supabase
Authentication provider: Supabase Auth
Storage provider: Supabase Storage
Server location: Germany

Where required, we enter into appropriate data processing agreements with service providers.

13. Email Delivery

Rankd may send necessary service emails, including login links, account notifications, match-related emails and support messages.

For this purpose, we may use an external email delivery provider.

Email provider: Resend
Purpose: sending transactional and service-related emails

These emails are necessary for providing the Rankd service.

14. Cookies and Local Storage

Rankd may use cookies, local storage or similar technologies that are technically necessary for providing the website or app.

These may be used for:

• login sessions
• authentication
• security
• remembering technical preferences
• ensuring correct functionality

At this stage, Rankd does not use analytics, advertising or tracking cookies on the website.

If optional analytics, advertising or tracking tools are introduced in the future, Rankd will update this Privacy Policy and, where required, request consent before using them.

15. Analytics and Tracking

In the current V1.1 website setup, Rankd does not use analytics or tracking tools.

No Google Analytics, Meta Pixel, advertising tracking or comparable analytics tools are implemented as part of this release.

If analytics tools are introduced in the future, this Privacy Policy will be updated accordingly.

16. Social Media Links

The Rankd website may link to external social media profiles.

When you click on a social media link, you leave the Rankd website and the privacy policy of the respective platform applies.

Rankd is not responsible for the data processing carried out by external social media platforms.

17. Recipients of Personal Data

Personal data may be processed by the following categories of recipients:

• hosting providers
• backend and database providers
• authentication providers
• email delivery providers
• technical service providers
• legal or compliance advisors, where necessary
• public authorities, where legally required

We do not sell personal data.

18. International Data Transfers

Some service providers may process data outside the European Economic Area.

Where personal data is transferred to countries outside the European Economic Area, we rely on appropriate safeguards under GDPR, such as:

• adequacy decisions
• Standard Contractual Clauses
• additional technical and organisational measures where required

Specific provider information will be added once all providers have been confirmed.

19. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• account activity
• ongoing use of Rankd
• legal retention obligations
• support requests
• security requirements
• dispute resolution
• platform integrity and abuse prevention

Account data is generally retained while the user account exists.

Match and result data may be retained where necessary to preserve match history, ranking integrity, dispute handling and platform security.

If a user requests account deletion, personal data will be deleted or anonymised unless further retention is required or permitted by law.

20. Account Deletion

Users may request deletion of their Rankd account.

Where technically and legally possible, Rankd will delete or anonymise personal data associated with the account.

Some data may remain where necessary for:

• legal compliance
• security
• fraud or abuse prevention
• dispute resolution
• preservation of match and ranking integrity in anonymised or aggregated form

21. Your Rights

Under the GDPR, you may have the following rights:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to processing
• right to withdraw consent where processing is based on consent
• right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at: support@getrankd.app

22. Right to Object

Where we process personal data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

If you object, we will stop processing the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is necessary for legal claims.

23. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

These measures may include:

• access controls
• encrypted connections
• secure authentication
• role-based access
• logging and monitoring where appropriate
• regular technical review

No online service can guarantee absolute security.

24. Children

Rankd is intended for users aged 18 and older.

We do not knowingly provide Rankd to children or knowingly process personal data of children.

If we become aware that a child has created an account, we may delete the account and associated data.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if the product changes, new service providers are introduced or legal requirements change.

The current version will always be available on this page.

26. Contact

For privacy-related questions, please contact:

Stoll 5to11 GmbH
Döllingerstr. 20, 80639 München, Germany
Email: support@getrankd.app