Privacy Policy

URBANDINKR is a pickleball app for adult players in the Philippines, run by UrbanDrip at urbandrip.club. On Google Play it is listed under the developer name craaazy.dev. We decide how your personal data is used here, and you can reach us through our contact form. We follow the Data Privacy Act of 2012 (Republic Act No. 10173).

• From Google when you sign in: your Google account ID, email address, name and profile photo.
• Your age confirmation: that you said you are 18 or over, the date, and which version of the Terms you accepted. We don't ask for your birth date.
• Your profile: handle, display name, town and optional barangay, self-rated level, bio, whether you want to be suggested to nearby players, your privacy settings, whether you hid the first-steps list and, if you choose, your playing hand, preferred side and court stacking preference.
• Your play: matches, scores, ratings, session sign-ups, cancellations, court bookings, league entries and court check-ins.
• What you post: messages, group chats, chat and match photos, comments, reactions, reports, and help tickets with any screenshots you attach.
• Technical data: when you were last active, push notification details if you turn them on, the browser details and page recorded on help tickets, and server logs. Your IP address is also held briefly in memory to limit how many requests can be sent.
• Urban AI chats: your messages and its replies, linked to a scrambled session code and a salted hash of your IP address rather than your account. We use these to spot abuse. The hash can't be turned back into your IP address without our secret key.
• Urban AI reports: if you report a reply, your message, that reply, the reason and any note you add. We don't store your account, session or IP address with it.
• Waitlist: your email address and the date you joined.
• Contact form: your name if you give it, your email address, the topic you pick and your message. We don't save your IP address or browser details with it. Your IP address is only used for a temporary limit on how many messages can be sent.

Unless you change your privacy settings, anyone, even without signing in, and possibly search engines:

• Your handle, display name, Google profile photo, town, bio, level, rating, rating history, win and loss record, member-since date, and your playing hand, preferred side and court stacking preference if you set them.
• Confirmed matches, session rosters, comments and single shared feed posts.
• Courts you add, including their map pin.

Your privacy settings, in your profile settings:

• Who can see my profile: Everyone, Signed-in players or Only me. Anyone who can't see your profile gets your name, your handle and "This profile is private" from its link, with no stats. Search engines are told not to list it. They see "Private player" instead of your name on matches, feed posts, league tables, comments and share images, and a count instead of your name on session rosters. With Only me, you also leave the leaderboard, player suggestions, the list of who reacted, and name search.
• Show me on the leaderboard: when off, other players' ranks close up and only you can see your rank.
• Show me on court pages: we save this choice. No court page lists players yet.
• Show my town: when off, your town is hidden from your profile, lists and feed posts, and you leave leaderboards filtered by area. Player suggestions can still use your region to match you, without naming it.

What these settings don't change:

• Your rating still counts and your matches still work.
• People you played with still see your name on those matches. People in the same session or league, and its host or organizer, do too. Court owners see the name on a booking request.
• If you host a session or run a league, your name shows as the host. A team name you chose stays as written.
• Anyone with your exact handle can still pick you to log a match or message you. Handles stay unique, so someone can tell a handle is taken.
• People in a chat see your name in that chat.
• Match photos every player agreed to make public stay public until a player on the match makes them private.
• Link previews already shared can take an hour or so to update, and other apps and search engines may keep their own copies.
• Our admins can still see everything. Blocks, reports and fraud checks work the same, and we still use your data to keep the app safe.

Never shown to other players: your email address and barangay. Chats are visible to their members, tickets to you and our admins, and contact form messages to our admins only.

Match photos are visible to the players in that match and our admins, unless every player agrees to make them public.

Your photo comes from your Google account.

We never track your location in the background. Your browser asks for it only when you tap a feature that needs it.

• Near me and directions: your position stays in your browser and goes to Google Maps, not to our servers.
• Check-in: your position is sent to our server to confirm you are at the court. We do not keep the coordinates, but we keep the court, the day, your distance from it and the location accuracy for 365 days.
• Pinning a court: your position becomes the court's public pin if you choose it, and it may be sent to Google to look up the town and address.

We remove location data from photos before storing them.

• To run the service you asked for: accounts, matches, ratings, bookings, messaging and notifications.
• To answer you: we use what you send through the contact form to reply by email and to handle your question, appeal or request.
• For our legitimate interests: keeping the app safe, stopping abuse and cheating, handling reports, and fixing errors.
• With your consent: push notifications, browser location, and making match photos public. You can withdraw consent at any time, though the feature may stop working.
• Where the law requires it.

We do not sell your personal data, show ads, or use analytics or advertising trackers. These providers process data for us:

• Cloudflare: requests to our site pass through its network on the way to the app, so it handles your IP address, browser details and the pages you ask for.
• Render: hosts the app and its logs, in the United States.
• MongoDB: stores the database.
• Cloudinary: stores photos and screenshots.
• Google: sign-in, profile photos loaded directly from Google, and Maps when you use map features.
• Discord: sign-in for admins only.
• Our email provider: carries our reply when we answer a contact form message, along with your email address and anything we quote from your message.
• DeepSeek: receives your Urban AI messages, without your name or account, to write replies. Don't put personal details in Urban AI.
• Anthropic: receives scoreboard photos and the players' display names when you use automatic score reading. It only suggests a score, and your opponent still confirms it. You're told this before you take the score photo and can turn reading off there.
• Browser push services (such as Google, Apple, Mozilla and Microsoft): deliver notifications if you turn them on. These can include a short message preview, with phone numbers and emails masked.

These providers may process your data outside the Philippines, including in the United States. We don't control where DeepSeek processes Urban AI messages and can't promise a location, so please read DeepSeek's own privacy policy and assume your messages may leave the Philippines. We may also disclose data if the law requires it or to protect people's safety. Some of them handle data under their own privacy terms.

• Until you delete your account: your account, messages, tickets and match photos. These have no automatic expiry, except that a photo from a Log a match form you never sent is deleted after about a day. What deletion removes and keeps is below.
• Contact form messages: until we delete them on request. They aren't linked to your account.
• Check-ins and admin audit logs: 365 days.
• Share link statistics: 400 days.
• Notifications: 90 days.
• Urban AI logs: 30 days by default. Admins can set this between 1 and 365 days.
• Urban AI reports: 180 days. A dismissed report loses its text at once, and the rest goes after 30 days. To stop duplicates, an open report keeps a scrambled code made from your IP address and the reply, which goes when it is closed.
• Error reports: 30 days after the error was last seen, with emails and secrets removed.

Deleting a message clears its text and photo, though a report made before you deleted it keeps a copy of the text for our moderators. Deleting a comment hides it, but its text stays in our database until we erase it. Suspending an account does not delete its data.

Delete your account here. It ends right away and can't be undone. Signing in later with the same Google account starts a new, empty account. Your handle becomes free for someone else to pick.

We remove: your profile, email, Google ID and photo link, chat message text and photos, comments, reactions, notifications, push subscriptions, blocks, check-ins, session sign-ups, court bookings, host application, and help tickets with their screenshots. Every lineup and score photo you appear in is destroyed in photo storage, including ones another player uploaded. Your name is also replaced in copies held elsewhere, such as feed posts, chat lines and other players' notifications.

We cancel: upcoming sessions you host, your upcoming bookings, pending and disputed matches, and matches in progress. Pending and disputed matches never changed a rating. The people affected are told. In a running league your remaining fixtures count as forfeits, unrated.

We keep, without your name, handle, photo or town:

• Confirmed matches, rating changes and your rating number, shown as "Deleted player", because your opponents' ratings and records depend on them. Your id stays on these as a code that no longer leads to anything about you.
• Past sessions you hosted and league results, because they are part of other players' history. A team name you chose is removed, and so is any team name containing your name. A name your partner chose otherwise stays. The chat rows you sent stay in place with the text removed, so other people's conversations still read.
• Courts you added and leagues you organized. Our admins take them over so other players can keep using them. Booking requests at your courts stop until an admin turns them on again.
• Reports. Reports you filed that are open or upheld stay without your note. Reports about you that are open or acted on stay, and a report on a chat message keeps a copy of that message's text for our moderators. Dismissed ones are deleted.
• A deletion record, with no personal details, in our admin audit log for 365 days.

If you can't do it yourself: if you can't sign in, ask through our contact form and we'll check the request and delete the account. That leaves no bar: you can sign up again later. We remove the account of anyone under 18 the same way when we learn of it.

Suspended accounts: a suspended player can't sign in, so they ask through our contact form. If a suspended account is deleted, we keep a salted hash of its Google ID, and nothing else, so that person can't rejoin to avoid moderation. It can't be turned back into the ID and isn't linked to any match or person. We keep it for as long as the app runs, or until we lift the suspension on appeal, for our legitimate interest in keeping the app safe.

Urban AI logs, Urban AI reports and contact form messages aren't linked to your account, so deletion doesn't reach them. Logs and reports expire on the schedule above. Copies in provider backups and server logs, if any, expire on the providers' own schedules. Link previews already shared can take about an hour to update, and other apps may keep their own copy. Messages and comments other people wrote stay, even if they mention you by name, because they are that person's words. Ask through our contact form if one identifies you and you want it removed. If photo storage can't remove a file at that moment, we keep trying until it does.

Under the Data Privacy Act you can ask to be informed about, access, correct, delete or block your data, get a copy of it, object to its use, and claim damages where the law allows.

You can edit your profile, choose who can see it, delete your messages and comments, block players and turn off push notifications yourself, and delete your account at any time. There is no export button yet, so send a request for a copy of your data or anything else through our contact form using your sign-in email address. We'll reply there to check it's you, and we may ask for more detail before acting. If you can't sign in, the same form works for deletion too.

You can also complain to the National Privacy Commission of the Philippines.

We use only what the app needs. There are no advertising or analytics cookies.

• Sign-in cookies: keep you signed in, up to 30 days after your last visit.
• Urban AI cookie: a scrambled chat session code, for 1 day.
• Banner cookie: remembers a dismissed announcement, for 90 days.
• Browser storage: your Urban AI chat history, sound settings and similar preferences stay on your device until you clear them.
• Service worker: delivers push notifications.

We use encrypted connections, encrypted session cookies, access checks and rate limits, and we limit admin access. Messages are not end-to-end encrypted. Admins can't open private chats in the app, but they see the content of reported messages, and anyone with database access could read stored messages. No system is perfectly secure, so please don't share anything highly sensitive here.

URBANDINKR is for adults. You must be 18 or over to use it, and you confirm this when you set up your profile. Urban AI also works without an account, where we ask but can't check. We don't collect birth dates. If you're under 18, please delete your account. If you believe someone under 18 has signed up, tell us through our contact form. We'll review it and remove the account if it's confirmed. Our Child Safety Standards explain how we handle abuse.

We will update this page when our practices change and post a notice in the app for important changes. Questions or requests: use Help & feedback if you're signed in, or our contact form if you're not. Urban AI has its own short privacy notice, and using the app is also covered by our Terms of Use.