Privacy Policy

Effective Date: May 11, 2026 Last Updated: May 11, 2026

This Privacy Policy describes how Pugly LLC ("Pugly", "we", "us", or "our") collects, uses, and shares information when you use the Pugly mobile applications, the website at pugly.app, and related services (the "Service").

By using the Service, you agree to the practices described in this Policy. If you do not agree, do not use the Service.

1. Information We Collect

Information you provide

Account information — name, email address, and profile photo from your sign-in provider (currently Google).
Profile details — self-reported skill level, home court or city, optional bio, paddle preference, availability.
DUPR ID — only if you choose to link your DUPR account.
Pickle Pals (friends) — connections you build with other users.
Sessions and RSVPs — sessions you host, join, decline, or attend; check-ins and no-shows.
Match results — scores and games you submit after play.
Peer ratings — skill, sportsmanship, and vibe scores plus tags you give other players.
Communications — anything you send to support or feedback channels.

Information collected automatically

Device and technical data — device type, operating system, app version, language, time zone.
Log data — IP address, access times, pages or screens viewed, crash reports, and diagnostic information.
Approximate location — derived from IP address. Precise location is only collected if you explicitly grant permission (for example, to mark a court intent).

Information from third parties

Google sign-in — basic profile (name, email, photo) shared by Google when you sign in.
DUPR — your verified DUPR rating and match history if you link your account.

We do not knowingly buy personal information from data brokers.

2. How We Use Your Information

We use your information to:

Create and manage your account.
Match you with appropriate sessions and players based on skill, location, and preferences.
Calculate and display ratings (internal Glicko-2 and, where applicable, DUPR).
Track attendance reliability and peer feedback.
Send service-related notifications (e.g., session reminders, RSVP changes).
Detect, investigate, and prevent fraud, abuse, harassment, and Terms violations.
Improve and develop new features.
Comply with legal obligations and enforce our agreements.

3. Legal Bases for Processing (EU/UK Users)

If you are in the EU, UK, or another jurisdiction with similar laws, we rely on the following legal bases under the GDPR / UK GDPR:

Performance of a contract — to provide the Service you signed up for.
Legitimate interests — to improve the Service, prevent fraud and abuse, and operate our business, balanced against your rights.
Consent — for optional features such as DUPR linking, precise location, or marketing communications. You can withdraw consent at any time.
Legal obligation — to comply with applicable laws and respond to lawful requests.

4. How We Share Information

With other users

Your profile (name, photo, city, ratings once eligible, friend graph) is visible to other users who can see your sessions. Match results are visible to participants. Peer ratings you give are anonymous to the recipient but stored by us and used to compute aggregate scores.

With service providers

We share information with vendors that help us operate the Service, under contracts that restrict their use to providing services to us:

Google Cloud / Firebase — authentication, database (Firestore), file storage, push notifications, analytics. Data is processed in Google's infrastructure, primarily in the United States.
Vercel — hosting for the pugly.app web app and serverless functions (waitlist signup, account-deletion endpoint).
Resend — transactional and waitlist email delivery (signup confirmation, double opt-in, product notifications).
DUPR — only if you choose to link your DUPR account. DUPR is a third-party rating service with its own privacy policy.

For legal and safety reasons

We may disclose information when we believe in good faith that it is necessary to:

Comply with applicable law, court orders, or government requests.
Enforce our Terms of Service.
Protect the rights, property, or safety of Pugly, our users, or others.
Investigate fraud, security, or technical issues.

Business transfers

If Pugly is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

We do not sell your personal information

We do not sell personal information for money. We do not "share" personal information for cross-context behavioral advertising as defined under California law.

5. International Data Transfers

Pugly is operated using infrastructure in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries with different data-protection laws than yours.

For users in the EU, UK, and Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms approved by relevant authorities.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. Match history, ratings, and peer feedback may be retained in anonymized or aggregated form for product functionality and analytics.

Retention windows. Specific categories are retained for the following periods unless a longer period is required by law:

Account profile data (name, email, photo, skill level, friend graph, RSVPs, sessions) — for the life of your account, then purged from operational systems within 90 days of account deletion (see "Deleting your account" below).
Match scores and ratings histories — retained for the life of the account; on deletion, your authorship is severed (your name is replaced with "Deleted user" and your photo is removed) but the underlying match record remains so co-players keep their history.
Peer ratings you gave others — retained indefinitely in anonymized form. On account deletion, your authorship is severed; the rating score itself stays so the recipient's aggregate is not unfairly skewed.
Audit, safety, and moderation logs — up to 2 years, used for fraud prevention, abuse detection, dispute resolution, and compliance with legal obligations. May be retained longer where law requires.
Waitlist email and double-opt-in records — retained until you unsubscribe or request deletion; bounce/complaint records may be kept indefinitely so we don't re-send to addresses that previously rejected us.
Sub-processor retention — Firebase, Vercel, Resend, and (if linked) DUPR each retain data under their own Data Processing Agreements. We do not control those windows; we ensure each is contractually bound to retain only as long as needed to provide services to us.

Deleting your account. You can delete your account at any time from within the app: open Settings (the gear icon in your profile) → Delete account, then type DELETE to confirm. The deletion runs immediately:

Your user profile, RSVPs, friendships, notifications, peer-ratings-as-ratee, feedback, and Firebase Auth identity are erased.
Peer ratings you submitted about other players are anonymized (the rating score stays so it does not unfairly drop someone else's aggregate; your authorship is severed).
Match scores you participated in remain so your co-players keep their match history, but your display name is replaced with "Deleted user" and your avatar is removed.

Within 90 days, we also purge any remaining traces from operational backups and logs, except where retention is required by law (for example, for tax, dispute resolution, or fraud-prevention purposes).

If you cannot reach the in-app path (e.g., you lost access to your sign-in), email hi@pugly.app and we will process the deletion within 30 days of identity verification.

7. Your Rights and Choices

Depending on where you live, you may have the following rights:

Access — request a copy of the personal information we hold about you.
Correction — request that we fix inaccurate or incomplete data.
Deletion — request that we delete your data ("right to be forgotten").
Restriction or objection — limit or object to certain processing.
Portability — receive your data in a machine-readable format.
Withdraw consent — at any time, where processing is based on consent.
Opt out of "sale" or "sharing" — under California and similar laws (we do not currently sell or share for cross-context behavioral ads).
Lodge a complaint — with your local data-protection authority (EU/UK users may contact their national DPA; UK users may contact the ICO).

To exercise any of these rights, contact us at hi@pugly.app. We may need to verify your identity before fulfilling a request. We will respond within the timelines required by applicable law (e.g., 30 days under the GDPR; 45 days under the CCPA, extendable as permitted).

8. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EU and other jurisdictions where applicable). We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, please contact hi@pugly.app and we will take steps to delete it.

9. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, Firebase security rules, role-based access controls, and ongoing monitoring. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

10. Cookies and Similar Technologies (Web)

The pugly.app website uses essential cookies for authentication and basic functionality. We do not currently use third-party advertising cookies. If we add analytics or advertising cookies in the future, we will update this Policy and provide appropriate consent controls (including, where required, a cookie banner with granular consent).

11. Push Notifications

If you grant permission, we may send push notifications for things like session reminders, RSVP changes, and match invites. You can disable notifications in your device settings.

12. Third-Party Links and Services

The Service may contain links to or integrate with third-party services (such as DUPR). This Policy does not apply to those services. Please review their privacy practices separately.

13. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above shows when it was last revised. If we make material changes, we will notify you through the Service or by email at least 30 days before the changes take effect, so EU/UK consumer-law notice periods are honored. Where required by law, we will obtain your consent before applying changes that affect your rights.

14. Contact Us

Questions, requests, or concerns about this Policy or your data?

Pugly LLC
212 W. Troy St. STE B
Dothan, AL 36303
Email: hi@pugly.app

EU representative (if applicable, under GDPR Art. 27): Not yet appointed; we will list any required representative here if and when applicable.

UK representative (if applicable, under UK GDPR Art. 27): Not yet appointed; we will list any required representative here if and when applicable.