Privacy Policy

Information we collect

Information you provide

• Account & profile. When you sign up we collect your email address and, depending on how you create your profile, your name, username (handle), location, paddle, handedness, interests, starting and current DUPR rating, goal, and weekly training hours.
• Authentication. You can sign in with email and password, Google, or Apple, or continue anonymously. When you use Google or Apple sign-in, those providers share basic account identifiers with us so we can create or access your account.
• Activity you log. Sessions (type, duration, skills/focus, win-loss record, intensity, and notes), goals, upcoming events, the people you follow, posts to the activity feed, cheers, and any highlights you add.

DUPR information

If you connect your DUPR account, we receive your DUPR ID and rating information through DUPR’s sign-on flow and partner API, and we subscribe to rating updates so your profile and charts stay current. Connecting also provides access and refresh tokens, which we store in a private, access-restricted location and use only to read your DUPR data on your behalf. You can disconnect DUPR at any time from your account settings.

Information collected automatically

Like most online services, our infrastructure providers automatically log technical data such as IP address, device and browser type, and timestamps for security and reliability. We use authentication cookies/tokens to keep you signed in, and local storage on your device for preferences such as theme and accent color. We do not use third-party advertising trackers.

How we use information

• Provide, operate, and maintain the Service and your account.
• Display your profile, sessions, ratings, and progress toward your goals.
• Power social features — the leaderboard, following, activity feed, and public profiles.
• Sync and display your DUPR rating and history when you connect DUPR.
• Secure the Service, prevent abuse, and debug problems.
• Communicate with you about your account or important Service changes.

How information is shared

• Public profiles. Road to 5.0 is a community product. Your profile — including your name, handle, location, and DUPR rating and progress — may be visible to other users and on public pages such as the leaderboard. Use your profile’s privacy and visibility settings to control what you share, and consider what you choose to make public.
• Service providers. We use Google Firebase (authentication, database, and hosting) to run the Service, and DUPR to provide rating data when you connect your account. These providers process data on our behalf under their own terms and privacy policies.
• Legal & safety. We may disclose information if required by law or to protect the rights, property, or safety of our users or others.
• Business transfers. If the Service is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your profile and the data we hold for you — including your sessions, goals, events, following list, and stored DUPR tokens — though some information may persist briefly in backups before being overwritten.

Your choices and rights

• Access & update. Edit your profile and preferences from your account settings.
• Disconnect DUPR. Unlink your DUPR account at any time, which stops rating syncing and removes stored DUPR tokens.
• Delete your account. Permanently delete your account and associated data from settings.
• Visibility. Adjust your profile’s privacy setting to control what is shown publicly.

Depending on where you live, you may have additional rights over your personal data (such as access, correction, deletion, or portability). To make a request, contact us at privacy@roadto50.app.

Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it. Younger players should use the Service only with the involvement of a parent or guardian.

Security

We use industry-standard safeguards — including encrypted connections, access-restricted storage for sensitive credentials, and authentication controls — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International data transfers

Our service providers may store and process information in the United States and other countries. By using the Service, you understand your information may be transferred to and processed in locations with different data-protection laws than your own.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes may be communicated through the Service.

Contact us

Questions about this policy or your data? Reach us at privacy@roadto50.app.