Privacy Policy

How SameClub (rwxsolutions) collects, uses, shares and protects your personal data — including Google user data — for users in Europe.

Last updated: 17 September 2026

1. Who we are

SameClub is operated by rwxsolutions, registered in the Netherlands. KvK: 96218487. VAT (BTW): NL005195999B73. We act as the data controller under the GDPR for personal data processed through SameClub. Privacy requests: sameclub2026@gmail.com (subject: SameClub privacy).

2. What data we collect

Depending on how you use SameClub, we may collect:

• Account: club membership name, email address, password (stored only as a secure hash).
• Google Sign-In (optional): if you choose Continue with Google, we receive your Google account email, name and basic profile identifiers needed to create or sign in to your SameClub account. We do not receive your Google password.
• Profile: optional photo, sport preferences, level, availability and other profile fields you enter.
• Club context: the tennis/padel/pickleball club you select; SameClub is club-scoped so other members of that club may see limited profile and listing information.
• Listings and participation: practice sessions you create or join (sport, time, court hint, capacity, join requests, invites).
• Google Calendar (optional): if you connect Google Calendar in settings, we request permission to create and update calendar events for matches you host or join after they are confirmed. We use this only to add listing title, date/time, location/court hint, description and a link back to SameClub. Calendar access tokens are kept in your browser session for that purpose. The Google scope used is https://www.googleapis.com/auth/calendar.events (create/update events only — not full calendar read of all calendars).
• Messages and friend connections within your club, if you use those features.
• Stories: photos you upload (typically removed after about 24 hours).
• Technical: session tokens to keep you signed in; server and security logs (e.g. IP, timestamp, error diagnostics) to operate and protect the service.
• Optional notifications: if enabled, push or in-app notification preferences and delivery endpoints.

3. How we use data (including Google user data)

We use personal data only to provide and improve SameClub’s user-facing features: show club members and listings, process join flows and messages, send account or password emails, keep the platform secure, authenticate you via optional Google Sign-In, and (when you enable it) add confirmed match events to your Google Calendar. We do not sell your personal data or Google user data. We do not use Google user data for advertising, retargeting, interest-based ads, credit scoring, lending, data brokerage, or to train generalized AI/ML models. We do not operate your club’s court booking system; SameClub is a separate practice-partner community for your club. Processing usually happens in the EU/EEA with processors under written agreements. Legal bases include: (a) performance of our contract with you; (b) legitimate interests such as security and service improvement; (c) consent for optional features (including Google Calendar); (d) legal obligations where applicable.

4. Google API Services / Limited Use

SameClub’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to operate the features described in this policy (sign-in and optional calendar sync). You can disconnect Google Calendar in SameClub settings (Connect calendar) and revoke access anytime in your Google Account permissions. Outlook/Apple calendar options may open a template or download an .ics file on your device without Google Calendar API write access.

5. Sharing, transfer and disclosure of Google user data

We do not sell, rent or trade Google user data. We do not transfer or disclose Google user data to advertising platforms, data brokers, information resellers, or for personalized/interest-based advertising.

We share or transfer Google user data only as needed to provide SameClub’s features:

• Service providers (processors) that host or operate our infrastructure (for example cloud hosting, database and transactional email). They process data only on our instructions to run SameClub, under written agreements, and not for their own marketing.
• Google, when you use Google Sign-In or connect Google Calendar: authentication and calendar event create/update calls go to Google’s APIs so the feature works in your Google account.
• Legal / safety: if required by law, or to protect users and the service (e.g. investigating abuse or security incidents).

We do not transfer or disclose your information to third parties for purposes other than those described in this policy.

6. Data protection and security

Security procedures are in place to protect the confidentiality and integrity of your data, including Google user data. In particular:

• We use encryption in transit (HTTPS/TLS) to protect information exchanged between your device and SameClub.
• Account passwords are stored only as secure one-way hashes (we never store Google passwords).
• Google Calendar access tokens stay in your browser session for the sync feature and are removed when you disconnect or the session ends.
• Access to production systems is restricted to authorized operators who need it to run and secure the service.
• We apply proportionate monitoring and logging to detect and respond to abuse or security issues.

No method of transmission or storage is 100% secure; we work to protect your information with industry-standard safeguards appropriate to the data we process.

7. Cookies

We do not use advertising or behavioural tracking cookies for marketing. We may use strictly necessary storage (e.g. session/login and language preference). If that changes, we will update this policy.

8. Retention

We keep personal data while your account is active. Stories are short-lived by design. Google Calendar tokens in the browser session end when you disconnect or the session expires. If you delete your account, we anonymise or remove identifiers and retain only what we must for law or proportionate backups, anonymised where possible.

9. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability and object to certain processing where applicable. You can update much of your profile in the app. For other requests, contact sameclub2026@gmail.com.

10. Account deletion

You can delete your SameClub account in the app:

1. Open Profile.
2. Go to Settings.
3. Choose Delete account and confirm (password may be required).

After deletion, your login is deactivated and personal identifiers are removed or anonymised. Limited logs/backups may be kept up to about 90 days, then deleted on a rolling basis. Fully anonymised statistics may remain. If you cannot access the app, email sameclub2026@gmail.com from your account email.

11. Changes

We may update this policy; the «Last updated» date will change. Material changes will be indicated where reasonable. If we change how we use Google user data, we will update this policy and, where required, seek your consent before using that data in a new way.