Privacy policy

1. Who is responsible

Cuatr is made by:

Cuatr is run by one person. Write to the address above for any privacy question or request.

Cuatr is built so that we don't receive your data. What you enter is stored on your devices and in iCloud, which Apple runs for you under Apple's privacy policy. Where data protection law makes us responsible (for the way the app is built, for this website and for emails you send us), we're the controller named above.

2. Where your data lives

• On your iPhone and Apple Watch. The app keeps a local copy of your data so it opens quickly and works offline. It's shared with Cuatr's widgets and the Watch app through storage that only Cuatr can read.
• In your private iCloud database (Apple's CloudKit, container iCloud.app.cuatr): your profile, your saved clubs and a copy of your purchase status. Only you can read it.
• In each group's shared zone. A group you create lives in your iCloud and is shared with its members through Apple's iCloud sharing. A group someone else owns lives in their iCloud and appears in yours as shared data.

We have no access to any of these. If you're not signed in to iCloud, Cuatr keeps everything on your iPhone only, and you can't share groups.

iCloud storage counts toward the group owner's iCloud plan. Apple encrypts iCloud data in transit and at rest; see Apple's iCloud data security overview.

3. Your profile

• What it contains: your nickname; an optional photo (scaled down to a small 256-pixel image); your playing hand; your preferred side (drive, revés or either); your answers to the six level questions; your starting level; and, if you add one, how people pay you (see section 11).
• Photo: you pick it with Apple's photo picker, so Cuatr only receives the one photo you choose and never gets access to your library.
• Where: your private iCloud database. Your answers to the level questions stay there; they're never shared.
• How long: until you change or delete it.

4. Groups and what members see

When you join or create a group, Cuatr writes a member record for you into that group. Everyone in the group can see it:

• your nickname, photo, hand and preferred side;
• your starting level, your current Cuatr level, whether it's provisional and how many matches you've played;
• your payment handle, if you've added one in your profile (for example an IBAN with the account holder's name, a Bizum or MB WAY phone number, a Satispay tag, or a PayPal.me or Revolut username). Cuatr shows it when you organise a match, but it's stored in your member record in every group you're in, so add it only if you're happy for your groups to have it;
• your role (owner, admin or member) and when you joined;
• what you do in the group: whether you're in, out or on the waitlist, your paid ticks, the points you score as the scorer, match results, and the nights you play.

Organisers can add guests by name to a match or a night. Only add someone's name if they're fine with it.

Invites. Groups are shared with Apple's iCloud sharing. When the owner invites people, Apple's sharing sheet uses their contacts on the owner's device; Cuatr itself doesn't access your contacts. Apple's sharing shows the group owner the name or email address of each person's Apple Account, and may show participants to each other. If the owner turns on “Link & QR”, anyone with the link can join until it's turned off again. The owner can remove people from the share through Apple's sharing sheet.

Joining with a link. When you open “Join with a link”, Cuatr checks the clipboard once for an iCloud invite link, so you don't have to paste it. iOS may show that Cuatr pasted from another app. Nothing from the clipboard is stored or sent unless it's an invite link you then join with.

Nobody outside a group can see its data. Everything above is stored in iCloud, not by us.

5. Live score on court

While a match's live screen is open, Cuatr connects directly to the other iPhones on your court that have Cuatr open, using Apple's peer-to-peer connectivity (MultipeerConnectivity, over your local network, Wi-Fi and Bluetooth). iOS asks for local network permission the first time.

• Nearby devices running Cuatr can see your nickname, the match's identifier and a random device code while the live screen is open.
• The connection is encrypted, and points are only accepted for the same match.
• Each point is also saved to the group in iCloud, so members who aren't on court can follow.

None of this passes through us. You can turn local network access off in Settings → Privacy & Security → Local Network; the score then reaches the others through iCloud only.

6. Apple Watch

The Watch app talks to your iPhone directly (WatchConnectivity). The iPhone sends the match you're scoring (team nicknames and the score); the Watch sends back the points you tap. A Watch out of range keeps its points and sends them when your iPhone is back. The Watch app doesn't write to iCloud itself. A “Quick match” scored only on the Watch stays on the Watch.

7. Apple Health

Health access is optional. Cuatr explains it before iOS asks, and declining doesn't affect scoring.

• What Cuatr writes: a workout, with active energy burned, for each match you score on Apple Watch. Apple Health has no padel type, so it's saved as a tennis workout named Cuatr · Padel.
• What Cuatr reads: heart rate and active energy, only on Apple Watch and only while a match runs as a workout, to build that workout and show your heart rate on the scorer. You can hide the heart rate in the Watch app's settings.
• Where it goes: it stays in Apple Health on your devices. Cuatr doesn't store it in its own data or in iCloud, and never sends it to your group, to the other phones on court, to the Live Activity or to us. The iPhone app asks for the permission but never reads Health data.

We don't use Health data for advertising or anything else, and don't share it with anyone. You can change Cuatr's access at any time in Settings → Privacy & Security → Health → Cuatr, on your iPhone.

Cuatr isn't a medical device, and workout values are estimates from your Apple Watch.

8. Notifications

Cuatr's notifications are created on your iPhone: a reminder before a match you're in, a spot opening up, you're in from the waitlist, a score posted, the next Americano round, and one court-fee reminder. iOS asks for permission at the end of onboarding; you can change it in Settings → Notifications → Cuatr.

To keep your groups up to date, Cuatr also receives silent notifications from Apple's iCloud (CloudKit) service when there's new data. They carry no content, come from Apple and don't pass through us. We don't run a push server and don't collect device tokens. Live Activities are updated on your device.

9. Widgets, Live Activities and your device

• Widget and Watch complication: your next match (time, club, how many are missing) or the live score.
• Live Activity and Dynamic Island: team nicknames and the score, the club, court and group name, and during an Americano night your round, court, partner and opponents. These can show on your Lock Screen; you can turn them off in Settings → Cuatr.
• On-device settings: a random device code (used so two of your devices never score the same point twice), your selected group, onboarding drafts and similar preferences.
• Crash reports: if you've chosen in iOS to share analytics with app developers, Apple may give us crash reports and usage statistics that don't identify you. Cuatr adds no analytics or crash-reporting tools of its own.

10. Clubs and Maps

Clubs you save (name, address and map position) are stored in your private iCloud. When you search for a club, the text you type is sent to Apple's Maps search to find places, under Apple's privacy policy. Cuatr doesn't ask for your location. “Open in Maps” opens Apple Maps.

11. Court fees and payment shortcuts

Money never moves through the app. Cuatr divides the court fee, and each player ticks when they've paid. A paid tick records only that you ticked it, and when.

The pay button uses the organiser's own details: it opens a PayPal.me, Revolut or Satispay link, or copies an IBAN, Bizum or MB WAY number to your clipboard. Payments then happen in your bank or that service, under its own terms and privacy policy. Cuatr never sees or processes a payment.

12. Purchases: Cuatr Pro and Night Pass

Cuatr Pro and the Night Pass are sold through the App Store. Apple handles the payment; we never see your payment details or your Apple Account. Cuatr checks your purchases with Apple on your device, and keeps a copy of your Pro status and Night Pass use in your private iCloud so your devices agree. We use no third-party subscription service. Apple gives us sales reports that don't identify you.

13. What we don't do

• No servers of our own, and no copies of your data.
• No advertising, and no data for advertisers.
• No tracking across apps or websites, and no advertising identifier (IDFA).
• No analytics, crash-reporting or advertising SDKs.
• No selling or renting of data.
• No access to your contacts, camera, photo library or location.
• No Health data outside Apple Health.
• No chat: Cuatr makes cards and links you can share where you already talk.

14. This website

cuatr.app is a static website hosted on Cloudflare Pages by Cloudflare, Inc. To deliver the pages and protect them from attacks, Cloudflare processes technical data such as your IP address and browser details, and keeps standard server logs, under its own terms. The site sets no cookies, uses no analytics or tracking, and loads nothing from other sites: its fonts and images come from cuatr.app itself. The animations run in your browser and send nothing anywhere.

The file at /.well-known/apple-app-site-association lets iOS open cuatr.app links in the app. Apple fetches it; it contains no personal data.

Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).

15. Email

When you write to support@cuatr.app, we use your email address and what you tell us to answer you. If you ask to hear about the launch, we use your address only for that one reply. Emails are kept as long as needed to help you, then deleted. Mail to support@cuatr.app is received by Cloudflare Email Routing (Cloudflare, Inc.) and forwarded to a mailbox hosted by Google (Gmail), where we read and answer it.

Legal basis: our contract with you, or our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR).

16. Legal bases

Most of what Cuatr does happens on your devices and in your iCloud, without us. Where the GDPR applies to it, the bases are:

17. Who receives data

We may disclose data we hold (in practice, emails) if the law requires it. We don't sell or rent data to anyone.

18. Transfers outside the EU and Türkiye

Apple, Cloudflare and Google are US companies and may process data outside your country. For data we're responsible for (emails and the website), transfers rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the Standard Contractual Clauses in their data processing terms. iCloud data is processed under the terms you agreed with Apple.

19. How long data is kept

20. Deleting your data

In the app: Me → Delete my data → Delete everything. This:

• marks you as having left every group;
• deletes the groups you own, for everyone;
• removes you from groups other people own;
• deletes your profile, saved clubs and purchase copy from your iCloud;
• clears the copy on your iPhone.

What stays: in groups other people own, your member record (nickname, photo, payment handle, level) and your past ins and outs, ticks, points and results stay in the owner's iCloud, marked as having left, so their match history still adds up. If you want your photo and payment details gone from those groups too, remove them first in Me → Edit, and wait until your groups have synced, then delete your data. A group owner can delete the whole group at any time.

To leave or delete a single group: Group → settings (gear) → Leave group, or Delete group if you own it. You can also remove Cuatr's iCloud data in iOS Settings → [your name] → iCloud, and deleting the app removes its local copy. Apple Health workouts are deleted in the Health app.

Deleting your data doesn't cancel a Cuatr Pro subscription; cancel it in Settings → [your name] → Subscriptions.

Because we never receive your app data, we can't delete it for you, but we're happy to walk you through it: support@cuatr.app.

21. Your rights (GDPR)

Under the GDPR you have the right to:

• access the data held about you, and get a copy;
• have wrong data corrected;
• have your data deleted;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw your consent at any time, for the future (for Apple Health, in iOS Settings);
• complain to a data protection supervisory authority, for example in the EU country where you live.

Your app data is in your hands: you can see, change and delete it in Cuatr and in iCloud, and Apple offers a copy of your iCloud data at privacy.apple.com. For anything we hold (emails), or for help, email support@cuatr.app. We answer within one month. We don't make decisions about you based solely on automated processing; the Cuatr level is a number for playing, with no legal or similar effect.

22. If you live in Türkiye (KVKK)

Under Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is Burak Özaslan, at the address in section 1. Cuatr doesn't transfer your app data to us; it is stored on your devices and in iCloud (Apple, abroad) under your Apple Account, and shared only with the groups you join. Under Article 11 of KVKK you can ask whether personal data about you is processed, request information and a copy, learn the purpose and the recipients in Türkiye or abroad, have incomplete or wrong data corrected, have data deleted or destroyed, have recipients told about corrections or deletion, object to a result against you arising solely from automated analysis, and claim compensation for damage from unlawful processing. Send requests to support@cuatr.app; we answer within 30 days. You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). The Turkish version of this policy is at cuatr.app/tr/privacy.

23. If you live in the US

Some US state laws give you rights over your personal data, such as the right to know what's collected, to get a copy, to correct it and to delete it. Cuatr doesn't collect personal data on our own systems; this policy describes what the app stores in iCloud and who can see it. We don't sell or share personal data for targeted advertising, and we don't process health data beyond writing workouts to Apple Health with your permission. To use your rights, use the app (section 20) or email us.

24. Children

Cuatr isn't directed at children under 13, and we don't knowingly collect data from children; we don't collect personal data through the app at all. If a child uses Cuatr in a family padel group, a parent or guardian can delete the child's data in the app (Me → Delete my data). If you have questions, write to us.

25. Changes to this policy

When we change how Cuatr handles data, we update this page and the date at the top, and we tell you in the app about important changes before they take effect.