Privacy Policy

Last updated: 23 July 2026

This policy explains how GlassWall (“GlassWall”, “we”, “us”) collects, uses, shares, and protects your personal data when you use the GlassWall mobile app and glasswall.app (together, the “platform”) — a service for booking padel courts, matches, and coaching at participating clubs in the United Arab Emirates. It is written to meet the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”).

Who we are (data controller)

GlassWall is the data controller responsible for your personal data — we decide why and how it is processed. You can reach us at support@glasswall.app for any question about this policy or your data, or to reach the person who handles data-protection requests.

Information we collect

• Account details — your name, email address, phone number, profile photo, and (optionally) date of birth, provided when you create or update an account. If you sign in with Apple or Google, we receive the name and email address you approve on their consent screen.
• Activity — your bookings, match participation, results, and skill rating, generated as you use the platform.
• Payment information — payments are processed by Stripe. We never see or store your full card number; we keep only what Stripe returns (the card brand, last four digits, and a secure token) so a card you choose to save can be reused for future bookings.
• Device data — a push-notification token for your device, and basic technical logs (such as IP address and app version) kept for security and troubleshooting.
• Support communications — messages you send to support@glasswall.app.

Why we use it and our legal basis

Under the PDPL we process personal data only where we have a lawful basis to do so. We rely on the following:

• To perform our contract with you (PDPL Article 4) — creating and managing your account, taking bookings and payments, organising matches, and maintaining skill ratings.
• With your consent — sending optional communications and, where required, transferring your data across borders. You can withdraw consent at any time.
• To meet our legal obligations — keeping tax, accounting, and transaction records required by UAE law.
• To protect our legitimate interests and yours — keeping the platform secure, preventing fraud and abuse, and responding to support requests.

We send booking and payment confirmations, reminders, and other service notifications by push and email. You can control notification preferences in the app’s settings. We do not sell your personal data, and we do not use it for third-party advertising.

Who we share it with

• The club you book with sees your name, contact details, and booking information so it can operate your session.
• Other players in a match you join can see your display name and skill rating.
• Service providers that process data on our behalf under contract, each receiving only what it needs:
  • Stripe — payment processing and card storage.
  • Supabase — database hosting and authentication.
  • Resend — delivery of transactional email.
• Authorities, where disclosure is required by applicable law or to protect legal rights.

International data transfers

Some of our service providers store and process data outside the UAE, which is a cross-border transfer under PDPL Article 18:

• Supabase hosts our database and authentication in India (region ap-south-1).
• Resend processes transactional email in the European Union.
• Stripe may process payment data in the United States and other countries where it operates.

Where the destination country has not been recognised by the UAE Data Office as providing an adequate level of protection, we rely on appropriate safeguards — such as contractual data-protection clauses with each provider — or on your explicit consent, as permitted by the PDPL. By using the platform you consent to these transfers for the purposes described above.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from the app’s settings, or by emailing support@glasswall.app. After deletion we remove your profile and personal data, retaining only records we are legally required to keep (such as payment and accounting records) for the period mandated by UAE law, after which they are deleted.

Your rights

Under the PDPL you have the right to:

• Access the personal data we hold about you and how it is processed (Article 11).
• Receive a portable copy of the data you provided, in a structured format (Article 13).
• Correct or erase inaccurate or unnecessary data (Article 14).
• Restrict or object to certain processing (Articles 15 and 16).
• Withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email support@glasswall.app. We respond within the period set by the PDPL. If you believe we have not handled your data properly, you may complain to the UAE Data Office.

Security and data breaches

Data is encrypted in transit, access is restricted by role, and payment credentials are held by Stripe, not by us. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data. If a breach occurs that poses a risk to your privacy, we will notify the UAE Data Office and, where required, affected users, in line with PDPL Article 20.

Children

The platform is intended for users aged 16 and over. A person under 16 may only use it through, and with the consent of, a parent or legal guardian, who is responsible for their use and accepts this policy on their behalf. If we learn that we have collected a child’s data without the required consent, we will delete it.

Changes to this policy

If we make material changes, we will update this page and note the new date above. Your continued use of GlassWall after a change means you accept the updated policy.

Contact

Questions about this policy or your data: support@glasswall.app.