Privacy Policy
Last updated: October 18, 2026
1. What We Collect
When you use MatchPoint, we collect:
- Phone number for account authentication (SMS OTP) and optional match reminders
- USTA NorCal credentials (encrypted at rest) to sync your team roster and availability
- Team and player data scraped from publicly available pages on TennisRecord.com and USTA NorCal (leagues.ustanorcal.com), including player names, ratings, and match results
- Lineup decisions you save or lock within the app
- Messages you send to the in-app assistant, used to answer you
- A device token from the iOS or Android app, if you allow notifications, so we can send push notifications to that device
2. How We Use Your Data
- Generate optimized lineup recommendations for your USTA league matches
- Send match reminders and scrape status alerts via SMS or email
- Compute player ratings, head-to-head records, and partner chemistry stats
- Predict opponent lineups based on publicly available match data
- Answer questions in the in-app assistant and write match reports
3. Third-Party Services
We use the following services to operate MatchPoint:
- Supabase for authentication and database storage
- Upstash Redis for cached team data
- Twilio for SMS notifications
- Resend for email alerts
- Vercel for hosting
- An AI service provider to answer assistant messages and write match reports. It receives your message and the team and match data needed to answer it (player names, scores, lineups), and is not permitted to use that data to train its models.
- Push notification services from Apple and Google to deliver notifications to the app
We scrape publicly available data from TennisRecord.com and USTA NorCal. We are not affiliated with either organization.
4. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with the service providers listed above as necessary to operate the app.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support of our services (such as Twilio for SMS delivery and Supabase for authentication) is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5. Data Retention and Deletion
Your data is retained as long as your account is active. USTA credentials are encrypted at rest and can be removed independently of your account.
In the app: tap your initials in the top-right corner → Delete account… → Request deletion. Or sign in on the account deletion page, which also lists what we delete and what stays. Deleted within 7 days. You can keep using MatchPoint until then. No longer have access to that phone number? Email matchpoint-admins@googlegroups.com and include the phone number on your account.
6. Security
USTA credentials are encrypted using AES-256-GCM before storage. All data is transmitted over HTTPS. Access to production systems is restricted to authorized administrators.
7. SMS and Email Communications
Verification codes (transactional). When you sign in, we text a one-time passcode to verify your phone number. These messages are part of phone-based authentication and are sent only when you request a code.
Match notifications (optional). This is a distinct, unchecked-by-default opt-in presented during account setup or later from the app. The disclosure shown at opt-in is: “Text me rating updates, match reminders, availability requests and team updates. Automated & recurring texts from MatchPoint; frequency varies. Message & data rates may apply. Reply STOP to opt out, HELP for help. Consent not required to use MatchPoint.”
Reply STOP to any message to unsubscribe from notification SMS at any time. Reply HELP to any message for help, or contact us at the email below. Verification codes may continue after you opt out of notifications, since they are required to sign in by phone. For the full messaging program disclosure, see our Terms of Service.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support of our services (such as Twilio for SMS delivery and Supabase for authentication) is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
8. Contact
For privacy questions, contact: matchpoint-admins@googlegroups.com To delete your account, use the account deletion page.