Last updated: 21 October 2026
Vibora Padel Tracker ("Vibora", "we", "our", or "the app") is a padel match tracker for iPhone and Apple Watch. This Privacy Policy explains what data Vibora collects, where it is stored, who it is shared with, and the choices you have. We've written it to be as specific as possible: every category below corresponds to actual data the app reads or stores.
The data controller for the purposes of the GDPR is Kyrylo Latysh, sole proprietor, trading as Vibora, Ariadnis Street, Zavos Aqua Park Maisonettes G8, 4531 Mouttagiaka, Limassol, Cyprus — support@vibora.technology (see Legal).
The following data is processed by Vibora on your iPhone or Apple Watch and is not transmitted to our servers:
When you sign in with Apple, Vibora connects to our cloud backend (hosted on Supabase) so your matches and profile are available across devices. While you are signed in, the following data is uploaded automatically:
...@privaterelay.appleid.com) is stored.Each match you record is uploaded to our matches table after it ends (or on the next launch if you were offline). Each row contains:
Per-shot annotations (your text labels and notes) are stored in a separate shot_annotations table linked to the match.
players table under your account.follows table.competitions and competition_participants tables. Vibora does not read your device GPS — the coordinates stored are for the venue you pick, not for you.If you purchase a Vibora Pro subscription, payment is processed by Apple's StoreKit. We never see your card details. After Apple confirms a transaction, we store the following on our subscriptions and subscription_events tables, keyed to your user ID, in order to validate Pro entitlement and reconcile receipts:
vibora_pro_monthly), active/inactive flag, expiration date, original transaction ID.purchase, renewal, refund, etc.) including transaction ID, price (in cents), currency, and StoreKit environment (sandbox vs. production).By default, every match you sync is private to your account. You can opt in to publish an individual match to the Community feed via the "Publish to Community" sheet in the iPhone app. When a match is published:
You can unpublish a match at any time from the same sheet. Competitions and their participants are visible to all signed-in users by design.
Vibora shows no advertisements, and we do not sell your data. We never use HealthKit data, match sensor data or audio for analytics, advertising or attribution. Your advertising identifier (IDFA) is only used if you allow tracking in the iOS “Allow apps to track” prompt; you can change this at any time in iPhone Settings → Privacy & Security → Tracking.
We do not sell, rent, or share your personal data for marketing or advertising. Limited sharing happens only with the following processors that are necessary to run the app:
The website and the checkout at get.vibora.technology use only essential storage until you choose otherwise in the cookie banner. If you accept, we load the Meta Pixel and Mixpanel to measure which ads bring visitors and how the sign-up flow performs. When you buy on the website we collect your email address (to send your receipt and activation link) and the campaign that brought you (for example UTM parameters and the Meta click ID). Your quiz answers are stored on your device and attached to the purchase record so we can improve the plan we show you.
We may also disclose data if compelled by valid legal process (e.g. a subpoena or court order), or when necessary to protect the safety, rights, or property of users or the developer.
We retain your account, profile, matches, roster, annotations, follows, competitions, and subscription records for as long as your account is active. If you delete your account (see §8), all rows keyed to your user ID are deleted from our database, and your avatar JPEG is removed from storage. Backups may retain the data for up to 30 days before being overwritten.
Data is transmitted between your device and Supabase over TLS. At rest, our database and storage buckets are encrypted by Supabase using AWS-managed encryption. Access to production data is restricted to the developer. Authentication tokens are stored in the iOS Keychain on your device.
If you are in the EEA, UK, or Switzerland, you have additional rights under GDPR (right to object, right to data portability, right to lodge a complaint with your local supervisory authority). If you are a California resident, you have additional rights under CCPA/CPRA. To exercise any of these rights, email the address in Contact.
Our backend is hosted on AWS infrastructure. Depending on the Supabase region, your data may be processed in the United States or the European Union. Where applicable, transfers from the EEA, UK, or Switzerland rely on Standard Contractual Clauses.
Vibora is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal data, contact us and we will delete it.
Vibora reads heart rate and active energy from Apple HealthKit on the Apple Watch and writes a workout summary back to HealthKit when you finish a match. Aggregated metrics derived from HealthKit (average HR, total calories, HR series, calorie series) are uploaded to our servers as part of each synced match, as described in §2.2. We do not use HealthKit data for advertising, marketing, sharing with data brokers, or behavioral analytics. We do not share HealthKit-derived data with third parties other than the storage processor described in §5.
We may update this Privacy Policy when the app changes the data it handles. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated in-app or via the App Store release notes.
For privacy questions, data access requests, or account deletion requests, email support@vibora.technology or use our Support page. You also have the right to lodge a complaint with the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority.