Effective Date: 19 May 2026 · Last Updated: 10 July 2026
xSmash ("we," "our," "us") is a mobile application that helps players track matches, manage doubles pairs, compete in tournaments, and analyse performance. This Privacy Policy explains what data we collect, how we use it, and the rights you have over it. It applies to the iOS and Android apps and the backend services that support them.
The table below reflects the privacy labels we declare to Apple and Google. Every category is linked to your user account and none of it is used for cross-app tracking or sold to advertisers.
| Category | Specific data | Purpose |
|---|---|---|
| Contact Info | Name | App functionality (profile, search, leaderboards) |
| Contact Info | Phone number | App functionality (OTP sign-in, partner matching opt-in) |
| Other Data | Gender | App functionality (singles/doubles category and gender-based rankings) |
| Other Data | Profile details you enter (city, country, playing style) | App functionality (city/country leaderboards, partner matching) |
| Location | Precise location (only when you grant the OS permission) | App functionality (finding nearby venues and courts) |
| User Content | Photos or videos (profile picture you upload) | App functionality (profile display) |
| User Content | Other user content (chat messages, match notes, free-text fields) | App functionality (sending messages, recording match context) |
| Identifiers | User ID (Firebase Authentication UID) | App functionality (authenticating you across sessions) |
| Identifiers | Device ID (Firebase Cloud Messaging registration token) | App functionality (sending push notifications to your device) |
| App Activity | In-app activity linked to your account: matches recorded, screens viewed, features used, and coarse tap interactions (the screen you tapped on — never the text you type) | App functionality, product Analytics (Firebase Analytics, aggregate), and internal usage monitoring & support |
| Diagnostics | Crash data (Firebase Crashlytics) | App functionality (fixing bugs) and Analytics (aggregate stability metrics) |
| Diagnostics | Performance data (Firebase Performance Monitoring) | Analytics (improving app responsiveness) |
We use Firebase Analytics for aggregate product analytics, and we collect first-party in-app activity (see "App Activity" above) linked to your account to understand usage, monitor the service, and provide support. We do not bundle Google Ads, the Facebook SDK, or any advertising-ID library (Apple IDFA or Android Advertising ID); we do not track you across other companies' apps or websites; and we do not sell your data. The "Tracking" flag in our privacy manifest is set to false, and the app declares that it does not use an advertising ID.
Sign-in is by phone number, backed by Firebase Authentication:
We share the minimum data necessary with the following processors. Each has its own privacy policy that governs their use of the data:
We do not sell your personal information to any third party.
Some information is visible to other players inside the app:
Your phone number is never shown to other users.
You can delete your account at any time:
When you delete your account:
First-party in-app activity logs are retained for up to 180 days for product analytics and support, then purged. Aggregate analytics held in Firebase are retained per Google's data-retention settings.
Backups are rotated on a 30-day cycle; deleted data is purged from backups within 60 days of deletion.
Subject to the laws of your jurisdiction (including the EU/UK GDPR, California CCPA/CPRA, and India's Digital Personal Data Protection Act 2023), you have the right to:
Send any rights request to devs.xsports@gmail.com. We respond within 30 days.
xSmash is rated 13+ and is not directed at children under 13. If we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will delete it promptly. Contact devs.xsports@gmail.com if you believe a child has provided data to us.
No system is perfectly secure. If you suspect a vulnerability, please report it to devs.xsports@gmail.com.
Our backend runs in Railway data centres (currently United States). Firebase and RevenueCat are global services that may store data in multiple regions. Where we transfer data out of the EU/UK, we rely on Standard Contractual Clauses or equivalent safeguards.
We may update this Privacy Policy as the app evolves. Material changes will be announced in the app. The "Last Updated" date at the top reflects the most recent revision. Continued use of the app after a revision constitutes acceptance.
See our account-deletion page for step-by-step instructions.