PRIVACY POLICY — SPIKE (ROUNDNET)
Last updated: 9 April 2026 Operator: Tapget ("we", "us") — contact: info@tapgetit.com
Spike ("the App") is a matchmaking app for roundnet / spikeball players. This policy explains what personal data we collect, why, and how long we keep it. If you have any questions, email us at info@tapgetit.com.
WHAT WE COLLECT
When you use the App we collect and store the following, only for the purposes listed in section 2.
1.1 Data you give us
• Name — the display name you enter during onboarding. • Email address — used as your account identifier (or a placeholder {provider}_{id}@spike.app if you sign in with Apple and choose to hide your email). • Profile photo — optional, only if you upload one. • Skill level — set from the onboarding quiz (1–5). • City and country — inferred from your location or entered manually. • Gender — optional. • Roundnet equipment — whether you own a set. Optional.
1.2 Data we collect automatically
• Approximate location (latitude & longitude) — used to show matches near you and calculate distances. You can deny location access and still use the App by entering a city manually. • Push notification token — generated by Apple/Google if you opt in, so we can deliver match reminders and invites. • Device type and OS version — used for debugging crashes. • Usage analytics — anonymised events such as "screen viewed", "match created", "match joined", processed via PostHog. No advertising IDs are collected and we do not track you across other apps or websites.
1.3 Data other users see
• Your display name, photo, skill level, city, and reliability score are visible to other players in match listings, chat, and the leaderboard. • Your exact coordinates are never shown to other users. Only the approximate distance to a match.
WHY WE USE YOUR DATA
• Create and manage your account — Name, email, Apple/Google ID — Legal basis: Contract • Show nearby matches and distances — Location, city — Legal basis: Legitimate interest • Match reminders and invites — Push token — Legal basis: Consent • Chat with other players in a match — Name, photo, messages — Legal basis: Contract • Leaderboard and stats — Name, photo, city, match history — Legal basis: Legitimate interest • Product analytics and crash reports — Anonymised events, device type — Legal basis: Legitimate interest • Respond to support emails — Email, message content — Legal basis: Legitimate interest
We never sell your personal data, and we do not share it with advertisers.
WHO WE SHARE DATA WITH
• Our backend infrastructure (Railway, PostgreSQL) — stores your account and match data. • Apple Push Notification service / Firebase Cloud Messaging — delivers push notifications, only when you opt in. • PostHog — receives anonymised product analytics events. • Apple / Google — if you use Sign in with Apple or Sign in with Google, we receive an opaque user ID and (optionally) your name and email. • Law enforcement — only if required by a valid legal order.
HOW LONG WE KEEP YOUR DATA
• Your account and profile are kept until you delete your account. • Match history is kept for as long as the match and its participants exist. • Analytics events are retained in PostHog for up to 12 months. • When you delete your account (Settings → Delete my account), we permanently remove your profile, friends, match history, ratings, chat messages, and leaderboard entries. Matches you created are cancelled and removed. This cannot be undone.
YOUR RIGHTS
Under the GDPR and similar laws you have the right to:
• Access the personal data we hold about you. • Correct inaccurate data (you can edit most of it directly in the App). • Delete your account and all associated data (Settings → Delete my account). • Object to processing based on legitimate interest. • Withdraw consent for push notifications at any time in your device settings. • Lodge a complaint with your local data protection authority.
To exercise any right, email info@tapgetit.com.
CHILDREN
Spike is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we'll delete it.
INTERNATIONAL TRANSFERS
Our backend runs on Railway infrastructure in the United States. By using the App you consent to your data being transferred and processed there. We rely on Standard Contractual Clauses for EU users.
SECURITY
We use HTTPS for all traffic between the App and our servers, JWT-based authentication, and access controls on our database. No system is perfectly secure, so please use a strong password (if applicable) and keep your device updated.
CHANGES TO THIS POLICY
If we make material changes to this policy we'll notify you in the App the next time you open it. The "Last updated" date at the top of this page reflects the most recent revision.
CONTACT
Questions, concerns, or data requests: info@tapgetit.com — subject line "Spike - privacy"