Privacy Policy

Who we are

PicklePaci operates the booking and queuing service at pickle-queuing-system.rypacimarketingsolution.com and the PicklePaci mobile app, from Alevida Village, Indangan, Davao City, Davao del Sur, Philippines. For anything in this policy, contact support@rypacimarketingsolution.com.

What we collect

Information you give us

• Account details — first and last name, email address, phone number, username, gender, and an optional profile photo.
• Your password, which we never store. We keep only a scrypt hash, which cannot be reversed back into your password.
• Consent records — when you accepted these terms, and whether you opted in to SMS updates.

Information created as you use the service

• Bookings — courts, dates, times, reference numbers and fees.
• Match and ranking data — who played, game scores, results, and the rating calculated from them.
• Sign-in sessions — we store a hash of your session token, not the token, along with its expiry.
• Staff activity logs — when a staff member or administrator changes a booking or account, we record who did what and when.

Google Calendar

Connecting Google Calendar is optional. Everything else in PicklePaci works without it. If you connect it:

• We ask Google for permission to view and edit events on your calendars (the calendar.events permission) and to see your email address.
• We only ever create and update events for your own PicklePaci bookings. We do not read, analyse, export or store the other events in your calendar. Google's permission is not granular enough to request "create only", which is why the consent screen mentions viewing.
• The events we create contain your court, venue address, booking time and reference number — nothing else.
• We store your Google email address and the access and refresh tokens Google issues, so the calendar stays in sync without asking you to sign in repeatedly. These are held in our database on our hosting provider's servers and are used for no other purpose.

Limited use

PicklePaci's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer, sell or use Google user data for advertising, and we do not allow humans to read it except where you explicitly ask us to for support, where it is necessary for security, or where the law requires it.

Disconnecting

You can disconnect Google Calendar from your PicklePaci profile at any time. Doing so deletes the stored tokens and your Google email address from our database, and we can no longer reach your calendar. Events already created stay in your calendar so your bookings are not silently removed; delete them in Google Calendar if you would rather they went.

You can also revoke access directly at myaccount.google.com/permissions, which works regardless of anything on our side.

Email

We send transactional email — booking received, confirmed, rejected or cancelled — through Resend, which processes your email address and the contents of that message in order to deliver it. We do not send marketing email, and there is no mailing list to be added to.

How we use your information

• To run bookings, queues, matches and rankings.
• To sign you in and keep your account secure.
• To tell you about the status of your own bookings.
• To let club staff manage courts, verify bookings and resolve disputes.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Who can see your information

• You — your own account, bookings and match history.
• Club staff and administrators — the booking and account details needed to run the courts.
• Other players — your display name, match results and ranking position are visible on leaderboards and in matches you take part in. Your email address, phone number and gender are not shown to other players.
• Service providers — our hosting provider, and Resend for email delivery. They process data on our behalf and for no other purpose.

How long we keep it

Account, booking and match records are kept while your account is active, because rankings and booking history depend on them. Sign-in sessions expire automatically. Ask us to delete your account and we will remove your personal details; match results may be retained in anonymised form so other players' rankings remain correct.

Security

Traffic is encrypted with HTTPS. Passwords are stored only as scrypt hashes, and session tokens only as hashes. The database is not reachable from the public internet — it accepts connections only from the application server itself. Access is limited to the people who operate the service.

No system is perfectly secure, and we would rather say so than imply otherwise. If you believe your account has been compromised, email support@rypacimarketingsolution.com and we will act on it.

Your choices

• Update your name, contact details and photo from your profile at any time.
• Connect or disconnect Google Calendar whenever you like.
• Ask for a copy of your data, or for your account to be deleted, by emailing us.

Children

PicklePaci is intended for players aged 13 and over. If you believe a child under 13 has created an account, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page. Material changes to how we handle Google user data will be announced in the app before they take effect.

Contact

Questions, requests or complaints: support@rypacimarketingsolution.com.