Trust, Security & Privacy

Picklemate accounts are protected with email + password sign-in and optional Google sign-in. Access to your data is enforced both in the app and at the database layer using row-level security policies scoped to your user ID.

Administrative actions (such as managing clubs, awarding achievements, or coach ratings) are restricted to the relevant role — club admin, coach, or platform super admin — and are performed through trusted server-side functions.

The Picklemate web app is built on the Lovable platform and runs on managed cloud infrastructure. Data is stored in a managed Postgres database. Connections between your browser and Picklemate use HTTPS.

Lovable provides the underlying hosting, database, and authentication building blocks. Picklemate configures and operates them; we do not claim third-party certifications on behalf of those providers.

We collect the information you provide to use the service: your name, email, profile details, the games and bookings you create, scores you submit, and messages you send through contact forms. We also record basic operational data such as timestamps for bookings and notifications.

We do not sell personal information.

We use a small number of trusted providers to run the service: Lovable (hosting and backend), an email provider for transactional notifications, and — where enabled — a payments provider for tournament and booking checkout. Optional Google sign-in uses Google as the identity provider.

We keep account data while your account is active. If you would like to delete your account or have your personal data removed, contact us using the link below and we will action the request.

If you believe you have found a security issue, please reach out via our contact page and select an appropriate inquiry type. We aim to respond within one business day.

This page is updated as our practices evolve. Material changes that affect how your personal data is handled will be communicated in-app or by email.