← PadelScroll home

Privacy Policy

Working draft · Updated 19 October 2026 · Version LEGAL-DRAFT-0.4

Working policy document for PadelScroll. It describes intended information flows and must be checked against the deployed product, provider settings, retention schedules and applicable law before publication as a final policy.

Who operates PadelScroll

The operator identified for this project is Sharjeel Ahmed Abbasi, who controls PadelScroll. The initial intended launch market is Pakistan. Proposed privacy/support contact: support@padelscroll.com. No official service or business address has been supplied. Whether an address or additional operator details must be published for the Pakistan launch must be confirmed through qualified local legal review. This wording does not assert that a separate company or other legal entity has been registered.

Who may use the service

The initial intended launch market is Pakistan. Future expansion is planned for the UAE, Saudi Arabia, Qatar and other Gulf markets; Spain, the Netherlands and France; Argentina; the United States and Canada; Australia; and potentially other markets worldwide. This records future business intentions only: none of those future markets is approved for launch by this draft. The operator's product goal is to welcome users of any age without a blanket PadelScroll-imposed age cutoff. This is a product intention, not a promise that every person may lawfully use every feature. Before the Pakistan launch, qualified local counsel must confirm any minimum-age rules, guardian/parental-consent duties, app-store or platform requirements and other restrictions by feature; required controls must be implemented and tested. Every later country or region—and relevant state or province where applicable—requires a separate current legal and operational review before access is offered there.

A reliable age-appropriate onboarding, parental/guardian process where required, and child-safety response process must be implemented and tested before admitting children in markets where those controls are required.

Information we may process

Purposes and legal grounds

Information is used to authenticate users, operate profiles and social features, deliver posts and messages, support Marketplace listings, apply privacy and block rules, provide notifications, prevent fraud and abuse, maintain security, troubleshoot the service and respond to legal requests.

The legal ground depends on the user, location and purpose; it may include providing the requested service, legitimate interests, compliance with law or consent where consent is actually required. Optional uses must not be bundled into required service consent. The final policy must describe the actual grounds and consent withdrawal process for each applicable market.

Audience, privacy and user content

Content visibility depends on the feature, profile privacy setting, group membership and how a user shares it. Public content may be accessible beyond the intended audience. Recipients may copy, capture or retain content shared in messages and groups.

Blocking limits specified interactions but cannot undo screenshots, exports or copies already held by others. Hiding/deleting a message for one account may not remove it from every recipient's view. PadelScroll must not be described as providing end-to-end encryption unless that design is verified and implemented.

For child-accessible markets, privacy-protective defaults, discoverability, who may message a child, location sharing and adult-minor contact must be assessed and implemented before launch.

Service providers and international transfers

The application currently uses Supabase for database/authentication, Vercel for application hosting and Cloudflare R2 for media storage. Actual regions, subprocessors, backup locations, contractual terms and transfer safeguards must be verified and documented before publication. Provider names alone do not establish a particular data residency or transfer arrangement.

This policy must be checked against actual monetization, advertising, analytics and sharing practices. It must not claim that personal information is never sold or shared unless the operator has verified that statement across all systems and vendors.

Security and retention

PadelScroll uses technical and organizational safeguards intended to protect accounts and content, but no internet service can promise absolute security. Never share account passwords or verification codes.

Information should be retained only for a documented purpose and for the period required for service operation, legal compliance, security and dispute handling. Exact deletion timing, backups, abandoned uploads, legal holds and copies delivered to recipients must be defined and tested. A complete retention schedule is not yet confirmed in this draft.

Choices and rights requests

Depending on applicable law, a user may have rights to access, correct, delete, export, object to or restrict processing, withdraw consent or complain to a regulator. The proposed privacy/support contact is support@padelscroll.com. The in-app privacy-request form is currently disabled in Preview while the handling process is being prepared; this draft does not claim that account export, erasure or every other request can already be fulfilled. Before publication, confirm the monitored request route, minimal identity verification, response deadlines, escalation owner and Pakistan-specific requirements.

Do not assume that an account-export or account-erasure service exists until it has been implemented and tested end to end. Some records may need to be preserved where permitted or required by law.

Children and teen safety

Children deserve age-appropriate explanations and stronger protection. Before the Pakistan launch, PadelScroll must assess the applicable minimum-age rules, consent/guardian requirements, age assurance, safer defaults and online-safety obligations. Do not admit children to features or markets until required safeguards are implemented and tested. Any future country or region requires a separate review before access is offered there.

For the initial Pakistan launch, the child-safety plan must cover reports of grooming or exploitation, unwanted adult contact, bullying, harmful content, parental/guardian requests, urgent escalation, account restrictions and data deletion/retention. Applicable Pakistani laws and any proposed legal changes must be checked at launch. This draft is not proof those operational processes are in place.

Cookies and similar technologies

The app may use browser storage for authentication/session persistence. This text is not a complete cookie or tracker inventory. Actual cookies, analytics, advertising pixels and third-party scripts must be audited and any required choices/notice implemented before publication.

Changes and contact

The operator must set a reliable process for policy updates, notifying users of material changes, recording versions where needed, and honoring applicable rights. Proposed privacy/support contact: support@padelscroll.com. No official service or business address has been supplied; qualified Pakistan counsel must confirm whether address or other operator disclosures are required before publication.

Proposed privacy/support contact: support@padelscroll.com. No official service/business address has been supplied; qualified Pakistan counsel must confirm any required operator disclosures before publication. This draft is not a guarantee that every privacy request can currently be fulfilled. Never send passwords or authentication codes.