Privacy policy

Who we are

BPM is a sign-up sheet for casual badminton groups. One person — the app's operator, in British Columbia, Canada — runs the service and the database that every group's records live in. Each group is run by its own organisers, who decide who is on the roster and what each session costs. The operator is an individual, not a company. Canada's PIPEDA and BC's Personal Information Protection Act are the laws this policy follows. This app isn't intended for children under 13.

What we hold about you

• Your name — the one you sign up with. Other members see it on the roster.
• Your PIN, if you set one, stored only as a salted hash. If you sign in with Google, Apple, or email, we receive an identifier from that provider, and — only if you allow it during sign-in — your name and email address.
• Session records: which sessions you signed up for, whether you were on the waitlist, and your share of the court and shuttle cost, including whether it has been marked paid.
• E-transfer names: if the name on your e-transfer differs from your sign-up name, the organiser records that pairing so payments can be matched. Only admins see it.
• Things you add yourself: skill self-assessments, kudos you give or receive (including notes), games you log, and rackets or strings you save.
• A push token, if you turn on notifications, for that device. It identifies the device to Apple, Google, or your browser — not you.
• A problem report, only when you tap "Report a problem": your message, your name if you add it, the screen you were on, and your internet address (used only to stop the form being flooded).
• How you use the app: when you open it, which tab you look at, and when you sign in, sign up for or cancel a session, give kudos, request stringing, or turn notifications on or off. It's linked to your account, it stays in this app's own database, and the organiser sees it only as group totals (for example, "18 members opened the app this week") — never as a list of what one person did. If a screen stops working while you're signed in, we also record that it failed and which tab it was on — never what was on the screen or the details of the error — so a broken screen gets noticed without anyone having to report it. Those are counted the same way.
• Racket-fit answers, if you answer the questions on the Stats tab — your level, what you mostly play, what you'd change about your racket, your swing, your grip size, and an optional note on whether your arm or shoulder is sore. This is health-related information and we handle it with extra care: the sore-arm-or-shoulder answer is visible only to you, it's used only to shape a racket suggestion and string-tension verdict, and you can clear all of it at any time from that page — it's also deleted with your account.

Your group's organisers, and the operator

• Your group's organisers are the person who created the group and anyone they have made an admin. They see payment status and e-transfer names for their group; other members cannot, and organisers see nothing of any group they don't run. When they create a group they agree to add only people who have agreed to join, and to use what they see only to run the group.
• The operator runs the app for every group and can reach any group's records to keep the service working, answer a privacy request, or look into a problem report — never to follow a group's business for its own sake.

What we don't do

No ads. No third-party analytics or tracking tools. No selling or sharing with anyone for their own purposes. No location, contacts, photos, or camera access. We don't build a profile of you for anything beyond running the sessions.

Who can see what

• Members of a group see that group only: names, whether each spot is confirmed or waitlisted, and the per-person cost for a session. If you're in two groups, each sees only its own roster.
• Your group's organisers additionally see payment status and e-transfer names.
• A kudos note is shown to the person who received it, signed by the giver.
• The operator can see all of the above, for every group, when running or fixing the service.

Where it lives

Data is stored in Microsoft Azure (Cosmos DB) and reached only over HTTPS. Sign-in with Google or Apple is handled by those providers under their own policies.

Some text in the app is written with the help of an AI service (Anthropic, in the United States) — for example, the summary on your Stats tab. It receives only what that text needs, which can include your name and the names of people you regularly play with. When it writes the verdict on your racket, it receives the racket and what the verdict found from your fit answers — including that something is sore, if you said so — and never your name. These two kinds of requests never mix: a request that includes your name never includes your fit answers, and vice versa. Under our agreement with them, what we send is not used to train their models.

The organiser also uses that AI service to prepare a weekly summary of group totals and to read problem reports for patterns. It receives the totals, and problem reports with the name and internet address removed — nothing that says who did what.

Because Azure and Anthropic's US operations are outside Canada, some of your data may be accessible to US authorities under US law while it's there.

How long we keep it

Session and payment records are kept so the group's books add up. If you delete your account, yours are reduced to the anonymized line described under "Deleting your account." Push tokens are removed when you turn off notifications or when the device stops accepting them. The record of how you use the app is deleted automatically after 13 months.

If something goes wrong

If a breach happens that puts you at real risk of harm, we'll notify you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires, and to BC's Information and Privacy Commissioner.

Deleting your account

You can delete your account from inside the app — Profile → Delete account — or by following the steps on our account-deletion page. Deletion removes your PIN, provider sign-ins, gear, stats, kudos, notifications, and the record of how you used the app. Past sessions keep one unnamed line so everyone else's cost split still adds up; that line no longer identifies you. Deleting your account removes you from every group you're in; if you're the only organiser of a group, that group closes with it.

Your rights

You can ask what we hold about you, ask for it to be corrected, or withdraw consent, using the email on the support page. It reaches the operator, who answers for the service and will bring in your group's organisers when the record is theirs — a payment they marked, for example. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or to BC's Office of the Information and Privacy Commissioner.

Changes

If this policy changes in a way that matters, the date above changes.