Legal

Privacy Policy

Last updated: 9 October 2026

Smasho is a badminton training and club app for players, parents, coaches and clubs. It is operated by Ankita Dubey ("Smasho", "we", "us"). This policy explains what we collect, why, who can see it, and the choices you have.

What we collect

Account details: your name, email address, password (stored only as a secure hash by our authentication provider), account type (player, parent, coach or club), and, for players, date of birth.
Profile details you choose to add: phone number, age, gender, skill level and playing events.
Children's profiles: when a parent or club adds a child, the child's name, date of birth or age, and the lessons, attendance and payment records linked to them.
Training and club activity: workouts, training logs, journal entries, match logs and opponent notes, coach notes and assignments, lessons, schedules, attendance, waitlists, ladders and tournament entries, court bookings, and payment records a club or parent enters (for example amount, method and status). Smasho does not process card payments.
Court bookings made without an account: you can book a court at a listed club as a guest. We collect the name and email address you enter, your phone number if you add one, the courts, dates and times you book, the price and any tax the club adds, and whether you chose to pay at the club or by e-transfer. No account is created. A list of your recent bookings is kept only on your own device so you can find them again.
Photos, videos and voice notes you upload or record in the app.
Community content: the posts and replies you write, the likes you give, and the reports and blocks you make. Community posts appear under a generated username, not your real name.
Device information: a push-notification token if you allow notifications, and your notification preferences.
Location: only if you allow it, and only while you are using the app. Smasho uses your device's location to show ladders, clubs and courts near you. It is sent to our servers and to our address-search providers (Photon by komoot and Open-Meteo) to find those results. We do not save it to your profile, keep a history of where you have been, or collect it in the background. You can say no and type a city instead.

We do not show ads. We do not sell, rent or share your personal information for advertising, and we do not use your data to track you across other companies' apps or websites.

Our website counts visits (which pages are viewed and which site sent the visitor) using Vercel Web Analytics. It sets no cookies, does not identify you, and is not used for advertising. The pages you reach from a private invite or password link are not counted.

How we use it

To run your account and the features you use: training plans, club lessons and schedules, parent access, coach feedback and the community.
To send notifications and emails you need, such as lesson reminders, invites, password resets, schedule changes and court booking confirmations.
To make and manage court bookings: holding the court for you, telling the club about the booking or a cancellation, and checking you in at the front desk with your booking code.
To keep Smasho safe: enforcing our Terms of Use, reviewing reported content, and preventing abuse.

Who can see your information

Your club and coaches: if you join a club, its owner and coaches can see your roster details, lessons, attendance and payment records for that club.
A club you book a court with: its owner and staff can see the name, email address and phone number you gave, what you booked, the amount due, how you chose to pay, and whether you checked in. The club keeps this as part of its own booking and payment records.
Parents: a linked parent can see their child's lessons, schedule, coach notes and payments, and any journal entries the child chooses to share.
Coaches you connect with: see the training logs and match notes you share with them.
Other signed-in users: can see community posts and replies under your generated username.
Service providers that host and deliver Smasho for us, under contracts that limit their use of your data: Supabase (database, sign-in and hosting), Cloudinary (photo, video and audio storage), Resend (email delivery), Expo (push notification delivery), Vercel (website hosting and anonymous visit counts), Photon by komoot and Open-Meteo (address, city and time zone lookup) and QR Server by goQR.me (draws the check-in code shown in a booking confirmation email; it receives the booking code only, not your name or email).
Legal reasons: if the law requires it, or to protect someone's safety.

Children

Many Smasho players are juniors. Only adults can sign up on their own; a player under 18 is added by a parent or guardian, or by their club. By adding a child, you confirm that you are their parent or guardian, or a club acting with the parent's or guardian's consent. A parent can see their child's activity, edit the child's profile, and delete it at any time, and can ask us by email for a copy of the child's data or to correct it. If you believe a child's information was added without a parent's consent, contact us and we will delete it.

Children under 13 in the United States. Smasho is not meant for a child under 13 to use on their own, and a child cannot create an account. We do not knowingly collect personal information from a child under 13 unless a parent or guardian has added the child or has agreed to their club adding them. A parent or guardian can review their child's information, have it corrected or deleted, and refuse any further collection, in the app or by emailing support@playsmasho.com. If we learn that a child under 13 was added without a parent's consent, we delete that child's information.

Keeping and deleting your data

We keep your data while your account is open. You can delete your account at any time in the app under Settings › Delete Account. That permanently deletes your profile and the data linked to it, including any child profiles you manage. Copies in our backups are removed within 30 days. Community posts you wrote are deleted with your account.

A court booking you made as a guest has no account to delete. If you cancel a booking that has not happened yet, it is removed. Past bookings stay in the club's records. To have your guest booking details removed, email support@playsmasho.com from the address you booked with.

Your choices and rights

View and edit your profile in the app.
Turn notifications and location access on or off in your device settings, and choose notification categories in Smasho's Settings.
Ask us for a copy of your data, to correct it, or to delete it, by emailing support@playsmasho.com. We reply within 30 days.

Security

Data is encrypted in transit and access is limited by account-level permissions, so people can only see the information described above. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

Where data is stored

Our main database is hosted in the United States. If you use Smasho from another country, including Canada, your data is transferred to and processed in the United States. While it is there it is subject to United States law and may be accessible to courts, law enforcement and national security authorities in that country.

Changes to this policy

If we make an important change, we will tell you in the app or by email before it takes effect. The date at the top shows when this policy last changed.

Contact and complaints

Ankita Dubey is the person responsible for privacy at Smasho. Send privacy questions, requests or complaints to:

Ankita Dubey
Ontario, Canada
support@playsmasho.com

We reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.