Raqeto Privacy Policy

1. Who is responsible

Teliphone Systems OÜ (registry code 14860746), Vesivärava tn 50-201, 10152 Tallinn, Estonia, operates Raqeto and is the controller of the personal data described here.

Privacy questions and requests: support@raqeto.app.

Clubs that use the Raqeto CRM decide what they record about their own customers (for example, names, contacts and notes about guests). For those records the club is responsible, and Raqeto processes them to provide the CRM to the club.

Coaches decide which guests without a Raqeto account to add to a training session (a name and a contact). The coach is responsible for those records, and Raqeto stores them so the coach can run the sessions.

2. Data we process

• Account and sign-in: name, username, profile photo and language from Telegram or Google; your Telegram ID or Google account identifier; your email address if you sign in or confirm it by email. We never receive your Google or Telegram password.
• Profile: name you set, photo you upload, sports, level questionnaire answers, rating and statistics, theme and notification settings.
• Activity in the service: games, matches and results, tournaments and leagues, court bookings, invitations, club memberships and roles.
• Player matching: the days and times that suit you, chosen clubs, consent to invitations, your city and travel dates if you entered them; groups you joined and offers you received. The city is picked from a list — your device location is not used for this.
• Training: training registrations and invitations, attendance, a coach’s list of students. If you are a coach — the sessions you create, guests you add and invitation links.
• Rating checks: if a coach with this permission or an administrator confirms or changes your level, we keep who did it and when, the previous and new values and the reason given.
• Messages and notifications: chat messages with clubs and players, in-app notifications and delivery settings.
• Safety and moderation: reports about chat messages, player profiles and club pages, the reported message text or profile/club content preserved for review, moderator decisions, your personal block list, and the version and time of your acceptance of chat rules. Reports are reviewed by platform administrators; your identity is not disclosed to the reported user.
• Device data in the Android app: a push notification token from Firebase Cloud Messaging and a random installation ID created by the app.
• Technical data: IP address, browser or app user agent, request time and the page or API address requested (without query parameters) in server logs; the IP address used to request an email login code; the days on which you used the service (for internal usage statistics).
• Data entered by clubs: names, contacts, notes, bookings, orders and payment records that club staff enter in the CRM.
• Donations: if you donate with Telegram Stars, the payment is handled by Telegram. Raqeto does not store payment card or donation records.
• Club connection requests: if you send the request form on the Clubs page of the website, we receive the club name, city and country, your name, the email and/or phone number (WhatsApp, Telegram) you entered, the number of courts, the sport and your comment. The form does not use cookies or third-party anti-spam services.

3. Why we use it and on what legal basis

• To provide the service you asked for — your account, bookings, games, tournaments, chats, notifications and the club CRM (performance of a contract, GDPR Art. 6(1)(b)).
• To reply to a club’s request to connect to Raqeto and help set it up — the data from the request form is emailed to support@raqeto.app (steps at the request of the data subject prior to entering into a contract, Art. 6(1)(b)).
• To suggest partners and groups to you by level, city, dates and preferred times — only if you turned on the search or allowed invitations. Matching only makes suggestions: you decide whether to join (performance of a contract).
• To keep the service secure and prevent abuse — sign-in protection, rate limits, blocking accounts that break the rules, logs for diagnosing errors (legitimate interests, Art. 6(1)(f)).
• To keep shared results consistent — match results, standings and ratings of other players remain correct after an account is deleted (legitimate interests).
• To understand how the service is used — internal counts of active days (legitimate interests).
• To send push notifications — only after you allow notifications on your device; you can turn them off in the device settings or in Raqeto settings (consent, Art. 6(1)(a)).
• To comply with legal obligations where they apply (Art. 6(1)(c)).

We do not sell personal data and do not use it for advertising or automated decisions with legal effects.

The public website uses Ahrefs Web Analytics: page addresses, referrers and browser data. See data processing by Ahrefs. This script is not installed in the player app or CRM.

4. Who can see your data

• Other players see your name, username, photo, rating and statistics (unless you make statistics private in settings) and your participation and results in games and tournaments.
• Clubs you book with or belong to see your bookings and participation; club managers with the relevant permission also see your email address.
• When Raqeto suggests a group, its members and invitees see each other’s name, photo and level, the group’s city and the common periods that suit everyone; your full schedule is not shown.
• A coach sees their students and the people registered for their sessions: name, photo, responses to invitations and attendance. The rating-check log is visible to platform administrators, and to a coach only for their own checks of their own students; it is never public. You can request a copy of the records about you (section 8).
• Raqeto platform administrators can access account and moderation data to operate and protect the service.

Service providers that process data for us:

When you open Raqeto, your browser also loads fonts from Google Fonts and, on map screens, map tiles from OpenStreetMap. These requests go directly from your device and share your IP address and user agent with those providers.

5. International transfers

Our server is in the European Union (Germany). Google and Telegram may process data outside the European Economic Area under their own safeguards, such as the European Commission’s standard contractual clauses or adequacy decisions.

6. How long we keep data

7. Deleting your account

You can delete your account in the app at any time: Profile → Settings → Delete account. What is deleted and what is kept is described on the account deletion page.

8. Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction of processing, a copy in a portable format, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. Write to support@raqeto.app from the email linked to your account; we answer within one month.

If someone recorded you in a club’s CRM without a Raqeto account, contact the club or us; we will remove your name, contacts and notes from that club’s records.

You can complain to the Estonian Data Protection Inspectorate (aki.ee) or to the data protection authority in your country.

9. Children

Raqeto is not intended for children under 13. Where the law of your country requires parental consent to use online services at your age, you may use Raqeto only with that consent. If you believe a child has given us personal data without the required consent, contact us and we will delete it.

10. Security

Connections to Raqeto use HTTPS. Access to the server is limited to the operator. Backups are encrypted, and the decryption key is kept off the server. Email is sent with encryption whenever the recipient’s mail server supports it.

11. Changes

We will update this page when our processing changes and change the date above. Significant changes will be announced in the app.