Privacy policy

Yalla is a padel booking and player platform operating in Ethiopia. Questions and privacy requests can be submitted through the Yalla support page.

We collect account identifiers and authentication details; profile information such as display name, avatar, gender, city, phone verification status, level, and preferences; bookings, match participation, scores, rankings, friends, invites, safety reports, and support requests; payment amount, status, and provider reference; push tokens; and technical diagnostics such as device, app version, error, performance, and security events.

If you grant location permission, Yalla may process precise device coordinates to calculate nearby courts. We do not collect location when permission is denied, and we do not use it for advertising.

We use information to authenticate accounts, complete onboarding, operate bookings and matches, confirm payments, calculate levels and rankings, connect players, send requested notifications and SMS invites, show nearby courts, prevent fraud and abuse, investigate safety reports, provide support, and improve reliability. We do not sell personal data or use it for third-party targeted advertising.

Clubs and authorized staff receive the minimum information needed to operate a booking or match. Other players can see public profile and match information, including display name, avatar, level, ranking, and match participation, but not your email or phone number.

Service providers process data on Yalla's behalf: Supabase for authentication, database, and file storage; Vercel for web hosting and APIs; Chapa for hosted payment checkout; Expo and Firebase for push delivery; PostHog for product analytics; Sentry for crash and performance diagnostics; and SMS providers for phone verification and invitations. These providers may process data in other countries under their own security and legal obligations.

Active account data is retained while you use Yalla. Support and safety records are retained as needed to resolve the request and prevent abuse. Operational, payment, refund, match, score, ranking, security, and audit records may be retained or anonymized where needed for legal, financial, fraud-prevention, or platform-integrity purposes.

You can initiate permanent deletion from Profile > Edit profile > Delete account. If you cannot access the app, use the public account deletion form. Requests are usually completed within 24 hours and no later than 30 days, subject to unresolved commitments and required retention.

You can update profile data, control notifications and location permission through Yalla and device settings, report or block another player, request support, and request account deletion. You may contact support to ask for access or correction when the in-app controls are not sufficient.

Yalla uses encrypted connections, scoped access controls, authentication, audit records, and monitoring. Payment credentials are entered directly with Chapa and are not stored by Yalla. No system is perfectly secure, so report suspected account misuse promptly.

Yalla is intended for users aged 16 and older. We do not knowingly provide accounts to children under 16.