Last updated 25 October 2026

Privacy Policy

Information we collect

Account data: phone number, email, display name, locale, city, optional gender, optional profile photo, optional bio, and your confirmation that you are 18 or older.
Play data: bookings, matches, scores, ratings, social score, federation links if you choose to connect one.
Payment data: amount, currency, status and, for a card, its last four digits. Your full card number is never stored on our servers. When you pay a venue by transfer, the screenshot you upload and what is read from it.
Device data: IP address, user agent and locale, used for security and to keep the service working.
Chat data: messages between you and the players or venues you play with.
Your choices: which version of these terms and this policy you accepted, and the optional things you said yes or no to, with the date.
Padel interest sign-ups (feera.ai/padel): your first name, an email or phone number (sealed, like the contact on a profile), the first three characters of your postal or ZIP code if you give them, the sports you play, your answers about court time and any note. Feera Courts uses them to count demand for padel courts near you, shows cities and clubs that count as a total only, never your name or contact, and may contact you about padel courts in your area because you agreed to that. Nothing is sent when you sign up.

How we use it

To let you book courts, classes and appointments, find players and play matches.
To compute your Glicko-2 rating and suggest relevant matches and opponents.
To process payments to venues, coaches and other players.
To send transactional notifications (bookings, payments, match invites) by the channel you prefer.
To enforce safety rules (sandbag detection, blocking, no-show flags).
For aggregate, anonymised analytics that help us improve the product. We never sell your data.

Your data is stored in a PostgreSQL database on Feera's own server, hosted by Hetzner Online in Falkenstein, Germany. The application runs on the same server. Backups, made daily and before each release, are kept there for up to 14 days. Private uploads such as photos and payment screenshots are stored on that server or in Hetzner Object Storage in Germany.

These companies process personal data for us, each only for its part:

Twilio (United States): sign-in codes by SMS or WhatsApp, and SMS and WhatsApp messages. It receives your phone number and the message.
Meta (WhatsApp Cloud API, United States): the WhatsApp booking assistant and venue messages, when a venue uses them. It receives your phone number and the messages.
Resend (United States): emails such as sign-in links and receipts. It receives your email address and the message.
Expo (United States): push notifications to the Feera app. It receives a device token and the notification text.
Stripe (international cards) and Safepay (Pakistani cards and wallets): when you pay online by card or wallet. They receive what the payment needs, such as the amount and your card details, which they hold, not us.
Anthropic (United States): reads a payment screenshot only when our own server cannot, and only if the venue allows it (see below).
Google and Apple: only if you choose to sign in with them. We receive your name and email from them.
Cloudflare: runs our DNS, so it sees the network address of a device that looks up feera.ai.

JazzCash, Easypaisa, bank transfer and Raast are ways you pay a venue directly from your own account. Feera does not connect to them and receives nothing from them; you upload the screenshot yourself.

Our site analytics, live updates and the first reading of screenshots run on our own server and send nothing to anyone else.

A gym or club you are a member of may take an identification photo of you at its front desk so its staff can recognise you at the door. Only that club’s staff and you can see it. It is never shown to other clubs or on your profile, it is included in your data export, and it is deleted when you delete your account. A woman who keeps her profile private is never photographed at the desk.

Payment screenshots and automatic reading

When you pay a venue by JazzCash, Easypaisa or bank transfer, you upload a screenshot of the payment. We store it privately. Only you and the venue's staff who check payments can see it.

To help the venue check your payment quickly, we read the screenshot automatically to find the amount, date, transaction number and receiving account. We first read it on our own server in Germany. If that is not clear enough, and the venue has not switched this off, we send the image, with only the name of the payment method, to Anthropic, an AI provider in the United States, which reads it for us. Anthropic processes the image under its commercial terms, does not use it to train its models, and deletes it after the limited period those terms set. We do not send your name, phone number or account details from your Feera profile with it, but the screenshot itself may show names, account numbers and amounts.

The automatic reading only suggests whether the payment matches. A person at the venue always makes the decision. If something looks wrong, the venue checks it by hand, and you can contact the venue or us.

A venue can choose to check every screenshot by hand, with no AI reading, and Feera can switch AI reading off for everyone. If you prefer that no AI reads your screenshot, pay by card, pay at the venue, or ask the venue to check by hand.

Your screenshots and what we read from them are included when you export your data, and are deleted when you delete your account. The payment record itself is kept for the venue's accounts and tax records.

Who has looked at your details

Venue staff can see what they need to run your bookings, classes and appointments. When a staff member opens your customer record, member profile, body measurements, intake form or other private details, we log which venue it was, what kind of staff member opened it, and when.

You can see the last 90 days of this on your privacy page. If you see access you do not expect, tell the venue or write to [email protected]. We keep this log for two years and use it to investigate misuse.

Your rights

You can export every piece of data we hold about you, and request deletion of your account. Deletion is honoured within 30 days, with a 7-day grace period.

When you accept our terms or this policy, or say yes or no to something optional (marketing messages, body measurements shared with your trainer, before and after photos), we record what you agreed to, which version of the text you saw, and when. If you change your mind, we record that too. You can change optional choices at any time on your privacy page, and the change takes effect straight away. These records are part of your data export.

How long we keep it

Account data is kept while your account is active and for 30 days after deletion. Match and rating data is kept as long as other players' ratings depend on it. Tax receipts are kept for the periods Pakistani and EU tax law require.

The log of who looked at your details is kept for two years. Records of staff and money actions are kept for two to seven years, depending on whether money was involved. Delivered notifications are cleared after 180 days.

Padel interest sign-ups are deleted when you ask us to remove you ([email protected]). Otherwise we review them and delete them 24 months after you signed up; signing up again does not extend that.

How we keep it safe

The phone number and email on your profile are encrypted at rest with Postgres pgcrypto (AES-256), under a key kept outside the database and rotated every quarter. So are the private details venues keep: leads and their notes, body measurements, intake answers, colour formulas, home visit addresses, walk-in numbers, imported customer lists and invites, and venues' WhatsApp credentials. We find a profile by number or address through a keyed hash, so a whole number finds it and a part of one does not.

Your sign-in phone number and email are also held, unencrypted, by our sign-in system, because that is how it finds your account when you sign in. When we moved profile numbers and addresses to encrypted storage on 15 October 2026, the old unencrypted copy was kept only until that release was confirmed working, then deleted. Backups made before then can still hold it until they are deleted, at most 14 days later.

All traffic uses HTTPS with HSTS.

Two-step sign-in is optional for everyone. You can turn it on with an authenticator app; backup codes let you in if you lose your phone. Once it is on, some sensitive venue actions ask for a code. Turn on two-step sign-in

Age

Feera accounts are for people aged 18 or older. When you sign up you confirm that you are, and we keep a record of that confirmation.

Contact us

Questions or complaints? Email [email protected]

Who is responsible

The data controller is Feera, Lahore, Pakistan. Player records created through a venue are held for that venue, which is jointly responsible for them; the venue can export them at any time. Data is stored on Feera's own server in Falkenstein, Germany. See the security page for detail.

Analytics

We measure site traffic with a self-hosted, cookieless analytics tool running on our own server. It records page views and country, never names, phone numbers, emails or IP addresses, and it honours the browser Do Not Track setting.