Bandeja ("we", "us") is a padel concierge app operated by Lassan Ventures LLC, a Florida limited liability company based in North Miami Beach, Florida, USA. This policy explains what we collect when you use bandeja.dev and the Bandeja app, how we use it, and the choices you have.
01What we collect
Account: your name, email address and a password. Google Firebase Authentication stores the password; we never see it. We also record when your account was created and last used.
Profile: your home area (free text, e.g. "Miami, FL"), your padel level, how many times a week you want to play, your weekly free slots, how you rank Miami courts, your matchmaking preferences, and your language.
Your circle: the people you add to play with, including their name, WhatsApp phone number, level, whether they are a preferred partner, and any note you write about them. If you use your phone's contact picker, only the name and number you select are imported.
Matches and chats: proposed matches, who was invited and who accepted, and the messages you send in a match chat.
Browser language, used once to pick English or Spanish. We do not use your device's location.
02How we use it
To build matches: score courts, times and people, and propose a four.
To reach your circle: once WhatsApp matchmaking is live, to send match invites and reminders on your behalf through WhatsApp.
To keep your data in sync across your devices.
To answer your support requests.
We do not sell your data, show ads, or use advertising trackers. We do not run analytics scripts on bandeja.dev or in the app.
03About your circle's phone numbers
When you add someone's number, you are telling us that you know them and that they expect to hear from you about padel. We use their number only to send the match invites you set up, never for marketing.
Anyone can ask us to remove their number by emailing alan@lassanventures.com.
04Who we share it with
We use a small number of service providers that process data on our behalf:
Google Firebase (Authentication and the Firestore database) stores your account and your data.
Vercel hosts bandeja.dev.
Meta (WhatsApp Business Platform) delivers WhatsApp messages once matchmaking is live.
We share nothing else, except when the law requires it.
05Where your data lives and how we protect it
Your data is stored in Google Firebase in the United States. Each account can read and write only its own data, enforced by database rules. All traffic uses HTTPS.
A copy of your data is also kept on your device (browser storage) so the app works offline. Signing out clears that copy from the device; your data stays in your account.
06How long we keep it
Match chats delete themselves 90 minutes after the match starts.
People in your circle stay until you remove them.
Your account and profile stay until you ask us to delete them.
07Your choices
Edit your profile and your circle at any time in the app.
Sign out to clear the app's data from that device.
To delete your account and all of its data, or to get a copy of it, email alan@lassanventures.com from the address on your account. We will do it within 30 days.
08Children
Bandeja is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.
09Changes to this policy
We may update this policy as Bandeja grows. We will post the new version here with a new effective date, and tell you in the app if the change matters.
10Contact
Questions about privacy? Write to alan@lassanventures.com. Bandeja is a product of Lassan Ventures LLC.