NewSetHome

Legal

Privacy policy

What data we process, what for, who sees it, which providers we use, how long we keep it and how to exercise your rights.

Last updated: 31 October 2026Leer en español

This is an English translation of our Spanish privacy policy. If the two versions differ, the Spanish one prevails.

Summary. We process the data you need to use NewSet: your account, your profile, your matches, your friends, your competitions and your messages. If you give us permission, we also process the match health data your watch measures, which only you can see. We do not sell your data, there are no ads in the app and we do not track you outside it. Your data is stored on servers in the European Union. You can delete your account from the app at any time.

1. Who is responsible for your data

  • Controller: NEWSET SOFTWARE SOCIEDAD LIMITADA, tax ID (NIF) B05827589, registered office at Carrer de Robrenyo, 7, 08014 Barcelona, Spain, registered with the Registro Mercantil de Barcelona (IRUS 1000481238354).
  • Contact for any privacy matter: newset@newset.app.
  • We have not appointed a data protection officer, because our activity does not require one. Any query sent to the address above reaches the people responsible.

This policy applies to the NewSet app for iPhone, Apple Watch, Android and Wear OS, and to the website newset.app.

2. What data we process

Your account

To sign in to NewSet you use your Apple account («Sign in with Apple») or, on Android, your Google account. We receive an identifier for that account, your email address and your name. If you use Apple’s option to hide your email, we receive a forwarding address instead of your real one. NewSet has no passwords of its own.

Your profile

Your name, your username (@username), your photo or the avatar you choose, and any details you want to add: gender, date of birth, city, phone number, dominant hand, playing side, preferred rules, the sports you play and your profile type (player, referee or club). Also whether your profile is public or private, and your app and notification settings.

Your sports activity

  • The matches you play or score: players, rules, date, duration, score and, if scored live, the point-by-point record.
  • The statistics drawn from those matches.
  • Scheduled matches: date, invitations, attendance and reminders.
  • The competitions you take part in or organise: registration, teams, schedule, results, confirmations and attendance.
  • Your match templates.

Your social activity

Your friends, friend requests, the activity shown in your friends’ feed, the people you block and the reports you make.

Messages

The messages you send and receive in the chat, their reactions and poll votes. See section 6.

Data other users provide about you

Another player, a competition organiser or a referee can add you to a match or a competition using your username. That match then appears in your history; matches run by a referee only enter your history if you accept them. Someone may also type your name into a match when you have no account: in that case we only store the name they typed.

Technical data

  • The identifier of each of your devices used to send you notifications, the operating system (iOS or Android) and the app version.
  • Our server’s technical logs, which include the IP address and time of each request. They keep the service running, help us find errors and protect the service against abuse.

The app contains no advertising, no analytics tools, no third-party tracking and no third-party crash reporting.

Phone and watch permissions

  • Camera and photos: only to take or choose your profile photo and to scan the QR code of a court screen. We only store the photo you choose as your profile photo.
  • Local network (iPhone): to send the score to a court screen over that screen’s own wifi.
  • Health: see section 3.
  • Notifications: to tell you about invitations, matches, competitions and messages.
  • Location: NewSet does not currently use your location. If a feature ever needs it, we will ask for your permission at that moment and explain it here first.

You can withdraw any of these permissions in your phone or watch settings. The feature that needs it will stop working, but the rest of the app will work as before.

3. Health data

If you score a match from your watch and give NewSet permission in Health (iPhone and Apple Watch) or in Health Connect (Android and Wear OS), NewSet measures your heart rate, active calories, distance and steps during the match.

  • We store them on our server, linked to your account and to each match, so we can show you your matches’ health statistics on any of your devices.
  • Only you can see them. Your friends, the other players in the match and competition organisers cannot.
  • The match is also saved as a workout in Health or Health Connect, on your own device.
  • We never use them for advertising or marketing, we do not sell them and we do not share them with anyone, except the provider that hosts our server (section 7).

By law, this is health data, a special category of personal data. We only process it with your explicit consent, which you give when you grant the permission. You can withdraw it at any time: remove NewSet’s permission in Health or Health Connect, or turn off health tracking in the app settings. From then on we stop collecting it. If you also want us to delete what is already stored, write to us or delete your account.

4. What we use your data for, and on what legal basis

  • Providing the service you ask for when you sign up (your account and profile, scoring and saving matches, statistics, friends, competitions, chat, notifications about all of these, and support). Legal basis: performance of the contract you accept with the terms and conditions (Art. 6(1)(b) GDPR).
  • Match health data. Legal basis: your explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR).
  • Keeping the service safe, moderating the chat and preventing abuse (the automatic message filter, reports, blocking and suspending accounts that break the rules). Legal basis: our legitimate interest in protecting users and the service (Art. 6(1)(f) GDPR), and what Apple’s and Google’s rules require of apps with chat.
  • Improving the app using aggregated data, which identifies no one, and technical logs. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Complying with the law, answering requests from the authorities and defending ourselves against claims. Legal basis: legal obligation and legitimate interest (Arts. 6(1)(c) and 6(1)(f) GDPR).

We do not make automated decisions that have legal effects on you. The chat filter only stops messages containing banned words from being published; account suspensions are decided by a person.

We will not send you marketing emails without your prior consent.

5. Who can see your data within NewSet

  • Your profile: any NewSet user can see your name, your @username, your photo, your city, your gender, your dominant hand, your playing side and your preferred rules, so they can find you and play with you. If your profile is private, only your friends can see your activity and statistics. Your email, phone number and date of birth are never shown to other users.
  • Your matches: the other players in that match can see them, and they appear in your friends’ activity. While it is being played, a group match can be followed live by its players, their friends and, if it belongs to a competition, its participants.
  • Your competitions: participants can see the teams, schedule, results and standings.
  • Your messages: the participants of that conversation can see them.
  • Court screens and scoreboard mode: if you connect a match to a club’s screen or to an iPad or tablet in scoreboard mode, the players’ names and the score appear on that screen, visible to anyone at the court. Your health data is not sent to those screens.
  • Your health data: only you.

6. Messages and notifications

What we store

NewSet lets you talk to other users in private conversations, group conversations and the conversations attached to a match or a competition. For each message we store its text, who sent it, the conversation, the time and whether each participant has read it. Messages are text only: images, audio and video cannot be sent. We do not use messages for advertising and do not sell them to anyone.

Notifications, Apple and Google

When you receive a message, we notify you with a notification sent by Apple (on iPhone and Apple Watch) or Google (Firebase Cloud Messaging, on Android). By default, the message text travels inside that notification so that you can see it on your lock screen. This is how messaging apps normally work, but it means the text passes through Apple’s or Google’s servers on its way to your device, and anyone who can see your screen can read it.

You can avoid this. In the app’s notification settings, turn off message previews: the notification will then only say you have a new message, without the text. You can also turn off message notifications or mute a specific conversation.

How long we keep messages

Messages are kept for as long as the conversation exists, so you can read it again. A match’s conversation stops accepting new messages after the match, but can still be read.

When you delete a message, it disappears immediately and its text is permanently erased within 30 days. If someone had reported it before, we keep a copy of the text inside the report so it can be reviewed (see section 7 of the terms).

Your messages if you delete your account

If you delete your account, you leave all your conversations. The messages you had already sent are not deleted from those conversations, because they are part of a conversation that also belongs to the others: they are no longer linked to you and appear as sent by a deleted user. If you want a particular message to disappear, delete it before deleting your account.

7. Providers and international transfers

To work, NewSet uses these providers, which process data on our behalf and only to provide their service to us:

  • Supabase: database, accounts, profile photos, real-time features and server functions. Your data is hosted in the European Union (Ireland), on Amazon Web Services infrastructure.
  • Apple: Sign in with Apple and notifications on iPhone and Apple Watch.
  • Google: Google sign-in and notifications on Android (Firebase Cloud Messaging), and NewSet’s email (Google Workspace).
  • Resend: sends the NewSet team an alert for each report, with the reported content.
  • Vercel: hosts this website and measures its visits (section 13).

Apple and Google also process your data on their own account, as controllers, when you use their services (your Apple or Google account, Health, Health Connect, the App Store and Google Play), under their own privacy policies.

Some of these providers are in the United States or may access data from there. In those cases, the transfer has the safeguards the GDPR requires: the European Commission’s adequacy decision for companies certified under the EU-U.S. Data Privacy Framework, or the standard contractual clauses approved by the Commission. You can ask us for more information at newset@newset.app.

Apart from these providers, we will only disclose your data to third parties if the law requires it (for example, to a court or the police) or if NewSet is transferred to another company; in that case we will tell you beforehand.

8. How long we keep your data

  • While you have an account, we keep your profile, matches, statistics and everything else you need to use NewSet.
  • Deleted messages: their text is erased within 30 days.
  • Reports: for as long as needed to resolve them and, after that, only what is strictly necessary to handle possible claims.
  • Server technical logs: a few days.
  • Backups: we back up the database so as not to lose information; backups are temporary, and your data disappears from them when they are replaced by newer ones.

When you delete your account, what we explain in section 9 happens. We may keep some data blocked for the periods set by law, solely to deal with legal liabilities.

9. Deleting your account

You can delete your account from the app, on iPhone or Android: in your profile settings, at the bottom, tap «Delete account». If you no longer have the app, write to us. We explain it step by step on the Delete your account page.

  • Deleted: your account, your profile, your photo, your health data, your friends and requests, your settings, your templates and your device identifiers.
  • Kept, no longer linked to you: the matches you played with other people, because they are also part of their history, and the messages you sent (section 6).
  • If you were the only organiser of an ongoing competition, it passes to another participant or, if no one is left, it is cancelled.
  • On iPhone, deleting your account also revokes NewSet’s access to your Apple account. If you signed in with Apple on Android, you can revoke it yourself in your Apple account settings.
  • Workouts saved in Health or Health Connect are on your device and we do not delete them: you can delete them from those apps.

10. Your rights

Regarding your personal data, you have the right to:

  • access it and know how we process it;
  • rectify it if it is inaccurate (you can change most of it yourself in your profile);
  • erase it;
  • object to our processing it on the basis of legitimate interest;
  • restrict its processing;
  • take it with you in a common format (portability);
  • withdraw your consent at any time, without affecting what we did before.

To exercise them, write to newset@newset.app from your account’s email address or telling us your @username. If we cannot confirm it is you, we will ask for some more information. We will reply within one month at the latest.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority of your country. We would be grateful if you wrote to us first so we can try to resolve it.

11. Minors

NewSet is for people aged 18 or over. We do not allow minors to register and do not knowingly collect their data. If you know of an account belonging to a minor, write to newset@newset.app and we will deactivate it and delete its data.

12. Security

All communication between the app and the server is encrypted. Each user can only read and change what belongs to them, and only the NewSet team members who need it for their work can access the server. No system is infallible: if a security breach put your data at risk, we would report it to the authority and, where appropriate, to you, as the law requires.

13. The website

This website uses no advertising or tracking cookies. It measures visits with Vercel Web Analytics and performance with Vercel Speed Insights, which use no cookies and give aggregated figures: how many visits there are, from which pages and from which country, without identifying anyone. Clicks on the store and social media buttons are counted the same way. If you email us, we will only use your data to reply to you.

14. Changes to this policy

If what we do with your data changes, we will update this policy and the date above. If the change is significant, we will also tell you in the app before it applies.