Privacy policy

The short version

We don’t sell your data or use it for advertising.
Your data is stored on servers in the European Union, in Dublin (Ireland).
Who you want to meet can reveal your sexual orientation. We only use it with your explicit consent.
We ask for a phone number verified by text message so that everyone on Pista is real. Nobody else sees it.
If you join the waitlist, we only email you to confirm your address and to tell you when your group opens.
You can delete your account from the app at any time: Settings › Account › Delete account.
This website uses no cookies or trackers.

1. Who is responsible

This policy explains how we handle personal data in the Pista app for iPhone and on pista.one. “Pista”, “we” and “us” refer to the data controller:

Controller: Manuel Sampedro Pérez, an individual and the developer of Pista
Tax ID (NIF): 49573698G
Address: Calle Serrano 61, 28006 Madrid, Spain
Email: hola@pista.one

For any privacy question, email us at that address with the subject “Data protection”.

2. What data we process

Category	What it includes	Where it comes from
Account	The identifier provided by Sign in with Apple and, if you choose to share them, your name and email (which may be a private Apple relay address). We never see your Apple password.	Apple, when you sign in
Profile	Name, date of birth, gender and whether you show it, what you’re looking for, sports and level, when you train, answers to prompts, sporting achievements, height, job, company, education, drinking, smoking, bio, city and the fields you choose to hide.	You
Photos	The photos you upload and smaller versions of them.	You
Approximate location	Coordinates rounded to two decimal places before storage (roughly a one kilometre margin), city and country.	Your iPhone, with your permission
Preferences	The genders of the people you want to meet, age range, distance, what you’re looking for and, with Pista+, filters by sport, level and schedule.	You
Strava link (optional)	The address of your public Strava profile, if you add it. We don’t connect to your Strava account or read anything from it.	You
Interactions	Likes (which photo, answer or achievement, and the comment), Aces, profiles you pass on, matches, messages, plan invitations, plans you create and plans you join.	Your use of the app
Safety	Blocks and reports you make or receive, with the reason, details and context.	You and other users
Usage and technical	When you were last active, your day streak, available Boosts and Aces, the device token for notifications and its environment.	Your iPhone and the app
Phone	Your mobile number and when you verified it with a code by text message. We also keep an encrypted summary (hash) of the number for fraud prevention.	You, when you verify it
Waitlist	Your email, your city, your language, when you agreed and confirmed, your place, your points, who shared the link with you and how many people you’ve brought. If you join from the app, your account instead of your email.	You, on the website or in the app
Invites and ambassadors	The invites you create, who invited you and its status, the ambassador code or link you used and the reward you both got. The ambassador only sees numbers, never your name.	Your use of the app and the links
Fraud signals	Encrypted summaries (keyed hashes) of the network you connect from, cut down to an address block, of your iPhone’s identifier for Pista, of your phone and of your Apple ID. We never store your IP address or those identifiers in clear. Where Apple allows it, a DeviceCheck flag that says whether that iPhone has had Pista before.	Your iPhone and connection, when you use the app or the website
Usage events	Steps such as joining the waitlist, confirming your email, verifying your phone, completing your profile, inviting someone or getting Pista+, with their date. We use them to measure the funnel as a whole.	Your use of the app and the website
Purchases	Transaction IDs, the product bought (Pista+, Boosts or Aces), date, price, currency, whether it was a free trial or an offer, and expiry date. We never receive your card details.	Apple
Founders	Your founder number in your city.	Your use of the app
Support	Whatever you tell us when you get in touch, and your email address.	You

Special category data

Some Pista data falls into the special categories of Article 9 of the General Data Protection Regulation (GDPR):

Data that can reveal your sex life or sexual orientation. The genders of the people you want to meet, together with your own gender and what you’re looking for, can reveal your sexual orientation. Using a dating app also says something about your personal life.

We only process this data with your explicit consent, which we ask for in the app before collecting it. You can withdraw it at any time (section 4).

We don’t ask for other sensitive data, such as ethnic origin, religion, political opinions or health. If you choose to mention something like that on your profile or in a message, bear in mind other people will see it.

3. Why we use your data, and on what legal basis

Purpose	Data	Legal basis
Creating your account and letting you sign in	Account	Performance of a contract, meaning the terms of use you accept (Art. 6(1)(b) GDPR).
Showing your profile and showing you compatible profiles by age, distance, preferences and sports	Profile, photos, approximate location, preferences	Contract. For your gender preferences and what they reveal about your orientation, explicit consent (Art. 9(2)(a) GDPR).
Likes, matches, chat, plans and notifications	Interactions, device token	Contract. Push notifications also require your permission in iOS.
Showing the button to view your Strava on your profile	Strava link	Contract. It’s optional and you can remove it whenever you like from Edit profile.
Pista+, Boosts and Aces: verifying purchases with Apple and giving you what you bought	Purchases	Contract.
Streaks and founder numbers	Usage	Contract.
Community safety: reviewing reports, enforcing the guidelines, preventing fraud, spam and fake accounts, and detecting minors	Safety data, plus the profile, photos and interactions needed for each case	Legitimate interest in keeping Pista safe for the people who use it (Art. 6(1)(f) GDPR). If reviewing a report requires looking at special category data, we rely on the consent you gave to use it in the app, and only to the extent strictly necessary.
Verifying your phone so that everyone on Pista is real	Phone	Contract. It’s a requirement to use Pista, explained when you sign up.
Waitlist: holding your spot, confirming your email, telling you when your group opens and giving you your access code	Waitlist	Consent (Art. 6(1)(a) GDPR), given when you join and confirmed with the link in the email.
Invites, ambassador codes and their rewards	Invites and ambassadors, account	Contract (the rules are in the terms).
Preventing fraud in invites, rewards and commissions: duplicate accounts, self referrals and accounts deleted to claim again	Fraud signals, usage events, waitlist	Legitimate interest in making sure rewards go to real people and aren’t abused (Art. 6(1)(f) GDPR). A suspicious case never locks you out of the app: it only holds the reward or commission until a person reviews it.
Measuring the funnel (how many people join, get in, are validated or get Pista+)	Usage events	Legitimate interest in improving Pista. We only look at totals, never at individual profiles.
Answering your questions and rights requests	Support, account	Contract and, for rights requests, legal obligation (Art. 6(1)(c) GDPR).
Complying with legal obligations and requests from authorities	Whatever the law requires in each case	Legal obligation (Art. 6(1)(c) GDPR).
Defending ourselves against claims	Whatever each case requires	Legitimate interest (Art. 6(1)(f) GDPR) and, for special category data, Art. 9(2)(f) GDPR.

Where we rely on legitimate interest, we’ve checked that it doesn’t disproportionately affect your rights and interests, and you can object (section 8).

The account data and the profile data marked as required in the app are needed to use Pista. Without them we can’t provide the service. Everything else is optional.

5. Who else sees or handles your data

Other Pista users

Anyone who sees your profile will see your name, your age (never your date of birth), your gender if you choose to show it, your city and approximate distance in kilometres, your sports and level, schedule, what you’re looking for, answers, photos, achievements, any optional details you haven’t hidden, your Strava link if you’ve added one, your founder number, whether you’ve been active recently and whether you have an active Boost.

We never show other people your exact location, your date of birth, the genders you’re interested in or your email. Messages are only visible to the people in the chat. If you join a plan, the other people in it can see your profile.

Profile photos are served through links that aren’t published outside the app, but anyone who has the exact link to a photo could open it.

Shared plans

If you share a link to a plan, anyone who has it can see its basic details on this website: sport, title, description, date, place and spots left.

Providers who process data on our behalf

Supabase, Inc. (United States): database, sign in, photo storage, server functions and real time messaging. The data is hosted in the European Union, on Amazon Web Services, region eu-west-1 (Dublin, Ireland).
Apple, to send you notifications through the Apple Push Notification service.
GitHub, Inc. (United States), which hosts this website.
Twilio Inc. (United States), which sends the text messages with the code to verify your phone.
Resend (Plus Five Five, Inc., United States), which sends the waitlist and ambassador emails.
The email provider we use to manage hola@pista.one.

They all process data following our instructions and under a data processing agreement.

Apple as an independent controller

Sign in with Apple, the App Store and billing for in app purchases are Apple services. For those, Apple (Apple Distribution International Ltd. in the European Union, and Apple Inc.) processes your data as a controller under its own privacy policy. We only receive what Apple passes on and you authorise.

Authorities

We share data with courts, the police or other authorities only when the law requires it or when it’s needed to protect someone’s life or physical safety.

6. International transfers

We store your data in the European Union. Even so, Supabase, Apple, GitHub, Twilio and Resend are US companies, and their staff or sub-processors may access some data from outside the European Economic Area, for example to provide technical support or for security.

In those cases the transfer relies on the EU-US Data Privacy Framework where the company is certified under it and, if not, on the standard contractual clauses approved by the European Commission, with additional safeguards where needed. You can ask us for a copy of these safeguards at hola@pista.one.

7. How long we keep your data

While you have an account. We keep your data while you use Pista. If you delete a photo or change something, we replace the previous version.
When you delete your account. We delete your profile, photos, preferences, likes, matches, messages, plans and notification tokens from our systems straight away, and within 30 days at most they’re gone from backups too.
Reports. Reports and the information needed to handle them are kept for up to 12 months, even if the account is deleted, to protect the community and stop banned people from coming back with a new account. After that they’re deleted.
Purchases. Apple, as the seller, keeps billing records in line with its legal obligations. We keep transaction IDs while your account exists, unless we need to keep them restricted to deal with a claim or a legal obligation.
Waitlist. If you don’t confirm your email, we delete it after 30 days. If you do, we keep it until you get into Pista or ask us to remove you. Once you’re in, your spot is linked to your account and deleted with it.
Fraud signals. Network and device summaries are deleted after 90 days. When you delete your account we keep only those encrypted summaries and the dates for 90 days, so nobody can delete an account and come back to claim the same reward again. Then they’re deleted.
Usage events. Up to 400 days. When you delete your account they’re unlinked from you and only remain as totals.
Invites and commissions. The record of who invited whom and of ambassador commissions is kept without your profile data for as long as needed to reconcile payments and meet tax obligations.
Support emails. As long as needed to sort out your request and, after that, restricted for as long as claims could arise.

When the law requires us to keep something, we keep it restricted (“bloqueado”), as set out in Article 32 of Spain’s Organic Law 3/2018 on Personal Data Protection (LOPDGDD): set aside, not used, and only available to courts and authorities for the legal period.

8. Your rights

You can exercise these rights over your data at any time:

Access: find out what data we hold and get a copy.
Rectification: correct anything that’s wrong or incomplete.
Erasure: have it deleted.
Restriction: have us stop using it while we deal with a complaint from you.
Portability: get the data you gave us in a structured, commonly used format, or have us send it to another controller.
Objection: to processing based on legitimate interest.
Withdraw consent at any time (section 4).
Not be subject to automated decisions with legal or similarly significant effects (section 10).

How to exercise them

In the app. You can edit your profile, hide details, pause your profile and delete your account in Settings › Account › Delete account.
By email. Write to hola@pista.one with the subject “Data protection” and tell us which right you want to exercise. As you sign in with Apple, we may ask for some account details to check it’s really you. We’ll never ask for more than we need.

It’s free. We’ll reply within one month, which can be extended by two more months for complex requests. If that happens, we’ll let you know.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or to the authority in your country of residence. We’d appreciate it if you wrote to us first so we can try to put it right.

9. Under 18s

Pista is for over 18s only. We check the date of birth when the profile is created and don’t let anyone younger continue. If we know or suspect an account belongs to a minor, we close it and delete their data. If you think someone is underage, report them in the app or email us.

10. Profile order and automated decisions

To decide the order in which we show you profiles, we use automated criteria: whether someone has an active Boost, whether there’s already interest from the other person, sports in common, recent activity and distance. We also filter by your age, distance and gender preferences and, with Pista+, by sport, level and schedule.

This isn’t a decision with legal or similarly significant effects within the meaning of Article 22 GDPR: it only changes the order in which you see people. We don’t build profiles for advertising.

11. Security

We apply technical and organisational measures appropriate to the risk, including:

Encryption in transit (HTTPS) and encryption at rest on our provider’s servers.
Row level access rules: each account can only read and change what belongs to it.
Location is rounded before storage, and other people only see the distance in kilometres.
Your date of birth, location and preferences are never sent to other users.
No passwords of our own: sign in happens through Apple, and your phone is verified with a one-time code.
Fraud signals are stored as summaries encrypted with a secret key, never in clear.
Data relating to purchases, Boosts, Aces or founder numbers can’t be changed from the app.
Access to production data is limited to the controller.

No system is perfect. If a security breach puts you at risk, we’ll tell you and notify the Spanish Data Protection Agency within the legal deadlines.

12. This website, no cookies

pista.one uses no cookies, analytics, pixels or any other trackers, and stores nothing in your browser. Fonts are served from our own domain, so the site doesn’t connect to Google or any other third party when it loads. That’s why you don’t see a cookie banner.

Like any server, GitHub, which hosts the site, receives your IP address when you visit and may keep it in its logs for security. If you open a shared plan link, your browser requests the plan details directly from our Supabase server, which also receives your IP address in order to respond.

If you join the waitlist, the site sends your email and city to our server, which keeps an encrypted summary of your network to stop automated sign ups. Your private link to check your place goes in the page address, not in cookies. The ambassador and admin dashboards keep your session only in that tab’s memory, which the browser clears when you close it.

If you follow a link to the App Store or Apple Maps, Apple’s privacy policy applies.

13. We don’t sell data

We don’t sell or rent your data, we don’t share it with third parties for their own advertising, and there are no ads in Pista.

14. Changes to this policy

If we change anything important, we’ll let you know in the app before it applies and, where needed, ask for your consent again. The date at the top shows when it was last updated.