This policy explains what personal information ScoreMix processes, why, and what your rights are. It is written for ordinary users and club operators, and is intended to meet the notification requirements of the Protection of Personal Information Act 4 of 2013 (POPIA).
1.Who we are
ScoreMix is operated by Developernauts (Pty) Ltd (registration number K2022344312), 25 Pelzer St, Suideroord, Johannesburg South, Gauteng 2091, South Africa — the responsible party for the ScoreMix platform.
Privacy contact: support@developernauts.com — this mailbox intentionally handles support, privacy, and legal enquiries.
For information a club enters and controls for its own club purposes, the club is generally responsible for why that information is collected; ScoreMix processes it to provide the service. Section 3 of the Terms of Service describes this split.
2.Who this policy applies to
- ScoreMix account holders (organisers and individual users).
- Club owners and club staff.
- Players — people represented by a Player record, whether or not they hold a ScoreMix account.
- Tournament, league, and event participants and registrants.
- RacketMix users who interact with ScoreMix competitions through the RacketMix integration.
- Visitors to our public pages.
3.Information we collect
Account information: name, email address, password (stored hashed), email-verification state, two-factor authentication settings, session and login data.
Player information: first name, surname, display name, email address (where supplied), an uploaded avatar image (where supplied), gender (where supplied — used only for competition functionality such as divisions and team composition), and skill level (where supplied). A Player record may hold a link to a ScoreMix account and/or a RacketMix user identifier.
Club information: club name, description, location, logo, sports, amenities, staff roles, and member lists.
Competition information: registrations (including a registration message and contact details where a registrant supplies them), event participation (including a contact phone number where supplied), rosters, teams, match results, scores, and standings.
Billing information: Paddle customer, subscription, and transaction identifiers and transaction history. We do not receive or store card numbers (see section 9).
Technical information: IP address, user-agent, session identifiers, and security logs, used to operate and protect the service.
We do not collect date of birth, identity numbers, or age-verification information.
4.Information clubs and organisers provide
Clubs and organisers may create Player records and provide participant information to ScoreMix for purposes such as membership administration and running competitions. Many Players therefore appear in ScoreMix before — or without ever — creating their own account. The club or organiser is responsible for having an appropriate lawful basis or authority to provide that information, including parent/guardian or other competent-person authority for junior participants. Section 13 explains what you can do if information about you was added incorrectly or without an appropriate basis.
5.How we use information
We process personal information to:
- operate and secure accounts, including email verification and two-factor authentication;
- run competitions: registrations, rosters, scheduling, scoring, results, and standings;
- maintain the global Player directory and avoid duplicate Player identities (email is used internally as the deduplication key);
- administer clubs: staff roles, memberships, invitations;
- provide the RacketMix integration described in section 7;
- manage billing and subscriptions through Paddle;
- prevent abuse and fraud and keep the platform secure;
- comply with legal and accounting obligations; and
- respond to support and privacy requests.
We do not rely on consent for everything. Depending on the processing, we rely under POPIA on performance of a contract (providing the service you or your club signed up for), our legitimate interests (operating, securing, and improving the platform, maintaining a single global Player identity, and preventing abuse, where those interests are not overridden by your rights), legal obligations (accounting, tax, and other statutory record-keeping), or consent where we specifically ask for it. Information supplied by clubs is provided under the club's own lawful basis or authority (section 4).
6.Global Player directory
ScoreMix maintains one global Player identity per person. Signed-in organisers can search the directory and reuse an existing Player instead of creating a duplicate. A Player's email address is used internally for deduplication only; it is not shown publicly and is not part of any RacketMix payload. Club memberships and competition entries remain tied to their own club or competition context.
7.Public competitions and RacketMix
RacketMix is another service operated by Developernauts (Pty) Ltd and integrated with ScoreMix. Although both services share an operator, they are separate systems with separate accounts, and we disclose the information flow between them transparently. Where a club competition is public (public competition, public and active club), ScoreMix may make available through RacketMix the information necessary for the RacketMix competition experience:
- Player display name;
- the RacketMix user identifier of Players who linked a RacketMix account (and internal Player identifiers in result submissions);
- club, event, and tournament identity (names, slugs, identifiers, sport, dates, format, club city/country/logo);
- teams;
- match information (rounds, courts, formats, timestamps);
- results, scores, and standings;
- club membership status of RacketMix-linked members (for club leaderboards).
The competition APIs of this integration do not send: Player email addresses, phone numbers, registration messages, employer/company information, billing information, gender, or skill level. This exclusion is enforced by automated tests.
Where a RacketMix user registers interest in a public competition through RacketMix, RacketMix sends ScoreMix that user's identifier and any contact details or message they chose to submit; ScoreMix shows these to the organiser of that competition only.
Private club competitions and personal Quick Tournaments are not listed through this integration under current behaviour.
8.Service providers and disclosures
- Hosting, infrastructure and storage providers — we use hosting, infrastructure and storage service providers to operate ScoreMix and securely store application information. ScoreMix's primary production infrastructure is hosted in South Africa.
- Email service provider — we use an email service provider to deliver account, security, invitation and other service communications.
- Paddle — payment and subscription processing (section 9).
- Bunny Fonts — our pages load fonts from fonts.bunny.net, which involves your browser sending a request (including your IP address) to that service.
- RacketMix — another Developernauts-operated service, as described in section 7.
We do not sell personal information and do not use advertising or analytics trackers (section 10). We may also disclose information where the law requires it. Section 16 covers processing outside South Africa.
9.Payments
Paddle processes payments. When you subscribe or buy Tournament Credits, your payment details are entered with and processed by Paddle; ScoreMix does not receive raw card details. We store the billing identifiers (customer, subscription, and transaction references) and the transaction history needed to operate the service and meet accounting obligations. Paddle processes your payment information under its own terms and privacy policy.
11.Information about junior Players
ScoreMix can be used for junior competitions, and we do not prohibit junior participants. We do not collect date of birth or verify age, and we do not collect additional information about children merely to establish age. Clubs and organisers are responsible for having appropriate authority for junior information they provide, including parent/guardian or other competent-person authority where required. ScoreMix does not itself verify parental consent.
12.Retention
- Activity log: cleaned after 365 days (scheduled daily cleanup).
- Failed background jobs: removed after 30 days.
- Club invitations: terminal or expired invitations are removed 90 days after they end.
- Sessions: expire according to the configured session lifetime; expired sessions are garbage-collected.
- Competition and history records (matches, results, standings, memberships) are kept for as long as they serve the competition record — they are the shared history of every participant, so they are not deleted on a schedule. Personal identifiers within them can be anonymised (section 13).
- Billing and accounting records are kept for as long as accounting, tax, and audit obligations require, and may survive account deletion.
- Where historical competition integrity requires a record to remain, anonymisation is used instead of deletion.
13.Account deletion and Player removal
Account deletion removes your ScoreMix login and account-specific data (sessions, notifications, and similar). A club owner must first resolve the club's ownership. Your Player identity and competition history may remain; Quick Tournaments you organised remain as historical records without an organiser. Billing records are retained as described in section 12.
Player privacy removal. If your details were added to ScoreMix and you want them removed, contact support@developernauts.com. For a verified request:
- a Player record with no competition history is deleted outright;
- a Player record with competition history is anonymised: name, email, avatar, gender, skill level, and account/RacketMix links are removed, and historical results show a neutral "Removed player" reference so other participants' results stay intact;
- contact details copied onto related records (event participation phone numbers, registration contact details and messages) are removed;
- an anonymised Player disappears from the Player directory and all pickers.
If the Player was linked to a RacketMix identity or their results had already been made available to RacketMix, a coordinated follow-up in RacketMix (also operated by Developernauts) may be required; ScoreMix's removal acts on ScoreMix data.
14.Security
We protect personal information with safeguards appropriate to the risk, including encrypted connections, hashed passwords, optional two-factor authentication, role-based access control within clubs, server-to-server authentication for the RacketMix integration, and logging of security-relevant events. No system is perfectly secure; if an incident creates a real risk to you, we will respond in line with POPIA's notification requirements.
15.Your privacy rights
Subject to the conditions in POPIA, you may:
- request access to the personal information we hold about you;
- request correction of inaccurate information;
- object to certain processing, where POPIA provides that right;
- request deletion or destruction of information where POPIA provides that right — noting the retention and anonymisation positions above;
- complain to us at support@developernauts.com; and
- lodge a complaint with the Information Regulator (South Africa) — see inforegulator.org.za for current contact details.
Some of these rights are conditional under POPIA; we will explain our reasoning when we cannot meet a request in full.
16.International processing
ScoreMix's primary production infrastructure is hosted in South Africa, but some service providers may process information in other jurisdictions — for example Paddle and Bunny Fonts operate internationally. Where information leaves South Africa, we use appropriate providers and rely on contractual and statutory safeguards appropriate under POPIA.
17.Changes to this policy
We may update this policy as the platform evolves; material changes will be communicated through the platform or by email.
18.Contact
support@developernauts.com — the same mailbox intentionally handles support, privacy, and legal enquiries.