Pad-it Privacy Policy

1. Controller and contact

The controller responsible for processing by the provider is:

Asad Khalid
Sole proprietor trading as The Artisan Protocol
Carl-Fried-Gauß-Str. 6
28357 Bremen
Germany

Email: info@theartisanprotocol.de

2. Privacy at a glance

Pad-it is designed primarily as a local Android app:

• match detection, parsing, filtering and classification take place on your device;
• Pad-it does not include advertising, behavioral tracking or an analytics service;
• Google Drive sync is optional and sends the sync file directly to the Google account you connect;
• ML Kit translations run on the device after any required language model has been downloaded; and
• contacting us is optional and uses your chosen email app.

Some information in match messages can identify other players. You decide which notification sources and messages Pad-it processes and whether that information is synchronized to Drive.

3. Data Pad-it processes

3.1 Match messages and card data

When you share text to Pad-it or enable notification detection, the App may process and store:

• the original notification or shared text;
• the source app name and Android package identifier;
• match heading, date, start time, duration and location;
• match URL and a stable match identifier or fingerprint;
• participant names, player slots and skill levels contained in the message;
• detected language and an on-device translation;
• the time the match was detected or updated;
• the filter group that matched and the reasons a card passed or failed; and
• archive state and player-change alert preferences.

The exact data depends on the text supplied by the source. Do not use Pad-it to process information that you are not entitled to access or store.

3.2 Notification access

If you grant Android notification-listener access, Android technically allows Pad-it's listener to receive notification events broadly. Pad-it checks the source package on the device and discards notifications from unsupported or unselected sources instead of adding them to the match ledger. For a selected source, Pad-it reads the notification text fields needed to recognize and parse a supported match message.

Notification access is optional and can be revoked in Android settings. Directly sharing text to Pad-it remains a separate input method.

3.3 Filter, preference and device data

Pad-it stores filter groups and their order, selected message sources, inversions, ranges and other values. It also stores App preferences such as sorting, language and permission-related state. A random installation/device identifier and timestamps are used to merge synchronized changes deterministically; this identifier is not an advertising ID.

Android and Google Play services may independently process technical information needed to install, update, secure or operate apps. That processing is controlled by the relevant platform provider under its own policy.

3.4 Google Drive account and sync data

Drive sync is optional. If you connect it, Pad-it requests:

• limited Google Drive file access using the drive.file scope; and
• basic account information needed to obtain and display the connected account's email address.

Pad-it creates or locates a visible Pad-it folder in My Drive and stores one readable file named pad-it-sync.json. The file can contain:

• match messages and card source data;
• stable match identifiers and update timestamps;
• archive and player-change alert state;
• deletion markers used to prevent permanently deleted cards from returning; and
• the complete ordered filter-group configuration.

Pass/fail reasons and whether a match is past are recalculated on the device. Local SQLite row identifiers are not treated as portable identities.

Google describes drive.file as per-file access for files created by an app or explicitly opened/shared with it; it is not broad access to every file in your Drive. See Google's Drive scope documentation.

Pad-it stores the connected email address, Drive folder/file identifiers, last successful sync time and sync status locally. Short-lived authorization credentials are obtained through Google Play services when required; Pad-it does not operate its own server for Drive credentials or sync content.

3.5 Support communications

If you contact us, we process the information you include, such as your email address, name, message and attachments, in order to respond and manage the request. Do not send match messages or other people's data unless it is necessary and lawful to do so.

4. Purposes and legal bases

Where the EU General Data Protection Regulation (GDPR) applies, processing by us is based on:

Android permission and Google authorization dialogs control technical access. Granting an operating-system permission is not used as a substitute for GDPR consent where consent is legally required.

Much of Pad-it's processing happens solely on your device under your control, without the content being disclosed to us. When you activate Drive sync, data is transmitted between the App and the Google account you choose, not through a server operated by The Artisan Protocol.

5. On-device language detection and translation

Pad-it uses Google ML Kit to identify message language and translate supported messages on the device. Required language models may be downloaded from Google over the internet and stored on the device. According to Google's documentation, translation text does not need to be sent to a remote translation server. See ML Kit on-device translation and Android model management.

Translations are automated and may be inaccurate. The downloaded model files can consume device storage and are managed through the App/platform components.

6. Recipients and service providers

Personal data is disclosed only where needed for a feature you choose or where required by law. Relevant recipients can include:

• Google Ireland Limited and associated Google entities, for Google account authorization, Google Drive API access, Google Play services and ML Kit model delivery;
• your email provider and ours, when you contact us; and
• public authorities, courts or professional advisers where disclosure is legally required or necessary to protect legal rights.

Pad-it does not sell personal data and does not include third-party advertising or behavioral analytics.

Google processes information under its own terms and Privacy Policy. Your Drive content remains subject to your Google account settings and agreement with Google.

7. International transfers

Google and email providers may process data outside Germany or the European Economic Area. Where GDPR transfer rules apply, transfers must rely on an applicable adequacy decision or safeguards such as the EU Standard Contractual Clauses. Google publishes information about its transfer mechanisms and participation in the EU-US Data Privacy Framework.

8. Storage and retention

On your device

Match cards, source messages, filters, preferences and sync state remain locally until you delete them, clear the App's storage or uninstall the App. Android backup or device-migration services may retain or restore App data according to your device and Google settings.

In your Google Drive

Synchronized data remains in your Drive until you delete the Pad-it folder/file or your Google account removes it. Disconnecting Drive or uninstalling Pad-it does not delete the cloud file. A permanent-deletion marker can remain in the sync file so the deleted card is also removed on other connected devices.

Support requests

We retain support correspondence only as long as necessary to answer the request, maintain appropriate business records, comply with law and handle legal claims. Statutory retention periods may require some records to be kept longer.

9. Security

Pad-it uses Android app storage, scoped Google authorization and a limited Drive permission to reduce unnecessary access. No method of storage or transmission is completely secure. Protect your device and Google account with an appropriate screen lock, strong credentials and available multi-factor authentication.

The Drive sync file is readable to anyone who can access it through your Google account or to anyone with whom you choose to share it. Do not share the Pad-it folder unless you intend to disclose its contents.

10. Your choices and controls

You can:

• use Android settings to grant or revoke notification, overlay, alarm and related permissions;
• select which supported notification sources Pad-it accepts;
• avoid notification access and share match text directly instead;
• connect or disconnect Google Drive in Pad-it settings;
• delete local cards or clear the App's storage;
• delete the cloud file or folder directly in Google Drive; and
• stop all local use by uninstalling the App.

Disconnecting Drive cancels Pad-it's scheduled sync and revokes App authorization where supported, while retaining local data and the existing Drive backup.

11. Information about other players

A Playtomic match message may contain participant names and skill levels. Those players may not use Pad-it and do not provide their information directly to us. The App processes this content because you supply it through a selected notification source or Android share action.

You are responsible for using this information proportionately and lawfully. Do not use Pad-it to build profiles, harass people, publish player data or process special-category data. If another person asks you to remove information that exists only on your device or in your Drive, you control that copy and should handle the request appropriately.

12. Children

Pad-it is not specifically directed at children. A minor should use it only with the involvement and permission of a parent or legal guardian where required. Do not use the App to collect or synchronize children's information unlawfully.

13. Your data-protection rights

Subject to the conditions in applicable law, you may have the right to:

• obtain information about and access to personal data (Article 15 GDPR);
• correct inaccurate data (Article 16 GDPR);
• request erasure (Article 17 GDPR);
• restrict processing (Article 18 GDPR);
• receive portable data (Article 20 GDPR);
• object to processing based on legitimate interests (Article 21 GDPR); and
• withdraw consent at any time for future processing.

To exercise rights concerning data controlled by The Artisan Protocol, email info@theartisanprotocol.de. We may need to verify your identity. For data stored only on your device or in your personal Drive, The Artisan Protocol normally cannot access or delete it for you; use the controls described above.

You also have the right to complain to a data-protection authority. Our competent supervisory authority is:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen
Georgstraße 122–124
27570 Bremerhaven
Germany
Email: office@datenschutz.bremen.de

14. Automated decisions

Pad-it automatically applies the filters you configure to classify cards. This classification only organizes information and triggers App alerts; it does not produce legal or similarly significant effects. Pad-it does not carry out profiling for advertising.

15. Changes to this policy

We may update this Privacy Policy when Pad-it, the law or relevant services change. The current version and update date will be made available with the App or on The Artisan Protocol website. We will provide additional notice where required for material changes.

16. Contact

For privacy questions, contact info@theartisanprotocol.de.