Privacy policy

The 300 is a private members' club for fathers in Dubai. This policy explains what the club's app collects, why it collects it, who else sees it, and how you get rid of it.

The short version: the app holds what you tell it and what you do in the club. It is visible to approved members only. Nothing is sold, nothing is advertised against, and nothing follows you around other apps or websites.

This policy covers The 300 app on iOS and Android, and this website.

Section 01Who is responsible

The 300, Dubai, United Arab Emirates, decides how and why your personal data is used, and is responsible for it.

Questions, requests and complaints: hasher@the-300.com.

Section 02Who the app is for

Membership is by invitation and confirmed by an admin. There are no open sign-ups. The app is for adults aged 18 and over.

Children do not have accounts and do not use the app. Section 08 covers the small amount of information a member may record about their own children.

Section 03What the app collects

Your account

• Email address. You sign in with a six-digit code sent to your email. There is no password.
• First and last name.
• Member number, assigned when you are approved.
• Mobile number. Asked for once, the first time you request a restaurant booking, because the venue needs a number against the reservation.

Your profile, seen by approved members

• What you do, and where you live as a neighbourhood you type yourself. The app does not use location services and never reads your device's location.
• One fun fact, optional.
• The sports you are interested in.
• The name of the member who put you forward, entered as free text.
• Your own estimate of your padel level, used only to seed your starting rating.

What you do in the club

• Event RSVPs, tickets, guest counts, and your answers to any extra questions an event asks, such as a contact number. The app can remember those answers so you do not retype them.
• Padel sessions you join, match scores, the names of any guests you bring, your rating and its full history, streaks and achievements.
• Poll votes.
• Posts and comments on the community board.
• Gatherings you host or join, and your votes on proposed times.
• Recommendations you post, including the business name, category, description and any contact details you choose to add, and the endorsements you give.
• Trips: a city and dates, if you choose to tell the club you are away.
• Photos you upload to an event or a padel session.
• A WhatsApp number, only if you switch on Plan something and choose to be reachable that way.
• Your notification preferences, and your annual Wrapped summary, which is generated from the above.

Payments

Membership fees, event tickets and merchandise are paid through Stripe. Card details are entered with Stripe directly, in a browser window it controls. The app never sees, handles or stores a card number.

What is kept is the record of the transaction: amount, currency, status, date, and the Stripe reference. For merchandise, the items ordered and, if you give one, a delivery address. Orders are handed over in person by the club, so an address is optional.

Your device

• A push notification token and whether the device is an iPhone or Android, so notifications can reach you.
• Crash and error diagnostics through Sentry: device model, operating system version, app version, and the technical detail of what failed. This is used to fix faults and for nothing else.
• Ordinary server logs, kept briefly for security and debugging.

Permissions the app asks for

• Notifications, so the club can tell you about sessions, events and rankings.
• Photos, only at the moment you pick one for an event cover or a session gallery. The app receives the photos you select and nothing else. It does not browse your library.
• Calendar, to add a session or an event when you ask it to. Entries are written on your device. Your calendar is never read and its contents are never sent anywhere.

Each is optional, asked for in context, and the app works without them.

Section 04Why it is held

• To run your membership, including approval, renewal and access. Basis: our agreement with you.
• To run the directory, events, padel, polls and the social features. Basis: our agreement with you, and the legitimate interests of the club in operating itself.
• To take payment and keep proper records. Basis: our agreement with you, and legal obligation.
• To send notifications about club activity. Basis: your consent, given as a device permission and withdrawable at any time.
• To write the club's narrator lines and Power Rankings. Basis: legitimate interests.
• To keep the app working, secure and free of faults. Basis: legitimate interests.

Section 05The narrator

The 300 has a written voice: short lines throughout the app, and a weekly Power Rankings column. Those are generated by Claude, a large language model made by Anthropic.

When a line is generated, the app sends the state that the line is about, for example a first name, a score, a streak, or an attendance count, to Anthropic's API. Nothing is sent beyond what the line needs. Anthropic processes it to return the text and does not use it to train its models. Generated lines are cached, so the same state does not need to be sent twice.

Section 06Who else sees your data

A small number of service providers process data on the club's instructions, and may only use it to provide their service.

Beyond those:

• Other members see your directory profile and your club activity, once you are approved. That is the point of the club. Applicants awaiting approval cannot see the directory at all.
• Admins see the above, plus your membership and payment status, in order to run the club.
• A restaurant receives your name and number when you book through the concierge, because the booking stands in your name.

Your data is not sold, and it is not shared for anyone else's advertising or marketing. It would be disclosed only where the law requires it.

Section 07Where it is held

The club's servers and the providers listed above sit outside the United Arab Emirates, mainly in the European Union and the United States. Using the app involves transferring your data there. Only providers who commit to appropriate safeguards, and to processing data on the club's instructions, are used.

Section 08Children

The app is for adults. Children do not have accounts, do not sign in, and are not tracked in any way.

A member may add their own children to their profile: a first name, a school year, and optionally a school. That is the whole of it. It exists so families with children of a similar age can find each other, and it is visible to approved members only.

You control it entirely. Add, change or remove a child at any time under You, then The kids, then Manage. Removing a child deletes the record.

Section 09Deleting your account

You can delete your account yourself, from inside the app. Open the You tab and choose Delete account at the bottom. It is immediate and it is permanent. There is no waiting period, no form, and no need to ask anyone.

Deleting removes your profile, your children's details, your contact details, your RSVPs and tickets, your orders, your padel ratings and history, your achievements, your poll votes, your posts and comments, your trips, your recommendations, and your push tokens.

One category survives, and it is worth understanding why. If you created something the whole club shares, a padel session, an event, a poll, or a photo in a shared gallery, that item is handed to an admin rather than destroyed. Deleting a padel session you happened to start would erase every other member's matches and ratings from that night. Your name comes off it. The club's shared history stays.

Records of payment are kept where accounting and tax law requires it. Stripe holds its own record of transactions under its own policy.

Admins cannot delete their own accounts in the app, because doing so would orphan club-wide content. An admin who wants to leave should write to hasher@the-300.com and it is handled by hand.

Section 10How long it is kept

While you are a member, and for as long as the club needs it to operate. After deletion, only what section 09 describes. Generated narrator lines expire by themselves, within an hour for most of the app and a year for the annual summaries. Diagnostics are held by Sentry on a rolling window.

Section 11Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and under equivalent rights if another regime covers you, you may:

• ask what is held about you, and get a copy;
• have anything inaccurate corrected. Most of it you can correct yourself under You, then Edit profile;
• have your data deleted, either through section 09 or by asking;
• object to, or ask to restrict, certain processing;
• ask for your data in a portable form;
• withdraw consent where consent is the basis, notifications being the obvious one;
• complain to the UAE Data Office.

Write to hasher@the-300.com. You will get a response within 30 days.

Section 12Security

Access is enforced at the database itself, with row-level security, so a member can only read what a member is entitled to read, and an applicant awaiting approval cannot reach the directory. Sign-in uses a one-time code sent to your email, so there is no password to lose or reuse. All traffic is encrypted in transit.

No system is perfect. If something goes wrong that affects you, you will be told.

Section 13Changes to this policy

If this policy changes, the date at the top changes with it, and anything significant is flagged to members in the app.

Section 14Contact