Privacy Policy

Information We Collect

We collect information you provide directly and information generated by your use of the app:

• Phone number — used to verify your identity via OTP at sign-up and login. We do not share your number with other users.
• Profile information — name, role (player/team owner/ground owner), and optional profile photo.
• Ground location — addresses and coordinates that describe a cricket ground. Ground owners may enter these manually or, with your permission, use your device's location (GPS) to auto-fill the ground's coordinates during ground registration. Device location is accessed only for this purpose and only while you are using the feature; we do not track your location in the background.
• Camera and photos — with your permission, we access your camera and photo library so you can capture or upload a profile or ground photo and scan QR codes. We only access the images you choose.
• Cricket data — match scores, team stats, ground bookings (including slot times and booking amounts), and tournament records you create or participate in.
• Imported files — photos, screenshots, or CSV files you choose to upload to import your statistics. We use these only to read the numbers from them (see Section 2) and do not retain the original file after the statistics have been extracted.
• Device information — device type and OS version, used for crash reporting and analytics.
• Usage data — screen events and feature interactions, collected via PostHog to improve the product.

How We Use Your Information

• To provide, maintain, and improve the Cricspace app and services.
• To send one-time-password (OTP) messages for authentication via SMS and WhatsApp (delivered through Twilio).
• To send push notifications about matches, bookings, and updates you have opted into (via Firebase Cloud Messaging).
• To automatically read statistics from a photo, screenshot, or CSV file you upload to import your stats. To do this, the file is sent to our AI provider (Anthropic, the maker of Claude) which extracts the numbers; the file may be processed on servers outside India, including in the United States. Under Anthropic's commercial API terms, this data is not used to train its models. We use only the extracted figures and delete the original file after processing.
• To generate anonymous analytics that help us understand how the app is used.
• To diagnose crashes and fix bugs (via Firebase Crashlytics and Sentry).
• To comply with legal obligations.

Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Service providers — Supabase (database and auth), Twilio (SMS and WhatsApp OTP), Firebase (push notifications and crash reporting), Sentry (error monitoring), PostHog (analytics), and Anthropic (automated extraction of statistics from files you upload). Each provider is bound by a data processing agreement.
• Other users — Your display name, role, and cricket stats are visible to other Cricspace users within matches, teams, or tournaments you join.
• Legal requirements — If required by law or to protect the safety of our users.

Data Retention

We retain your account and cricket data for as long as your account is active. You may delete your account at any time directly in the app (More → Settings → Delete Account) or by emailing support@cricspace.app. Deleting your account removes your profile, personal information, and the cricket data that belongs solely to you.

Please note that some content you contribute is shared and may persist after your account is deleted: if you are the admin of a team that has other members, administration of that team is transferred to another member so the team and its match history remain available to the rest of the squad; and match scores, tournament records, and statistics from games you played with others remain part of those shared records. Anonymised, aggregated statistical data may also be retained after account deletion.

Security

We use industry-standard measures including encrypted connections (TLS), row-level security on our database, and OTP-based authentication. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Children's Privacy

Cricspace is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Your Rights

Cricspace complies with the Digital Personal Data Protection Act, 2023 (India). You have the right to:

• Access — request a summary of the personal data we hold about you.
• Correct — request correction of inaccurate or incomplete data.
• Erase — delete your account in the app (More → Settings → Delete Account) or request deletion of your account and associated personal data by email, subject to the shared-content exceptions described in Section 4.
• Withdraw consent — withdraw consent for data processing at any time (this may affect your ability to use the app).
• Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email support@cricspace.app. We will respond within 30 days.

Additional Information for Users in the EEA and UK (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. Cricspace is the data controller for this processing.

Legal bases. We rely on the following legal bases:

• Performance of a contract — to create your account, authenticate you, and provide core features (matches, scoring, tournaments, leaderboards, ground discovery and bookings).
• Consent — for non-essential analytics and for accessing your device location, camera, and photos. You may withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent abuse, and diagnose crashes, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

Your GDPR rights. In addition to the rights in Section 7, you have the right to object to processing, to restrict processing, to data portability, not to be subject to solely automated decisions with legal effects, and to lodge a complaint with your local data protection supervisory authority.

International transfers. Some of our service providers (for example, error-monitoring and analytics providers) process data outside the EEA/UK, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision.

Availability in the EEA and UK. Cricspace is not currently offered to users in the European Economic Area (EEA) or the United Kingdom, and the Service is not distributed in those regions. The GDPR information in this section is provided for transparency and will apply if and when we expand into the EEA/UK, at which point we will appoint a representative under Article 27 GDPR and publish their contact details here.

Additional Information for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you certain rights regarding your personal information.

Categories we collect. Identifiers (name, phone number, device identifiers), approximate and precise geolocation, photos you upload, internet/app activity (analytics), and diagnostic data. We collect these for the business purposes described in Section 2.

We do not sell your personal information and we do not "share" it for cross-context behavioural advertising. We disclose data only to the service providers listed in Section 3 for the purposes described.

Your California rights:

• Know — request the categories and specific pieces of personal information we have collected.
• Delete — request deletion of your personal information.
• Correct — request correction of inaccurate personal information.
• Opt out — opt out of any sale or sharing of personal information (note: we do not sell or share).
• Non-discrimination — we will not discriminate against you for exercising these rights.

To exercise any of these rights, email support@cricspace.app. We will verify your request and respond within the timeframes required by law.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. Continued use of the app after the effective date constitutes acceptance of the updated policy.

Contact Us

For any privacy-related questions or requests, contact us at:
Cricspace
Email: support@cricspace.app