Privacy Policy

Information We Collect

We collect information you provide directly and information generated by your use of the app:

• Phone number — used to verify your identity via OTP at sign-up and login. We do not share your number with other users.
• Profile information — name, role (player/team owner/ground owner), and optional profile photo.
• Ground location — addresses and coordinates that describe a cricket ground. Ground owners may enter these manually or, with your permission, use your device's location (GPS) to auto-fill the ground's coordinates during ground registration. Device location is accessed only for this purpose and only while you are using the feature; we do not track your location in the background.
• Camera and photos — with your permission, we access your camera and photo library so you can capture or upload a profile or ground photo and scan QR codes. We only access the images you choose.
• Cricket data — match scores, team stats, ground bookings (including slot times and booking amounts), and tournament records you create or participate in.
• Imported files — photos, screenshots, or CSV files you choose to upload to import your statistics. We use these only to read the numbers from them (see Section 2) and do not retain the original file after the statistics have been extracted.
• Streaming connections — if you choose to live-stream a match, the account you connect (for example your YouTube/Google or Facebook account) and the access tokens that let us run the broadcast on your behalf. See Section 4.
• Device information — device type and OS version, used for crash reporting and analytics.
• Usage data — screen events and feature interactions, collected via PostHog to improve the product.

How We Use Your Information

• To provide, maintain, and improve the Cricspace app and services.
• To send one-time-password (OTP) messages for authentication via SMS and WhatsApp (delivered through Twilio).
• To send push notifications about matches, bookings, and updates you have opted into (via Firebase Cloud Messaging).
• To automatically read statistics from a photo, screenshot, or CSV file you upload to import your stats. To do this, the file is sent to a third-party AI provider which extracts the numbers; the file may be processed on servers outside India, including in the United States. Under the provider's commercial API terms, this data is not used to train its models. We use only the extracted figures and delete the original file after processing.
• To broadcast the live matches you choose to stream, together with the on-screen scoreboard, to the destination you select (see Section 4).
• To generate anonymous analytics that help us understand how the app is used.
• To diagnose crashes and fix bugs (via Firebase Crashlytics and Sentry).
• To comply with legal obligations.

Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Service providers — Supabase (database and auth), Twilio (SMS and WhatsApp OTP), Firebase (push notifications and crash reporting), Sentry (error monitoring), PostHog (analytics), and a third-party AI provider (automated extraction of statistics from files you upload). Each provider is bound by a data processing agreement.
• Streaming platforms — when you choose to live-stream a match, your live video, the on-screen scoreboard, and match details are transmitted to the destination you select (YouTube, Facebook, the Cricspace Channel, or a custom streaming target). See Section 4.
• Other users — Your display name, role, and cricket stats are visible to other Cricspace users within matches, teams, or tournaments you join.
• Legal requirements — If required by law or to protect the safety of our users.

Live Streaming

Cricspace lets you live-stream your matches with an on-screen scoreboard. You choose where to broadcast: your own YouTube channel, your own Facebook Page, the Cricspace Channel (our official YouTube channel), or a custom streaming (RTMP) destination you provide. Anything you broadcast is public to anyone who has the link, and you are responsible for the content you stream and for holding the rights to stream it.

When you start a broadcast, we transmit your live match video, the on-screen scoreboard, and team, player, and match details to the destination you have selected. We do this only when you choose to go live.

• YouTube (your channel or the Cricspace Channel). To stream to YouTube you connect your Google account through Google OAuth and grant Cricspace permission to create and manage live broadcasts on your behalf. We request only the scopes needed to run your broadcast and do not access your Gmail, Google Drive, or any other Google data. Cricspace's use of YouTube API Services is subject to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy. You can review or revoke Cricspace's access at any time from your Google Account permissions.
• Facebook. If you stream to your Facebook Page, you authorise the broadcast through Facebook, and your use of Facebook is governed by Facebook's own terms and privacy policy.
• Custom RTMP. If you stream to a custom RTMP destination, your video and scoreboard are sent to the server address you enter; how that destination handles the stream is outside our control.

We never receive or store your Google or Facebook password. Where you connect an account, the access tokens that authorise your broadcasts are stored securely and used only to run the streams you start; you can disconnect an account at any time.

Data Retention

We retain your account and cricket data for as long as your account is active. You may delete your account at any time directly in the app (More → Settings → Delete Account) or by emailing support@cricspace.app. Deleting your account removes your profile, personal information, and the cricket data that belongs solely to you.

Please note that some content you contribute is shared and may persist after your account is deleted: if you are the admin of a team that has other members, administration of that team is transferred to another member so the team and its match history remain available to the rest of the squad; and match scores, tournament records, and statistics from games you played with others remain part of those shared records. Anonymised, aggregated statistical data may also be retained after account deletion.

Security

We use industry-standard measures including encrypted connections (TLS), row-level security on our database, and OTP-based authentication. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Children's Privacy

Cricspace is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Your Rights

Cricspace complies with the Digital Personal Data Protection Act, 2023 (India). You have the right to:

• Access — request a summary of the personal data we hold about you.
• Correct — request correction of inaccurate or incomplete data.
• Erase — delete your account in the app (More → Settings → Delete Account) or request deletion of your account and associated personal data by email, subject to the shared-content exceptions described in Section 5.
• Withdraw consent — withdraw consent for data processing at any time (this may affect your ability to use the app).
• Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email support@cricspace.app. We will respond within 30 days.

Additional Information for Users in the EEA and UK (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. Cricspace is the data controller for this processing.

Legal bases. We rely on the following legal bases:

• Performance of a contract — to create your account, authenticate you, and provide core features (matches, scoring, tournaments, leaderboards, ground discovery and bookings).
• Consent — for non-essential analytics and for accessing your device location, camera, and photos. You may withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent abuse, and diagnose crashes, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

Your GDPR rights. In addition to the rights in Section 8, you have the right to object to processing, to restrict processing, to data portability, not to be subject to solely automated decisions with legal effects, and to lodge a complaint with your local data protection supervisory authority.

International transfers. Some of our service providers (for example, error-monitoring and analytics providers) process data outside the EEA/UK, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision.

Availability in the EEA and UK. Cricspace is not currently offered to users in the European Economic Area (EEA) or the United Kingdom, and the Service is not distributed in those regions. The GDPR information in this section is provided for transparency and will apply if and when we expand into the EEA/UK, at which point we will appoint a representative under Article 27 GDPR and publish their contact details here.

Additional Information for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you certain rights regarding your personal information.

Categories we collect. Identifiers (name, phone number, device identifiers), approximate and precise geolocation, photos you upload, internet/app activity (analytics), and diagnostic data. We collect these for the business purposes described in Section 2.

We do not sell your personal information and we do not "share" it for cross-context behavioural advertising. We disclose data only to the service providers listed in Section 3, and to any streaming platform you choose to broadcast to (Section 4), for the purposes described.

Your California rights:

• Know — request the categories and specific pieces of personal information we have collected.
• Delete — request deletion of your personal information.
• Correct — request correction of inaccurate personal information.
• Opt out — opt out of any sale or sharing of personal information (note: we do not sell or share).
• Non-discrimination — we will not discriminate against you for exercising these rights.

To exercise any of these rights, email support@cricspace.app. We will verify your request and respond within the timeframes required by law.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. Continued use of the app after the effective date constitutes acceptance of the updated policy.

Contact Us

For any privacy-related questions or requests, contact us at:
Cricspace
Email: support@cricspace.app