Privacy Policy

01Who we are

This Privacy Policy explains how Quik Sports ("Quik Sports", "we", "us", "our") collects, uses, shares and protects personal data when you use the Quik Sports mobile apps for Android and iOS, the website at quiksports.app, and related services (together, the "Services").

We are the data controller (called a "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023) for personal data processed through the Services. Where a ground owner or academy uses Quik Sports to manage their own customers or students, that venue is also responsible for how it uses that data.

By using the Services, you acknowledge this Policy. If you do not agree, please do not use the Services.

02Information we collect

Information you give us

• Account details: name, mobile number, email address (optional), profile photo, date of birth, gender (optional), city and PIN code, the sports you play, and your role (player, ground owner, academy).
• Venue and academy details (owners only): venue name, address and map location, photos, prices, slot timings, batches, fee plans, and ownership proof documents.
• Payout details (owners only): UPI ID, bank account holder name, account number and IFSC, used so players can pay you and so we can settle online payments.
• Student details (academies): names and contact numbers of students, attendance, fee records and announcements that an academy enters.
• Team content: team names, squads, game plans, team wallet and split ledger entries, and messages in game chats.
• Reviews, photos and support requests you submit.

Information collected automatically

• Booking and usage data: bookings, carts, favourites, searches and in-app actions.
• Location: your approximate or precise location, only if you allow it, to show venues near you. You can turn this off in your device settings at any time.
• Device and log data: device model, operating system, app version, IP address, crash and diagnostic logs, and session identifiers.

Information from third parties

• Google Sign-In: if you choose it, your name, email address and profile picture from your Google account.
• Payment partners: payment status, transaction ID, amount and method from Razorpay or Cashfree. We never receive or store your full card number, CVV, UPI PIN or net-banking password.
• Messaging partners: delivery status of one-time codes sent through WhatsApp (Meta).

03How we use your information

We do not use your data for third-party advertising, we do not show ads in the app, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

04App permissions

The app asks for device permissions only when you use a feature that needs them. You can deny or revoke any permission in your phone's settings; the related feature will simply stop working.

05How we share information

We do not sell or rent your personal data. We share it only as described below:

• With venues and academies you interact with: when you book or enrol, the ground or academy sees your name, phone number and booking or enrolment details so it can serve you.
• With your teammates: your name, photo and the entries you add are visible to members of teams you join.
• Publicly in the app: venue listings, reviews and your display name on reviews.
• With service providers who process data on our behalf under contract:
  • Cloud hosting and database providers (servers and storage)
  • Meta Platforms (WhatsApp Business Platform), to deliver one-time codes and service messages
  • Google (Google Sign-In) and Google/Apple location services, to show venues near you
  • Razorpay and Cashfree, to process online payments and refunds
• For legal reasons: to comply with law, court orders or requests from government authorities, or to protect the rights, safety and property of Quik Sports, our users or the public.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, under the same protections as this Policy.

06Data from Meta and WhatsApp

We use the WhatsApp Business Platform provided by Meta to send you one-time sign-in codes and transactional messages (for example booking confirmations) that you have requested. In doing so:

• We share only your mobile number and the message content with Meta, solely to deliver that message.
• We do not send marketing or promotional messages on WhatsApp without your opt-in, and you can opt out at any time by contacting us.
• Any data we receive through Meta's platforms is used only to provide the Services, is never sold, and is never used for advertising or to build profiles.
• Meta's own processing is governed by the WhatsApp Privacy Policy.
• You can ask us to delete any such data by following our data deletion instructions.

07How long we keep data

• Account data: for as long as your account is active.
• After account deletion: personal data is erased or anonymised within 30 days, except as below.
• Booking, payment and invoice records: kept for up to 8 years where required by Indian tax and accounting laws, then deleted.
• Security logs and fraud records: kept for up to 180 days, or longer where needed for an investigation or a legal claim.
• Support tickets: kept for up to 2 years after they are resolved.
• Backups: deleted data may stay in encrypted backups for up to 90 days before being overwritten.

08How we protect data

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), hashed passwords, short-lived one-time codes, role-based access controls for our staff, and audit logs for administrative actions. Payment data is handled by PCI-DSS compliant payment partners.

No method of transmission or storage is 100% secure. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

09Your rights and choices

Depending on where you live, you have the right to:

• Access a summary of your personal data and how we process it;
• Correct or update inaccurate or incomplete data (most of it you can edit directly in the app);
• Delete your account and personal data (see Account & Data Deletion);
• Withdraw consent for optional processing such as location, at any time;
• Portability: receive a copy of your data in a common format;
• Object to or restrict certain processing;
• Nominate another person to exercise your rights in case of death or incapacity (DPDP Act, India);
• Grievance redressal and to complain to a data protection authority, including the Data Protection Board of India.

To exercise these rights, email privacy@quiksports.app from the email linked to your account, or write from the app's Help & support. We may verify your identity first, and will respond within 30 days.

Region-specific notices

EEA/UK (GDPR): the legal bases we rely on are listed in section 3. You may lodge a complaint with your local supervisory authority.
California (CCPA/CPRA): we do not sell or "share" personal information for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights.

10Children's privacy

Quik Sports is meant for users aged 13 and above. Users under 18 must use the app with the consent and supervision of a parent or legal guardian, who agrees to these terms on their behalf. Academies may add details of minor students with the consent of their parents or guardians.

We do not knowingly collect data from children under 13, do not track minors' behaviour, and do not target advertising to them. If you believe a child has given us data without consent, contact privacy@quiksports.app and we will delete it. See also our Child Safety Standards.

11International transfers

We store data primarily on servers located in India or with providers that offer equivalent protection. Some service providers may process data in other countries. Where this happens, we use contractual and technical safeguards required by applicable law.

12Changes to this policy

We may update this Policy from time to time. We will change the "Last updated" date above and, for material changes, notify you in the app or by email before the change takes effect.

13Contact and grievance officer

In line with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, 2023, you can contact our Grievance Officer about any concern relating to your personal data. We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.