Privacy Policy

SportSphere is a turf (sports ground) discovery, booking, and management platform, operated at A-28/401 Abhishek CHS, Charkop Sector 4, Kandivali (W), Mumbai – 400067. The App serves three types of users:

• Players/Customers ("Users") who search for and book turf slots;
• Caretakers, Managers, and Owners ("Turf Staff") who operate turf venues through the App; and
• Platform Administrators.

This Policy applies to all roles. Some sections apply only to specific roles and are marked accordingly.

Information you provide directly:

• Mobile phone number (required — used for OTP-based login and as your primary account identifier)
• Full name (required during profile setup)
• Email address (optional)
• Profile photograph (optional — selected from your photo library)
• Booking details: turf selected, date, time slot, sport, party size, special requests, and booking notes
• Chat messages exchanged with turf managers/staff, including price negotiation messages and offers
• Reviews and ratings you post about turf venues
• Support requests, dispute descriptions, and any attachments you submit
• For Turf Staff: company/venue details, turf names, addresses, photos of the venue, pricing configuration, invite codes, expense records, and maintenance logs
• For Turf Owners: UPI ID / Virtual Payment Address (VPA) used to receive customer payments, payout and settlement details, and subscription plan selections

Payment information:

• When you pay via our payment gateway partner (Cashfree Payments India Pvt. Ltd.), your card / UPI / net-banking credentials are collected and processed directly by Cashfree on their PCI-DSS compliant infrastructure. We never see or store your full card number, CVV, or UPI PIN.
• We receive and store only: order ID, transaction/UTR reference number, amount, payment status, payment method type, and timestamps.
• For manual UPI payments (pay-to-owner flows), we store the UPI transaction reference/UTR you submit and any payment confirmation screenshot you upload, so the turf manager can verify your payment.

Information collected automatically:

• Approximate and precise device location (only while the App is in use, and only after you grant permission) — used to show nearby turf grounds and calculate distances. You may deny or revoke this permission at any time; the App remains usable, but distance-based features will not work.
• Device information: device model, operating system and version, app version, language, and screen events
• Push notification token (Firebase Cloud Messaging registration token)
• Usage analytics via Google Firebase Analytics: screens viewed, sign-in events, searches, bookings started/completed, and similar in-app events, linked to your user ID and role.
• Crash and diagnostic data via Firebase Crashlytics: crash traces, device state at the time of a crash, and app version — used solely to identify and fix defects.
• Network connectivity state (to handle offline behaviour)

Information from third parties: payment confirmation/status callbacks from Cashfree, and SMS delivery status from our OTP/authentication provider (Firebase Authentication by Google).

Information we do not collect:

• We do not collect government ID numbers (Aadhaar, PAN, passport) from Users.
• We do not access your contacts, call logs, SMS inbox (other than OS-level OTP autofill where supported), microphone, or background location.
• We do not knowingly collect data from children (see Children section).

• Location (when-in-use only): to show nearby turf grounds and calculate distances. Never collected in the background. Optional.
• Photos / media library: to let you choose a profile picture, upload turf venue photos (Turf Staff), and upload payment confirmation screenshots. Accessed only when you initiate an upload. Optional.
• Camera (via image picker, where applicable): to capture a photo for the purposes above instead of choosing from the library. Optional.
• Notifications (push): to send booking confirmations, payment status updates, slot and negotiation updates, reminders, and maintenance alerts. You can disable notifications in your device settings at any time; you may miss time-sensitive booking updates if you do.
• Internet / network state: required for the App to function (all data is synced with our cloud backend).
• Storage / file system (scoped): to generate and share booking receipts/PDFs and to cache images.
• We never use any permission for a purpose other than the one stated above.

We use the information we collect to:

• Create and authenticate your account (phone OTP login);
• Show you nearby turfs, availability, and pricing;
• Create, manage, modify, and cancel bookings, including slot locking to prevent double-booking;
• Process, verify, and reconcile payments and refunds;
• Enable chat and price negotiation between you and turf staff;
• Send transactional notifications (booking status, payment status, OTPs, reminders, negotiation updates);
• Publish your reviews and ratings (displayed with your name);
• Operate role-based features for Turf Staff (dashboards, calendars, team management, expenses, maintenance logs, audit logs of turf configuration changes);
• Detect, investigate, and prevent fraud, payment abuse, double-booking abuse, and violations of our Terms;
• Analyse aggregate usage to improve features and fix crashes;
• Provide customer support and resolve disputes;
• Comply with applicable law, legal process, and tax obligations.

We do not sell your personal data. We do not use your data for third-party advertising.

• Your consent, given when you sign up and when you grant device permissions (you may withdraw consent as described in the Your Rights and Choices section);
• Processing necessary to perform the service you have requested (bookings, payments, chat);
• Our legitimate uses as recognised under the Digital Personal Data Protection Act, 2023, including security, fraud prevention, and compliance with law.

• With turf venues you book: when you make a booking or start a chat/negotiation, the turf's staff (caretaker, manager, owner of that venue) can see your name, phone number, booking details, chat messages, payment status, and any payment screenshot you submit. This is necessary to fulfil your booking.
• With other users: your reviews and ratings are public within the App and display your profile name and photo.
• With service providers (data processors): Google LLC / Google Ireland (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging, Firebase Analytics, and Crashlytics — data may be stored and processed on Google Cloud servers which may be located outside India); Cashfree Payments India Pvt. Ltd. (payment processing, an RBI-regulated payment aggregator); Expo (Expo.dev / 650 Industries) (app build and update infrastructure and push notification tooling). These providers are bound by their own privacy policies and by contractual/data-processing terms and may only process data to provide services to us.
• Legal and safety: we may disclose data if required by law, court order, or a government authority with lawful jurisdiction; or where necessary to enforce our Terms, protect our rights, prevent fraud, or protect the safety of any person.
• Business transfers: if we merge, are acquired, or sell assets, user data may transfer to the successor entity under this same Policy (you will be notified of any material change).

• Data is stored in Google Firebase (Cloud Firestore and Cloud Storage). Google's data centres may be located outside India; by using the App you consent to this cross-border transfer, subject to applicable law.
• Data in transit is encrypted using TLS/HTTPS. Data at rest is encrypted by Google Cloud's default encryption.
• Access to production data is restricted to authorised personnel on a need-to-know basis.
• Payment card/UPI credentials are handled exclusively by Cashfree under PCI-DSS.
• No system is 100% secure. In the event of a personal data breach we will notify affected users and the Data Protection Board of India as required by the DPDP Act, 2023.

• Account and profile data: retained while your account is active.
• Bookings, payments, invoices: retained for 8 years after the transaction, as required for tax and accounting compliance under Indian law, then deleted or anonymised.
• Chat messages and negotiations: retained while your account is active; expired negotiations are cleaned up automatically by scheduled jobs.
• Analytics and crash data: retained per Firebase default retention (up to 14 months for analytics user-level data), then aggregated.
• After account deletion, personal data is deleted or irreversibly anonymised within 30 days, except records we must retain by law (e.g., payment/tax records) or for pending disputes.

Under the DPDP Act, 2023 (and other applicable laws), you have the right to:

• Access — request a summary of the personal data we hold about you;
• Correction — update your name, email, and photo in the App's Profile screen, or request correction of other data;
• Erasure — request deletion of your account and personal data;
• Withdraw consent — revoke device permissions in your OS settings and withdraw processing consent (this may limit App functionality);
• Grievance redressal — complain to our Grievance Officer and, if unresolved, to the Data Protection Board of India;
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, email support@mysportsphere.com from your registered email, or contact us with your registered phone number for verification. We will respond within 30 days.

Account deletion:you can permanently delete your account at any time from the App — go to Settings > Delete Account (available for every account type: Player, Caretaker, Manager, and Owner). This immediately erases your name, phone number, email, date of birth, and profile photo, and revokes your login. Bookings, payments, and reviews already on record are retained as described in the Data Retention section (they are no longer linked back to a deleted profile). You may also request deletion by emailing support@mysportsphere.com with the subject "Delete My Account".

The App is intended for users aged 18 and above. Users aged 13–17 may use the App only with the consent and supervision of a parent/guardian, who must make bookings and payments on their behalf. We do not knowingly collect personal data from children under 13 (or process data of any minor without verifiable parental consent as required by the DPDP Act). If you believe a child has provided us data, contact support@mysportsphere.com and we will delete it.

If you use the web version of the App, Firebase uses local storage and similar technologies to keep you signed in and to measure usage. You can clear these via your browser settings; you will be signed out.

Payment flows may open your UPI app (Google Pay, PhonePe, Paytm, etc.) or Cashfree's hosted checkout page. Those services are governed by their own privacy policies. We are not responsible for the privacy practices of third-party apps or websites.

We may update this Policy from time to time. Material changes will be notified in-app or by notification before they take effect. The "Last Updated" date at the top reflects the latest revision. Continued use after the effective date constitutes acceptance.

• Name: Siddhesh Jadhav
• Title: Grievance Officer, SportSphere
• Email: grievance@mysportsphere.com
• Address: A-28/401 Abhishek CHS, Charkop Sector 4, Kandivali (W), Mumbai – 400067

Response time: acknowledgement within 24 hours; resolution within 15 days (as required by the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021).

• SportSphere Support Team
• Email: support@mysportsphere.com
• Address: A-28/401 Abhishek CHS, Charkop Sector 4, Kandivali (W), Mumbai – 400067