Privacy Policy

This Privacy Policy applies to Evergreen Sports & Allied Solutions Private Limited (“Sportniq”, “we”, “us”, or “our”), a company incorporated under the Companies Act, 2013, with its registered office in Chennai, Tamil Nadu, India. We operate the Sportniq platform, mobile applications, and the website sportniq.com.

This policy covers both the Sportniq app for players and the Sportniq Venue Admin app for venue owners and staff (“venue operators”). It also covers the Sportniq Platform Admin app, which is used only by authorised Sportniq staff to run the platform and is not open to the public.

We are committed to protecting the personal data you share with us and complying with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

We collect only the data you voluntarily provide or that is generated through your use of Sportniq:

• Account data — name, email address, mobile number, and profile information required to create and operate your Sportniq account.
• Authentication data — OTP verification records and Google Sign-In tokens (via Firebase Authentication). We never store your Google password.
• Booking data — court, coaching session, and event booking history, payment records, and loyalty point (GreenCoins) transactions.
• Device & app data — Firebase Cloud Messaging (FCM) tokens for push notifications, Firebase Crashlytics crash reports (anonymised), and Firebase Analytics usage data.
• Location data — your device location (precise, if you grant permission) to show nearby venues, or, for venue operators, to pin the venue on the map. We do not track your location in the background.
• Usage data — in-app actions, screen views, and feature engagement, collected via Firebase Analytics to improve the product.

If you use the Sportniq Venue Admin app, we also collect:

• Business details — organisation name, venue name, address and map location, operating hours, pricing, and venue photos you upload.
• Verification details — PAN and GSTIN, to verify your business and meet tax obligations.
• Payout details — bank account holder name, account number, and IFSC, to transfer your booking earnings. The app shows only the last four digits of a saved account number.
• Venue operations data — bookings, check-ins, revenue, and payout records for your venues.
• Contacts — if you grant permission, the app reads your phone contacts on your device only to fill in a walk-in customer's name and number. Your contact list is never uploaded.

If you are a Sportniq staff member using the Sportniq Platform Admin app, we collect your work account details (name, email address), sign-in and one-time-code verification records, the device and app data listed above, and an audit log of the administrative actions you take. The Platform Admin app does not access your location or contacts.

We do not knowingly collect data from children under 13. Contact us immediately if you believe we have.

We use your personal data to:

• Create and manage your Sportniq account and profile.
• Process court, coaching, and event bookings and collect payments.
• Send booking confirmations, OTP codes, reminders, and service notifications via push, SMS, or email.
• Calculate, credit, and redeem GreenCoins loyalty points and rewards.
• Verify venue operators' business details and pay out their booking earnings to their bank account.
• Let authorised Sportniq staff, through the Platform Admin app, review organisations and venues, resolve support tickets and feedback, and manage bookings and payouts. Staff see only what their role needs, and every action is logged.
• Diagnose crashes and bugs via Firebase Crashlytics to improve app stability.
• Analyse in-app behaviour via Firebase Analytics to improve features and UX.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with our legal obligations and resolve disputes.

We do not use your data for automated decision-making that produces legal or similarly significant effects without human review, and we do not sell your data.

• Consent — when you sign up for Sportniq or grant location/notification permissions.
• Contractual necessity — to fulfil bookings and provide services you have requested.
• Legitimate interests — to maintain platform security, prevent abuse, and improve our services.
• Legal obligation — where we are required to retain or disclose data by law.

We do not sell, rent, or trade your personal data. We share data only with:

• Firebase (Google LLC) — Authentication, Cloud Messaging, Crashlytics, and Analytics. Data processed under Google's Data Processing Addendum.
• AWS — cloud hosting, database, and email delivery (Amazon SES) under AWS's data processing agreements.
• Payment processors — to the extent necessary to complete a payment or, for venue operators, to transfer your booking earnings to your bank account. We do not store full card numbers.
• Venue operators — booking details shared with the venue you book at, to facilitate your booking.
• Legal authorities — when required by applicable law, court order, or government authority.
• Business transfers — in the event of a merger or acquisition, with advance notice.

• Account and booking data — for the duration of your account and 7 years thereafter (tax and financial record-keeping).
• Venue operators' verification and payout details — while the payout account is active, then as long as tax and financial record-keeping laws require.
• Administrative audit logs — as long as needed to keep the platform secure and meet legal obligations.
• Crash reports (Crashlytics) — 90 days.
• Analytics events — up to 14 months (Firebase default).
• FCM tokens — refreshed automatically; old tokens expire after 270 days of inactivity.

We implement encrypted data transmission (HTTPS/TLS), database-level access controls, AWS Secrets Manager for credentials, and regular security reviews. Staff access to personal data is limited by role, sensitive admin actions require a fresh one-time code, and every admin action is recorded in an audit log. Firebase services are SOC 2 and ISO 27001 certified. No system is completely secure — contact us immediately if you suspect a breach.

Under applicable Indian law (DPDP Act 2023), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your account and data, subject to legal retention obligations. See how to delete your account.
• Withdraw consent — withdraw consent at any time (e.g. disable notifications, revoke location), without affecting prior processing.
• Grievance redressal — raise a complaint with our Grievance Officer.

To exercise any right, email support@sportniq.com. We respond within 30 days.

Sportniq uses Firebase Cloud Messaging to send booking reminders, GreenCoins updates, and promotional notifications. You can disable notifications at any time in your device settings or in the Sportniq app. Disabling notifications does not affect your ability to use the app.

We use Firebase Analytics to understand how users interact with the Sportniq app (screens visited, features used, session length). Data is aggregated and anonymised — we cannot identify individual users from analytics reports. Firebase Crashlytics collects anonymised crash data to help us fix bugs. Neither service collects your name, email, or phone number.

The Sportniq app and website may link to third-party services (payment gateways, venue websites). We are not responsible for their privacy practices — please review their policies.

We may update this Privacy Policy from time to time. The effective date at the top reflects the most recent revision. We will notify you of material changes via in-app notification or email. Continued use after changes are published constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Chennai, Tamil Nadu, India.