Privacy Policy

Account data (mobile app). When you create an account: your name, mobile number and/or email, and your date of birth — collected once, used only to confirm you meet the minimum age to use StatBase, and stored in a restricted record only you (and our systems) can read, never shown to any other user.

Profile data you choose to add. Avatar photo, short bio, preferred sport. Your email and phone number are hidden from other users by default — you choose whether to make them visible, in Settings.

Cricket data. Teams, tournaments, matches, squads, ball-by-ball scoring events and the resulting batting/bowling/fielding statistics. Match scorecards and player performance statistics are a core, public feature of StatBase and are visible without signing in — by design, the same way a scorecard in a newspaper or on a scoreboard is public — even for players added as a “guest” by a team captain who has never created an account themselves. This never includes your private contact details or date of birth, which are never shown to anyone but you.

Financial records. If your team uses StatBase's accounting features (entry fees, expense splits, settlements between players), we record the amounts, who paid whom, and a payment reference you provide. Payment references are encrypted at rest. We do not process card payments ourselves and do not store card numbers.

Device and technical data. Push-notification tokens (to send you match reminders), and standard server access logs (IP address, request path, timestamp) for security and abuse prevention, kept only as long as needed for that purpose.

We do not collect your location, your device's contact list, or use any third-party advertising or behavioural-tracking SDK.

Under the DPDPA, anyone under 18 is legally a “child”, with extra protections:

• StatBase accounts require the account holder to be at least 15 years old — enforced at sign-up, not just requested.
• If you are 15–17, your account stays inactive until a parent or guardian confirms, by SMS verification code sent to their phone, that they permit you to use StatBase. We never collect your parent's identity beyond the phone number needed for that one confirmation, and it is never used to create an account of its own.
• We do not run behavioural tracking or targeted advertising directed at anyone under 18, with or without parental consent — StatBase does not use third-party advertising at all, for any user.
• A player added to a team roster by a captain (not self-registered) goes through this same age check the first time they personally sign into that account.

MessageCentral — our SMS provider, used only to deliver OTP codes and the parental-consent verification code described in Section 4. They receive a phone number and a one-time code, nothing else.

Expo — delivers push notifications to your device; receives only your device's push token and the notification text, which never includes financial amounts or other people's names.

We do not sell personal data, and we do not share it with advertisers.

We keep your account data for as long as your account is active. You can delete your account at any time from Settings → Your data → Delete my account:

• If you have no match, squad or financial history on the platform, your account is deleted outright.
• If you do — because deleting your rows would corrupt other people's match history or financial ledgers — your login is disabled immediately and your profile is anonymized (name replaced, photo and date of birth removed) so you can no longer be identified from the data, while the historical record everyone else relies on stays accurate.

You can also export a copy of everything linked to your account at any time, from the same screen.

You have the right to:

• Access your data — Settings → Your data → Export my data.
• Correct inaccurate data — edit your profile directly in the app.
• Erase your data — Settings → Your data → Delete my account (see Section 7 for how this works when you have match/financial history).
• Withdraw consent at any time — Settings → Your data → Withdraw consent. This signs you out and requires re-consenting before you can use the app again.
• Grieve — contact our Grievance Officer (Section 1) if you believe your rights haven't been respected.