Privacy Policy

sportz (working title) — a sports venue booking and pickup-games app operated by xCtra GlobeCo Pvt Ltd ("we", "us"). This policy explains what data the app collects and how it is used. Last updated: 16 July 2026.

Data we collect

• Account data — your phone number (used for OTP sign-in), and if you sign in with Google, your name, email address and profile photo.
• Profile data you provide — display name, city, sports preferences and skill level.
• Activity data — venue bookings, games you create or join, chat messages within game threads, and reviews you write.
• Payment data — payments are processed by Razorpay. We never receive or store your card, UPI or bank details; we store only the payment reference, amount and status needed to manage your booking.
• Device data — push-notification tokens (Firebase Cloud Messaging) and crash/diagnostics data (Firebase Crashlytics and Analytics).

How we use it

• To operate the service: authentication, showing venues in your city, managing bookings and refunds, running pickup games and their chats.
• To send transactional notifications: booking confirmations, game updates, chat messages, and reminders shortly before your booking or game starts.
• To improve reliability via aggregated, non-identifying crash and usage analytics.

We do not sell your personal data or share it with advertisers.

Where it lives

Data is stored in Google Firebase (Firestore, Authentication, Cloud Messaging) and processed by our backend hosted on Amazon Web Services (Mumbai region, ap-south-1). Payments are handled end-to-end by Razorpay.

What other users can see

Your display name and profile appear to other participants of games you join and in reviews you post. Your bookings and payment history are private to you and the venue involved. Chat messages are visible only to participants of that game.

Data retention & deletion

Your data is retained while your account is active. To delete your account and associated personal data, email support@xctra.org from your registered contact — we will delete your profile, preferences and tokens within 30 days. Financial records (bookings, payments, refunds) may be retained longer where required for accounting and legal compliance.

Children

The service is not directed at children under 13. If you believe a child has created an account, contact us and we will remove it.

Changes

We will update this page when the policy changes; material changes will be announced in the app.