Privacy Policy

This policy explains what CRICKUP collects when you use Crickup, why we collect it, who it is shared with, and the control you have over it. It is written to describe what the app actually does — not to be as vague as possible.

Last updated: 8 September 2026

1. Who we are

Crickup is operated by CRICKUP, based in Kurukshetra, Haryana, India. For anything in this policy, contact us at support@crickup.in. CRICKUP is the data fiduciary (controller) for the personal data described below.

2. What we collect

We only collect what the product needs to work. There is no advertising SDK and no behavioural tracking.

Information you give us

Information created by playing

• Clubs and tournament squads you belong to, and your role in them
• Ball-by-ball match records where you batted, bowled, fielded or were dismissed
• Derived statistics — runs, wickets, averages, strike rates, leaderboard positions
• Join requests and invitations you send or receive

Information collected automatically

• Session records — so you can see where you are logged in and log out remotely
• Push notification token — only if you enable notifications
• Server logs — IP address, timestamp and endpoint, for security and debugging
• Preferences — language and notification settings

We do not collect location data, contacts, calendar, microphone or camera roll access beyond a photo you deliberately pick for your profile or team.

3. How we use it

• To create and secure your account, and to send one-time passcodes
• To run clubs, squads, fixtures and live scoring
• To calculate and display statistics, scorecards and leaderboards
• To send notifications you have opted into — match starts, invites, results
• To keep the service working: rate limits, abuse prevention, debugging
• To answer you when you contact support

We do not sell your personal data, and we do not use it to target advertising.

4. What is public

Crickup is a public scoring platform, so some information is visible to anyone — including people without an account:

• Your name or nickname, username and profile photo
• Your club and tournament squad memberships
• Your match performances, scorecards, career statistics and leaderboard entries
• Live scoreboards and any broadcast overlay for a match you are playing in

5. Who we share it with

We share data only with the processors needed to run the service:

We may also disclose data where we are legally required to, or to establish or defend a legal claim. If Crickup is ever acquired or merged, we will tell you before your data moves, and this policy continues to apply until replaced.

Some of these providers process data outside India. We only use providers that offer appropriate contractual safeguards.

6. How long we keep it

• Account data — while your account is active, and until you ask us to delete it
• Match records — retained indefinitely as part of the permanent record of a match
• Server logs — a short rolling window, then overwritten
• One-time passcodes — short-lived and never stored in readable form by us

Match records are the one thing we cannot simply erase on request: a scorecard belongs to every player in that match, and deleting one player's deliveries would corrupt the other twenty-one players' statistics. When you delete your account we strip your identifying details from those records instead of removing the records themselves.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023, and comparable laws elsewhere, you can:

• Access the personal data we hold about you
• Correct anything inaccurate — most of it directly in the app
• Delete your account and personal data
• Withdraw consent for notifications at any time, in app settings
• Complain to us first, and then to the Data Protection Board of India

To exercise any of these, email support@crickup.in. For deletion specifically, follow Delete My Account — it works from a browser with no app or login needed. We verify every request against the account before acting on it, and respond within 30 days.

8. Security

• All traffic is encrypted in transit over HTTPS
• Passwords are stored as salted one-way hashes, never in readable form
• Sessions use short-lived tokens that are revoked on logout, and you can end any session remotely
• Changing your mobile number signs out every device
• Access to production data is limited to those who need it to operate the service

No system is perfectly secure. If we ever discover a breach affecting your personal data, we will notify you and the Data Protection Board as the law requires.

9. Children

Crickup is not directed at children under 18. If you are under 18, use Crickup only with the consent of a parent or guardian, who must create and manage the account. If we learn we hold a child's data without that consent, we will delete it. A parent or guardian can contact us at support@crickup.in at any time.

10. Changes to this policy

If we change this policy we will update the date at the top, and for material changes we will notify you in the app or by email before the change takes effect.

11. Contact us