Privacy Policy

This Privacy Policy explains what information Crickora (the “App”, “we”, “us”) collects when you use the Crickora Android app and the website at crickora.web.app (together, the “Service”), why we collect it, and the choices you have.

Summary

• You can browse scores, tournaments, teams and public player profiles without an account.
• We collect only what is needed to run tournaments, show live scores, keep accounts safe and stop abuse.
• We do not sell your personal information.
• You can ask us to delete your account and data at any time (see Account & data deletion).

1. Information we collect

a) Information you give us

• Organizer accounts: name, email address and password (passwords are handled by Google Firebase Authentication — we never see them).
• Player registration and profiles: name, photo, role, batting / bowling style, city, gender (optional), phone / WhatsApp number (used to identify your profile and for the organizer to contact you), a profile PIN (stored only as a salted hash), and optional social video links you choose to add.
• Tournament content: teams, logos, fixtures, venues, scores, ball-by-ball data, posters, sponsors and other content organizers enter.
• Payments for plans: the payment reference / screenshot you submit for a plan upgrade. We do not process or store card details.
• Messages: community chat messages, feedback, ratings and support requests.

b) Information collected automatically

• Device and usage information: app version, device type, operating system, a random device identifier, pages opened and the approximate country / city derived from your IP address — used for security (preventing fake accounts and reward abuse) and for aggregate usage statistics.
• Push notification token if you allow notifications, and the teams you choose to follow.
• Location only when you tap “use my location” (for example, to set a venue). It is not tracked in the background.
• Camera and microphone only while an organizer uses the Live Studio to stream a match. Video and audio are sent directly to the streaming platform the organizer chooses (YouTube or Facebook); we do not record or store them.

c) Information from connected services

If an organizer connects a YouTube channel or Facebook account for live streaming, we receive an access token and the channel / page name. Tokens are stored only on our server, are never shown on any device, and are used only to create the live video, read its comments and show viewer counts. You can disconnect at any time in the Live Studio and revoke access in your Google / Facebook account settings.

2. How we use information

• To provide the Service: tournaments, live scoring, scorecards, standings, posters, profiles, alerts and live streaming.
• To keep the Service safe: verifying accounts, preventing fraud, spam and reward abuse, and moderating community chat.
• To communicate with you: replies to support requests and important notices about your account.
• To improve the Service: aggregated, non-identifying usage statistics.

3. What is public

Cricket information is meant to be shared. Tournament names, teams, fixtures, scores, scorecards, player names, photos, roles and statistics, and public player profiles are visible to anyone. Phone numbers, emails, PINs, payment details, device identifiers and IP addresses are never shown publicly.

4. Sharing

We share information only with service providers that run the Service for us, under their own privacy terms:

• Google Firebase (database, sign-in, hosting, notifications) and Google Cloud services used for moderation and translation;
• Vercel (server functions);
• Text-service providers chosen by the administrator (Google Gemini, OpenAI, Anthropic, Groq) — only the text being processed (for example tournament and team names for an Urdu poster, or quiz topics) is sent, never your account details;
• ImgBB (image hosting for uploaded photos and logos);
• YouTube / Google and Meta (Facebook) when an organizer chooses to stream to them;
• other text-processing providers our server may use to translate or moderate text (only the text itself is sent).

We may disclose information if required by law or to protect the rights and safety of users.

5. Retention

Account and tournament data are kept while the account or tournament exists. Security logs are kept for a limited time. Deleted data is removed from active systems promptly; backups expire on their normal schedule.

6. Security

Data is encrypted in transit (HTTPS). Database access is controlled by security rules so organizers can change only their own tournaments. Sensitive values (PINs, platform tokens) are stored server-side and hashed or protected. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Account & data deletion

You can request deletion of your account and associated personal data by contacting us through the Contact Us page (WhatsApp or email) from the phone number or email linked to your account. Organizers can also delete their tournaments from the app. We complete requests within 30 days. Statistics that are part of other teams’ completed matches may be kept in anonymised form.

8. Children

The Service is not directed to children under 13. If a parent or guardian believes a child has provided personal information, please contact us and we will delete it. Players under 18 should be registered with the consent of a parent, guardian or the team organizer.

9. Your choices and rights

• Access, correct or delete your profile information (in the app or by contacting us).
• Turn off notifications in your device settings.
• Deny or revoke camera, microphone and location permissions at any time.
• Disconnect YouTube / Facebook from the Live Studio.

10. Changes

We may update this policy. The “Last updated” date above shows the latest version; important changes will be announced in the app.

11. Contact

Questions about privacy? See Contact Us.