Privacy Policy

1. Introduction

GritPlay ("we", "us", "our") is operated by Deltrix Technologies LLP. GritPlay is an academy management platform used by sports academies, coaches, students, and players — academies use it to run batches, track attendance and performance, and collect monthly fees; students and parents use the Student Portal to view their enrollment, attendance, and pay fees online.

This policy explains what data we collect from academy owners, coaches, students, and parents/guardians, how we use it, and the choices available to you. By using the GritPlay platform — including the academy dashboard and the Student Portal — you agree to the collection and use of information as described here.

2. Information We Collect

From academy owners and coaches:

• Name, phone number, and email — for account access and communication
• Academy and batch details — sport, schedule, pricing, and staff assigned to each batch

From students and parents/guardians, at enrollment or registration:

• Student's name, date of birth, gender, phone number, email, and address
• Parent/guardian name, phone number, and email — collected for students who are minors, and used as the primary contact for fee and attendance communication where applicable
• Sport and skill level, plus any attendance records and skill/performance scores recorded by coaches
• A password, set by the student or parent during registration, stored only as a one-way bcrypt hash — we never store or transmit it in plain text
• Monthly fee and payment records — processed securely through Cashfree; we never store card or UPI credentials on our servers

We also collect limited technical data automatically, including IP address, browser type, and pages visited, solely for platform security and performance purposes.

3. How We Use Your Information

• To create and manage batch enrollments, attendance records, and skill/performance tracking
• To calculate and collect monthly fees, and to process payments via our payment gateway partner
• To verify your identity at registration and login using a one-time WhatsApp passcode (OTP)
• To send fee-due reminders, OTPs, and other account-related notifications via WhatsApp
• To allow the academy owner and coaching staff you are enrolled with to view and manage your student profile, attendance, and fee status
• To respond to enquiries or support requests
• To detect and prevent fraudulent activity, including account-takeover attempts and brute-force login attacks

We do not use your personal data for marketing purposes without your explicit consent.

4. Third-Party Services

We share limited information with trusted third-party providers only as necessary to deliver the service:

• Cashfree Payments — processes all fee payment transactions. Your payment data is governed by Cashfree's own privacy and security policies.
• Meta (WhatsApp Business API) — used to deliver OTP verification codes and fee reminders to the phone number you provide.
• The academy you are enrolled with — your student profile, attendance, skill scores, and fee status are visible to the coaches and staff of that specific academy only. We do not share your data across academies.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5. Children's Data & Parental Consent

Many students on the platform are minors. Where a student is under 18, registration and any use of the Student Portal is expected to be carried out by, or with the involvement and consent of, a parent or legal guardian, whose contact details are collected alongside the student's for that purpose. Parents/guardians may contact us at any time to review, correct, or request deletion of their child's data, subject to the academy's own record-keeping needs (e.g. attendance history relevant to fees already paid).

6. Data Retention

Student, attendance, and fee records are retained for as long as necessary to fulfil the purposes described in this policy, meet legal or accounting obligations, and resolve any disputes. You may request deletion of your personal data at any time by contacting us, subject to these retention needs.

7. Data Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse. All data in transit is encrypted via HTTPS. Passwords are stored as bcrypt hashes, never in plain text. Login attempts are rate-limited and accounts are temporarily locked after repeated failed attempts. Payment processing occurs over Cashfree's PCI-DSS compliant infrastructure.

8. Your Rights

You (or, for a minor student, their parent/guardian) have the right to:

• Access the personal information we hold about you or your child
• Request correction of inaccurate data
• Request deletion of data, subject to legal and academy record-keeping retention requirements
• Withdraw consent for WhatsApp notifications at any time, noting that OTP messages are required for login and cannot be disabled while continuing to use the Student Portal

To exercise any of these rights, contact us at the address below.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a revised date. Continued use of the platform after any update constitutes acceptance of the revised policy.

10. Contact

For any questions about this policy or your personal data, please reach out to us through your academy, or via the contact details listed on this platform.