Privacy Policy

Effective 11 November 2026

This policy explains how IfStatic Technologies ("we", "us") handles personal data in allPlay, our sports venue booking platform, under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. It covers the allPlay player app, the allPlay owner app, the website and the admin panel.

1. Two kinds of data, two roles

  • Account and booking data: details about players and venue owners and what they do on allPlay. We decide how this is used, so for it we are responsible as the data fiduciary.
  • Walk-in customer data: when a venue records a walk-in booking, it enters the customer's name and mobile number. The venue decides why it needs them, and we store them on the venue's behalf so the booking appears in its schedule.

2. What we collect

When you use the player app

  • Sign-in details: your mobile number, and the one-time code we send by SMS to check it. You can add your name, an email address and a profile picture.
  • Location: when you allow it, the app uses your phone's location to show venues near you. The location is sent with your search. You can turn the permission off in your phone's settings and search by city instead.
  • Bookings and payments: the venue, court, date and time, amounts, promo codes used, and the payment and refund status, with the payment reference from our payment partner. Card, UPI and bank details are collected and held by Razorpay, never by us.
  • Teams and matches: your team's name and picture, who is in it, your active team, open matches you post or join, live scores, results, points, your match timeline and leaderboards. Other players can see your team name and picture, match results, points and your place on leaderboards.
  • Reviews, favourites and waitlists: ratings and comments you write, venues you save, and slots you ask to be told about.
  • Support: messages you send in the app's support chat.
  • Notifications: a push token from your phone, so we can send booking and match alerts.

When you use the owner app

  • Your name, mobile number, email and profile picture, your venue and court details, photos, prices and opening hours.
  • Bank details: account holder name, account number and IFSC code, used to pay out your earnings through our payment partner.
  • Your bookings, wallet balance, withdrawals, customer visits, reviews and replies, and the staff you add with their roles. If you add staff from your phone contacts, the app reads a contact only when you pick it; it does not upload your contact list.
  • Customer names and mobile numbers you enter for walk-in bookings.

On the website

The contact form sends what you type (your name, email, phone, venue name, city, sport and message) to us, together with your IP address to prevent abuse. We use it only to reply to you, and we don't add you to any mailing list.

Technical data

IP address, device and app version, and logs of sign-ins, requests and errors, used to keep the service secure and working. The apps do not use advertising or third-party analytics trackers.

3. Why we use it

  • To create your account, sign you in and keep it secure.
  • To show venues near you, take bookings, process payments and refunds, and pay venues.
  • To run teams, open matches, live scores, leaderboards and reviews.
  • To send you booking confirmations, reminders, results and other messages about your account.
  • To give support, handle disputes and prevent fraud or misuse.
  • To meet our legal, tax and accounting duties.

We do not sell personal data, and we do not use it for third-party advertising.

4. Who we share it with

  • Venues: the venue you book sees your name, mobile number and booking details.
  • Other players: team, match and leaderboard information described above.
  • Razorpay, our payment partner, which processes payments, refunds and venue payouts.
  • Our SMS provider, BulkSMSPlans, which delivers one-time codes and messages to your mobile number.
  • Google and Firebase, which deliver push notifications, and Google Maps, which shows venue locations and directions.
  • Our hosting provider, which stores the service and its data on servers we manage.

These providers work under contracts that limit them to doing so. We may also disclose data when the law requires it, for example to comply with a court order.

5. How long we keep it

  • Account data: for as long as your account exists. When you delete your account in the app, your name, email, profile picture and push token are removed and your mobile number is released straight away. We keep your booking and payment records without your personal details.
  • Booking, payment and invoice records: for 8 years, as Indian tax law requires.
  • Backups are overwritten on a rolling schedule, so deleted data leaves them within 35 days.
  • Website enquiries: until we have replied and for a reasonable time after, then we delete them.

6. How we protect it

Data travels over encrypted connections (HTTPS). Sign-in uses one-time codes, and sessions are stored as revocable tokens. Venue owners and staff only see what their role allows. Access to our servers is limited to the people who run them. No system is completely secure, so please contact us if you think your account has been misused.

7. Where your data is stored

Our servers are managed by us. Some providers named above, such as Google and Firebase, may process data on servers outside India. We use them only for the purposes described here.

8. Your rights

You can ask us to tell you what personal data we hold about you, to correct or complete it, or to erase it, and you can withdraw consent you have given. You can edit your name, email and picture in the app, and you can delete your account in the app (see data deletion). To use any of these rights, email contact@ifstatic.com. We will reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

9. Children

allPlay is for people aged 18 and over. We do not knowingly collect children's data. A parent or guardian who believes a child has given us personal data can write to us and we will delete it.

10. Grievance officer

Grievance Officer, IfStatic Technologies
Greater Noida, Uttar Pradesh, India
Email: contact@ifstatic.com
Phone: +91 80766 89373

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

11. Changes to this policy

If we make a significant change, we will tell you in the app or by email before it takes effect. The date at the top shows when this version took effect.