Privacy Policy

1. Introduction & Scope

Primal Court (“we”, “our”, or “us”) operates the Primal Court mobile applications (iOS and Android), the customer web application, and the marketing website at primalcourt.com. This Privacy Policy explains our practices regarding the collection, storage, processing, transfer, and deletion of your personal data in accordance with the Digital Personal Data Protection Act (DPDP Act) 2023 of India.

2. Personal Data We Collect

We collect information that you provide directly to us, as well as data automatically generated when you use our platform:

• Identity & Profile Data: Name, phone number (for OTP authentication), email address, profile photo, sport skill level, and player bio.
• Location Data: Device GPS coordinates (only requested dynamically when exploring nearby sports venues or courts). We do not track continuous background location without active user initiation.
• Booking & Transaction Records: Selected courts, slot dates and times, amount paid, co-payment split participation, loyalty coins balance, and coupon codes applied.
• Community & Social Content: Public lobby posts, match challenge requests, direct messages between players, and match score logs.
• Technical & Device Information: Device model, operating system version, IP address, Firebase Cloud Messaging (FCM) push notification tokens, and crash analytics logs.

3. Purpose & Legal Basis for Processing

We process your personal data for the following lawful purposes:

• Facilitating real-time court reservations and sending instant digital QR passes.
• Calculating group split shares and coordinating public matchmaking lobbies.
• Processing secure payments, automated weather refunds, and cancellation reimbursements via Razorpay.
• Sending critical match reminders, slot start notifications, and venue advisories.
• Maintaining system stability, fraud prevention, and security auditing.

4. Third-Party Disclosures & Infrastructure

We do not sell, rent, or trade your personal data to advertisers. We share information only with verified service providers necessary to operate the platform:

• Payment Gateways (Razorpay): Tokenized card, UPI, and net-banking transactions are processed in compliance with PCI-DSS standards. We never store raw credit card numbers or CVVs on our servers.
• Cloud Infrastructure & Databases: Hosted on secure VPS servers in India with strict firewalls, TLS 1.3 encryption in transit, and encrypted database volumes.
• Push Notifications (Firebase / FCM / APNs): Device tokens are utilized solely to deliver user-initiated alerts and booking updates.

5. Your Rights Under the DPDP Act 2023

As a user and data principal, you have statutory rights including:

• Right to Access & Summary: View and export your personal information, booking history, and match records.
• Right to Correction: Edit and update your name, photo, phone, and preferences in your Profile Settings.
• Right to Erasure (Account Deletion): Permanently wipe your account and associated personal data at any time via the app or by visiting our Account Deletion Page.
• Right to Nominate: Nominate an individual to exercise your privacy rights in the event of incapacity.

6. Data Retention Policy

Personal data associated with active user profiles is retained for the lifetime of the account. Upon account deletion, all personal identifiers, posts, messages, and tokens are permanently removed within 24 hours. Statutory tax and financial invoices are retained in an anonymized state for 7 years as mandated by Indian taxation laws (GST regulations).

7. Grievance Redressal Officer

In compliance with Section 13 of the DPDP Act 2023, you may contact our designated Grievance Officer with any privacy or data inquiries: