Privacy Policy

Effective date: May 21, 2026

CricPulseX is a cricket information mobile app for Android (Google Play) and iOS (Apple App Store), built with Flutter. This policy explains what data the app collects, why, and how you control it.

The data controller is CricPulseX, based in Lucknow, India. You can reach us at the address in section 16.

This policy applies to the CricPulseX mobile app. The website at cricpulsex.com hosts this policy and other legal pages and does not collect personal data on its own.

1. Information We Collect

1.1 Account Data

We collect account data only when you sign in. If you use the app in guest mode, we collect no account data.

Email address — provided by Google Sign-In or Sign in with Apple
Name — provided by Sign in with Apple on your first sign-in only. Apple does not share it again on later sign-ins.
Backend user ID — a unique identifier our server generates the first time you sign in

1.2 Usage Analytics

Analytics collection is off by default. The app asks for your choice in a first-launch dialog and you can change it later in Settings → Privacy.

Provider: Google Firebase Analytics
Events recorded: screens viewed, matches opened, series opened, feature taps
Identifiers attached: Firebase App Instance ID (a pseudonymous identifier generated by Firebase), and your backend user ID if you are signed in
Not included: your name, email, or phone number are never sent in event parameters

1.3 Crash and Diagnostic Reports

Crash reporting is off by default and uses the same first-launch dialog and Settings toggle as analytics.

Provider: Google Firebase Crashlytics
What is sent on a crash: stack traces, device state at the time of the crash, recent in-app breadcrumbs, and your backend user ID so we can investigate crashes you report to us

1.4 Push Notification Token

Provider: Firebase Cloud Messaging
The token is created when you grant the system notification permission. We use it to deliver match alerts and important app updates.

1.5 Device Identifier

What: Apple IDFV on iOS, Android device ID on Android, read using the device_info_plus library
Where it lives: in your device's encrypted secure storage
What we do with it: we send it to our own backend to create HMAC-signed session tokens so the server can verify requests come from your app install
What we do not do with it: we do not share it with third parties and we do not use it for advertising

2. What We Do NOT Collect

The app does not collect any of the following:

Precise or approximate location
Contacts, photos, files, or calendar entries
Microphone audio or camera images
Health, fitness, or biometric data
Financial data, payments, or purchase history
Web browsing history outside the app
Messages or SMS
Search history outside in-app features
Apple's Advertising Identifier (IDFA) — the app does not request the ATT prompt
Cross-app or cross-website tracking data

3. How We Use This Information

Deliver live cricket scores, match alerts, and personalized content
Keep your account secure with HMAC-signed sessions
Send the push notifications you opt into
Understand which features are used so we can improve the app (only if you opt in to analytics)
Diagnose and fix crashes (only if you opt in to crash reporting)

4. Sign-In Providers

The app offers two sign-in options. Their use is also governed by the providers' own privacy policies.

Google Sign-In — policies.google.com/privacy
Sign in with Apple — apple.com/legal/privacy/data/en/sign-in-with-apple

5. Third-Party Processors

The following companies process data on our behalf as data processors. They are contractually limited to the purposes listed below and do not use your data for their own marketing.

Google Firebase — Analytics, Crashlytics, Cloud Messaging, In-App Messaging. Privacy: firebase.google.com/support/privacy
Google Sign-In — authentication. Privacy: policies.google.com/privacy
Apple (Sign in with Apple) — authentication. Privacy: apple.com/legal/privacy/data/en/sign-in-with-apple

6. Cricket Data Sources

Live scores, match data, commentary, and statistics shown in the app are supplied by Entity Digital Sports Pvt. Ltd. through their APIs. This is a one-way data feed into the app — the cricket data provider does not receive your personal data.

7. Data Sharing

We do not sell your personal information.

We share data only with the processors listed in section 5, and only for the purposes listed there. We may also disclose data when required by a valid legal request or to protect the rights and safety of users.

8. Data Security

All communication between the app and our backend uses HTTPS
Each request is signed using an HMAC scheme so the server can verify it
The device identifier used for signing is held in the device's encrypted secure storage

9. Data Retention

Firebase Analytics events: up to 14 months (Google's default retention)
Firebase Crashlytics records: 90 days
Account data: kept until you delete your account, then removed within 30 days
Push notification token: kept until you uninstall the app or revoke notification permission

10. Consent and Your Choices

On first launch, the app asks whether you want to share analytics and crash reports. You can decline.
You can change your choice at any time in Settings → Privacy.
Notifications use the system permission prompt. You can revoke it in your device settings.

11. Account Deletion

If you signed in with Google or Apple, you can delete your account in the app from Menu → Delete Account.
You can also email us to request deletion or a copy of your data.
We complete deletion within 30 days of the request.

12. Your Rights Under Regional Laws

12.1 India — Digital Personal Data Protection Act, 2023 (DPDP)

If you are in India, you have the right to access your data, correct it, request its erasure, and withdraw any consent you have given. To exercise these rights, contact us at the address in section 16. We respond within 30 days.

12.2 European Union — GDPR

We apply the same standard to all users worldwide. If you are in the EU, you have the right to access, correct, port, and erase your personal data, to restrict or object to processing, and to lodge a complaint with your local data protection authority. The legal bases we rely on are your consent (for analytics, crash reporting, and notifications) and the performance of our service (for account data and HMAC-signed sessions).

12.3 California — CCPA

If you are a California resident, you have the right to know what personal information we collect, to request a copy, and to request deletion. We do not sell personal information and we do not share it for cross-context behavioral advertising.

13. Children's Privacy

CricPulseX is not directed to children under 13, in line with the U.S. Children's Online Privacy Protection Act (COPPA) and the under-13 age policies of the Apple App Store and Google Play. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

If we change this policy, we will update the effective date at the top of the page and, for material changes, notify you inside the app.

15. Data Accuracy Disclaimer

CricPulseX provides cricket data sourced from Entity Digital Sports Pvt. Ltd. While we work to keep this data accurate, we do not guarantee that it is correct or complete in real time.