Privacy Policy — IISc Badminton Club App
Effective Date: June 15, 2026 · Last Updated: September 2026
IISc Badminton Club ("we", "our", or "the app") is the official badminton club app for the Indian Institute of Science (IISc) campus community. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using the app, you agree to the practices described in this policy.
1. Information We Collect
We collect only what is necessary to run the app:
• Account information: Your name, email address, and profile photo (if provided).
• Player profile: Gender, skill level, preferred racket, and other optional sports-related fields you choose to fill in.
• Match data: Scores, results, and ELO ratings from matches you log or participate in.
• Device push token: To send you match confirmations, challenge notifications, and club announcements. You can opt out at any time in Settings.
• Health and Fitness Data (Health Connect): If you grant permission, we access and collect health and fitness data from Google Health Connect, including heart rate, steps, total calories burned, heart rate variability (HRV), oxygen saturation (SpO2), sleep, and resting heart rate.
• Usage data: Anonymous usage and diagnostic information may be collected to improve app performance and reliability.
2. How We Use Your Information
• Display your profile, match history, and ELO ranking on the leaderboard.
• Send push notifications for match confirmations, challenges, and announcements (opt-out available).
• Calculate and display ELO ratings and statistics.
• Enable club features: Find & Lost board, buddy system, polls, and live scores.
• Allow admins to manage club operations and review disputes.
• Use Health Connect data exclusively to provide personal sports performance metrics, track recovery between matches, and power the self-motion tracking features within the app.
3. Data Sharing
We do not sell your personal data. We share data only with:
• Supabase — our database and authentication provider (data stored in secure EU/US servers).
• Firebase / Google FCM — for delivering push notifications (device token only, no personal data).
• No advertising networks. No third-party analytics beyond anonymous usage stats.
4. Data Retention
• Your account data is retained as long as your account exists.
• Match history is kept permanently as part of the club record.
• If you delete your account, your profile and personal data are removed. Match records may be anonymised rather than deleted to preserve historical statistics.
5. Your Rights (GDPR / Data Subject Rights)
You have the right to:
• Access — request a copy of your personal data.
• Correction — update your profile at any time in the app.
• Deletion — delete your account via Settings → Delete Account. This removes your profile and personal data. Alternatively, users may request account deletion by contacting the club administrator.
• Opt-out of notifications — toggle individual notification types in Settings.
• Data portability — contact us to request an export of your data.
6. Push Notifications
We use Firebase Cloud Messaging (FCM) to send push notifications. Your device token is stored securely and used only to deliver notifications from IISc Badminton Club. You can disable all or specific notification types in the app's Settings at any time.
7. Health and Fitness Data
Our app allows users to track badminton matches, game scores, and sports performance metrics. With your explicit permission, we integrate with Google Health Connect to provide enhanced performance and recovery tracking.
• What we collect: If you grant permission, we access and collect health and fitness data from Google Health Connect, including heart rate, steps, total calories burned, heart rate variability (HRV), oxygen saturation (SpO2), sleep, and resting heart rate. We also collect manually entered match logs and scores.
• How we use it: Your Health Connect data is used exclusively to provide personal sports performance metrics, track recovery between matches, and power the self-motion tracking features within the app. Manually entered match logs are used to calculate Elo ratings and display leaderboards.
• Data sharing: Match logs and calculated Elo ratings are visible to other registered members of the platform. However, your Health Connect data (biometrics, heart rate, sleep, etc.) is strictly private. We do not sell, trade, or share your Health Connect data with third-party advertisers, data brokers, or external health organizations. It is solely used within the app for your personal viewing.
• Data deletion: You may manage or delete your health data directly through the Google Health Connect app on your device. You may also request the deletion of your account and all associated sports activity data at any time via the Delete Account page or by contacting us.
8. Children's Privacy
This app is intended for members of the IISc campus community (students, faculty, staff). We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.
9. Security
All data is transmitted over HTTPS. Supabase enforces Row Level Security (RLS) so users can only access their own data. Passwords are managed by Supabase Auth and never stored in plain text.
10. Changes to This Policy
We may update this policy occasionally. Changes will be reflected by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance.
11. Contact Us
For privacy questions, data requests, or to report a concern, contact the IISc Badminton Club administrator at:
Email: iiscbadmintonclub@gmail.com