Privacy Policy

1. User Information (Including Parent/Guardian and Children, if applicable)

For the purposes of this Policy, “Personal Data” means any information relating to an identified or identifiable individual, including any data provided by You, generated through Your use of the Platform, or collected in connection with the provision of Our Services. This includes, without limitation, identity and contact information (such as name, phone number, email address and, if applicable, Your relationship to any Minor registered on the Platform), information submitted via Our “Contact Us” forms, transaction history, transaction details, and payment methods. Technical data regarding Your use of the Platform, including device information, IP address, and platform interactions, may also be collected to enhance Your experience and for operational purposes. Any other Personal Data reasonably required for the provision of Our Services, including health information (such as blood group), media (such as photographs or videos), government-issued identity documents only where strictly necessary and permitted under applicable law, and, where possible, using a Digital Locker (DigiLocker) token, or other information, will only be collected expressly prior to providing the relevant Service.

Where We collect Personal Data that requires separate or express consent under applicable law, including certain financial, health or other categories of Personal Data, We will obtain such consent through appropriate written or electronic means before collecting or processing such Personal Data. You may choose not to provide such Personal Data or withhold such consent. However, where such Personal Data is necessary for the provision of a particular Service, We will inform You if We are unable to provide that Service as a result. Where You choose to grant device permissions, SFL may retrieve, retain, and use data sourced from such permissions to facilitate Platform features. This includes access to Your camera, photos, location, microphone, and storage for purposes such as profile picture uploads, media sharing, or venue location services. You retain the right to revoke these permissions at any time through Your device settings.

If You are a Parent or Legal Guardian registering a Minor on the Platform, additional Personal Data about the Minor will be collected with verifiable parental consent. This may include profile information such as the Minor’s date of birth, age group, gender, and chosen sport, as well as performance and coaching data, including session attendance, coach feedback, and granular performance metrics (e.g., goals, assists, points, passing accuracy, and other sport-specific attributes). Such performance data is collected and processed only to deliver coaching and athletic-development Services to the Minor, based on verifiable parental consent, and is not used for behavioural profiling or advertising. Basic health information, including physical fitness, injuries, allergies, or medical restrictions, may also be collected solely to safeguard the Minor's health and safety during training sessions and tournaments, including sharing relevant details with authorised medical personnel in case of a medical emergency. Media data, including photographs and live-streamed videos from tournaments, may be collected in accordance with consent from the Parent or Legal Guardian. SFL is not a medical provider, and it is the responsibility of the Parent or Legal Guardian to ensure that SFL is kept updated regarding any relevant medical conditions.

2. Collection of Personal Data

We collect Personal Data when:

1. You access the Platform without creating an Account;
2. You sign up for an Account as a User or Parent/Guardian;
3. You subscribe to or inquire about Our services or book a Free Trial;
4. You book or use Our Services, or make payments through the Platform; and/ or
5. You participate in surveys, contests, the “Refer & Earn” program, or promotional activities.

All Personal Data is collected and processed either on the basis of Your consent or where the processing constitutes a legitimate use expressly permitted under Section 7 of the DPDPA.

3. Use of Personal Data

We process Your Personal Data in order to:

1. Provide and improve Our Services, including managing Your Account.
2. Utilise third-party AI-powered tools to analyse performance data and generate player statistics.
3. Manage live-streams on the SFL Platform, generate highlight packages (via third-party vendors), and manage performance based awards voting.
4. Manage the “Refer & Earn” program and other loyalty programs or offers that are run for the Users.
5. Process transactions and respond to Your queries.
6. Notify important information such as updates, service changes, security alerts, performance reports and other Communication.
7. Comply with legal and regulatory requirements.
8. Conduct market research, analytics, and enhance the overall user experience via Our CRM and marketing partners, LeadSquared and WebEngage.
9. Detect and prevent fraud, spam, abuse, security incidents, and other harmful activity on the Platform.
10. Assist in any dispute resolution process.

All processing activities are undertaken solely for lawful purposes directly related to and necessary for the Services provided by SFL, or for purposes expressly consented to by You. We may aggregate and permanently anonymise Personal Data such that it no longer identifies any individual. Once anonymised, SFL may use such anonymised data for lawful commercial or non-commercial purposes, including improving services, analytics, and research.

Notwithstanding Section 3(h) above, We do not use a Minor's Personal Data for behavioural monitoring, profiling, or targeted advertising. Any market research or analytics involving a Minor's Personal Data shall be limited to purposes directly connected with the delivery of coaching and athletic-development Services, in accordance with Section 11 below.

4. Sharing & Disclosure of Personal Data

We may disclose Your Personal Data under the following circumstances:

1. Third-party service providers (such as payment processors and media vendors generating highlights) who facilitate transactions or Service delivery and vendors who assist in generating player stats and tournament highlight reels;
2. We may share player rosters, age-verification data, and match statistics with official governing bodies (such as state or national sports associations) for tournament accreditation, official player registration, and maintaining official league records;
3. To comply with applicable laws, regulations, legal processes, or government requests;
4. To protect Our rights, property, or safety, other Users, or others and for fraud prevention, risk management and/or dispute resolution;
5. We may share certain aggregated, anonymised or Personal Data with investors, auditors, legal advisers or potential acquirers only where reasonably necessary for due diligence, restructuring or business transfers and subject to appropriate confidentiality obligations;
6. To Our affiliate entities, for consolidated invoicing and centralized administration;
7. To Third-Party Organizers where SFL acts solely as a technology platform for tournaments organized by such Third-Party Organizers. In such instances, SFL shall act as a Data Processor (solely on behalf of the Third-Party Organizer);
8. With Your separate consent, for purposes not mentioned above, including sharing data with third-party AI tracking tools and CRM partners (such as LeadSquared and WebEngage) for marketing, behavioral analytics, or third-party offers; and/or
9. We may share performance statistics, highlight reels, or images of Tournaments of Academies on social media platforms.

Any data shared with the authorized third-party service providers shall be on a need-to-know basis for fulfilling the purposes specified in Section 4 above and shall be subject to such third party service providers being bound by appropriate confidentiality and data protection obligations. Where Personal Data is shared with any third party or third-party service provider for the purposes described above, such recipient shall process the Personal Data in accordance with applicable law, its contractual obligations to SFL (where applicable), and its own privacy policy. Where SFL acts as a Data Fiduciary, processing carried out on its behalf by a Data Processor shall remain subject to SFL’s obligations under applicable law. The Platform may allow You to share performance statistics, highlight reels, or live stream links with third parties (e.g., family members or on social media). SFL bears no liability for any unauthorized dissemination, misuse, or privacy violations that occur as a result of You actively sharing Your or Your Minor’s media and statistics outside the SFL Platform.

5. Data Security and Breach Notification

We take reasonable measures to ensure the confidentiality and security of Your Personal Data. Personal Data is primarily stored using infrastructure located in India. Where Personal Data is transferred outside India, such transfer shall be undertaken only in accordance with applicable law.

Where Your Personal Data is shared with third parties, We take reasonable appropriate steps to ensure that such data is processed, secured, and transferred according to applicable law. Our information security policies and procedures are aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet Our business needs, changes in technology, and regulatory requirements.

We employ reasonable technical, physical and operational security measures intended to protect Your personal data from loss, misuse, alteration, or unintentional destruction. Our security measures are periodically reviewed and updated in an effort to provide appropriate security for all personal data held by us. We implement appropriate measures and controls, including monitoring and physical measures, to store and transfer data securely. We conduct privacy, information security, and other applicable training on a regular basis for Our employees and contractors who have access to Personal Data and other sensitive data. We require Our third-party vendors and providers to protect any Personal Data with which they are entrusted in accordance with applicable law and Our security policies and procedures.

All financial transactions are processed securely through Our payment partner (Razorpay). SFL does not directly collect, store, or process Your payment details including full credit card numbers, UPI PINs, or bank account passwords on Our servers. While Our third-party payment processors are responsible for maintaining the security of their own infrastructure and payment processing systems, SFL does not control or operate such infrastructure. Nothing in this Policy limits SFL’s obligations as a data fiduciary under the DPDPA in respect of Personal Data for which it acts as a data fiduciary.

We retain Personal Data for as long as is reasonably required to fulfil the purpose for which such data was collected, and any linked purposes such as satisfying any legal, accounting, or reporting requirements. In determining data retention periods, We take into consideration applicable laws, contractual obligations, and the expectations and requirements of Our customers. When We no longer need personal information, We securely delete or destroy it. If Your data is scheduled for automated deletion (e.g., due to prolonged account inactivity, in accordance with SFL’s data-retention practices), SFL will provide You with a minimum of 48 hours prior intimation before the permanent erasure of Your data, giving You the opportunity to log in and preserve Your Account if desired. While We implement safeguards to protect Your data, no method of transmission over the internet or method of electronic storage is 100% secure. Hence, We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of Your login credentials. In the unlikely event of a security incident affecting Personal Data, We shall take immediate action to contain the issue, assess the impact, and notify You and the relevant government authority as per applicable law.

6. Cookies and Tracking Technologies

Our Platform may use “cookies”, which are small text files placed on a computer or other devices and used to identify the User or device and collect information. In general, cookies can securely store a User’s ID and password, personalize home pages, and identify which parts of a site have been visited. We use cookies to enhance user experience, track site usage, and personalize Your experience. It helps Us to improve the Platform on a continual basis. We require Your affirmative consent via Our “Cookie Banner” before deploying non-essential tracking or analytics cookies. You have the discretion to decline Our cookies if Your device allows, although this may limit Your ability to utilize certain features on the Platform.

7. Your Rights

You have the following rights regarding Your Personal Data:

1. You can request a copy of Your Personal Data, a summary of Your Personal Data We hold and the identities or categories of Data Fiduciaries and Data Processors with whom We have shared Your Personal Data;
2. You can request correction of inaccurate or incomplete data belonging to You;
3. You can withdraw consent at any time after such consent is given with reference to the processing of Your Personal Data. Given that performance tracking, attendance monitoring, and safety communications are some of the key Services, withdrawing consent may suspend or terminate Your Account or access to the Platform. We shall not be liable for service interruptions resulting directly from withdrawal of consent. Refunds, if any, shall be governed by the applicable cancellation and refund policies. Withdrawal shall not affect processing undertaken before such withdrawal;
4. You may withdraw Your consent with the same ease with which it was given, by writing to Our Grievance Officer at the contact details specified in this Policy, or through the consent-withdrawal option within Your Account settings on the Platform;
5. You can request the deletion of Your Account and the associated data via the Platform, subject to applicable legal retention requirements. However, there might be scenarios where We may not be able to execute Account deletion, such as if there exists an outstanding dispute, pending venue bookings, transactions suspected to be fraudulent, or to fulfill Our legal and contractual obligations. Upon resolution of the obstruction preventing deletion, the relevant information will be deleted; and
6. You have the right to nominate another individual to exercise Your data rights in the event of Your death or incapacity.

To exercise any of these rights, please contact Us using the details provided in this Policy below. Further, You should promptly notify Us if any Personal Data provided to Us becomes inaccurate or requires updating.

8. Third-Party Links and Services

Our Platform may contain links to third-party websites or services that are not operated by Us. We are not responsible for their privacy practices, content, or acts or omissions during Your transactions with them. Please review their privacy policies before providing Your information.

9. Promotional Communications

Subject to the Terms of Use and with Your consent, We may send emails, SMS, calls, or push notifications regarding Our services. Consent is voluntary and is not a precondition for using the Platform’s Services. You may opt out of marketing materials through the unsubscribe instructions or by contacting us. Transactional or service-related communications are not subject to marketing opt-out preferences.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Effective Date”. We recommend that You review this Policy periodically to stay informed about how We protect Your Personal Data.

11. Minor’s Data (Under Age 18)

1. The Platforms are not intended for independent use by Minors. If any Services are intended to be used by a Minor, it must be done so only via their Parent or Legal Guardian. Accounts must be created and managed only by a Parent or Legal Guardian.
2. To verify that the individual providing consent on behalf of a Minor is in fact the Minor's Parent or Legal Guardian, SFL requires such individual to register an Account using their own mobile number or email address, authenticated through a one-time password (OTP), together with a self-declaration confirming that they are an adult and the Minor's Parent or Legal Guardian. In addition, SFL will verify the identity and age of the Parent or Legal Guardian by reference to reliable identity and age details already available with SFL, or through a virtual token mapped to such details issued by an entity entrusted by law or by a Digital Locker (DigiLocker) service provider, in accordance with the DPDPA.
3. We use performance data strictly for athletic coaching and development. SFL does not engage in the behavioural monitoring, profiling, or targeted advertising to Minors. User's athletic development and progress is tracked to the extent specified to follow the User’s athletic development and progress.
4. Participation in tournaments involves live-streaming accessible to all SFL app users. Explicit, tournament-specific consent shall be requested via separate consent mechanisms notified to the Parent or Legal Guardian for featuring any Minor in any such media on the Platform.

If We learn that the Personal Data of a Minor has been collected without verifiable parental consent, then We will take appropriate steps to delete such Personal Data.

12. Security Vulnerability Reporting

If You, as a security researcher or concerned User, identify a potential security issue or vulnerability in the Platform or Our Services, We encourage You to report it to Us responsibly. Please provide a detailed description of the issue, including steps to reproduce it, by contacting Our team at contact@sportsforlife.in. We will review reported issues and take appropriate measures to address verified vulnerabilities. Responsible reporting helps Us maintain the security and integrity of the Platform for all Users.