Privacy Policy

At CricNoble, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform — regardless of where in the world you are located. CricNoble is operated from North Carolina, United States, and this policy is governed by US law. Please read it carefully.

1. Information We Collect

We collect information you provide directly to us and information generated through your use of the platform:

• Account information — Your name, username, email address, and password when you register.
• Profile data — Optional details such as your phone number, profile picture, home city and country, and your playing role and batting and bowling style.
• Location — The city you choose at sign-up, and, if you allow it, your device location to suggest nearby grounds and fill in venue details. Place and weather searches are sent to Google Maps and Open-Meteo to return results. You can refuse location permission and still use CricNoble.
• Tournament and match data — Tournaments you create, teams you manage, matches you score, schedules, and statistics generated during matches. We also keep an audit log of who changed a score, schedule or record, and when.
• Camera, microphone, photos and voice — Only when you use a feature that needs them: scanning scorecards, live-streaming a match, uploading team or player photos, saving scorecard images, or asking a rule question by voice. Voice questions are converted to text by your device's speech recognition (Apple or Google). Face ID or fingerprint sign-in is handled by your device; we never receive your biometric data.
• Device and usage data — Browser type, operating system, app version, device push-notification token, IP address (used for security and rate limiting), and crash reports and diagnostics.
• Imported statistics — If you choose to import your own career record from another scoring service, we store the figures you import, the profile link or reference, and the confirmation you gave.
• Communications — Messages, support tickets and feedback you send to us.

Information about players who may not have an account

Tournament organisers and team managers can add players to teams and matches. A player record can include the player's name, jersey number, date of birth, nationality, photo, playing role, and match statistics. If you add or score someone else, you must have their permission to do so — and, for anyone under 18 (or under the age of majority where they live), the permission of a parent or guardian. If you are a player listed by someone else and want your record corrected or removed, contact us at the address below.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Provide, operate, and improve the CricNoble platform and its features.
• Display tournament standings, match scorecards, and player statistics to authorised viewers.
• Send you important service notifications, such as match updates and account security alerts.
• Respond to your support requests and communicate with you about the platform.
• Diagnose crashes and errors and keep the platform secure and free from abuse.
• Answer cricket rule questions and help organisers reschedule fixtures using AI (see Section 8.7).
• Comply with applicable US laws and our Terms of Service.

3. Sharing of Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Public tournament data — Tournament names, team names, match results, and player statistics may be visible to other platform users or the public, depending on the visibility settings chosen by the tournament organiser.
• Service providers — We engage trusted third-party vendors (cloud hosting, email delivery, push notifications, crash reporting, maps and AI services — listed in Section 8.7) who process data solely on our behalf and under strict confidentiality agreements.
• Legal requirements — We may disclose information if required by applicable law, regulation, or valid legal process.
• Business transfers — In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

Your data is stored on secure cloud servers located in the United States. We implement industry-standard technical and organisational measures to protect your information against unauthorised access, loss, or alteration, including encryption in transit (TLS) and at rest.

No method of transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

5. Data Retention

We retain your account information and associated data for as long as your account is active or as needed to provide the service.

Deleting your account. You can delete your account yourself in the mobile app (Profile → Settings → Account → Delete account) or by following the steps at cricnoble.com/delete-account. Deletion removes your sign-in details, profile picture, notifications, push-notification tokens, tournament registrations, team join requests and connected Google tokens. Records that other people rely on — tournaments, teams, matches, scorecards, player records and statistics — are kept but anonymised: your name and email are replaced with a placeholder, so results and standings stay correct for everyone else. Certain records may also be retained for a period required by law. Backups are overwritten on a rolling basis.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your personal information, subject to legal requirements.
• Portability — Request an export of your data in a machine-readable format.
• Objection — Object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at the address provided below. We will reply within 30 days. Deleting your own account is available in the app at any time. We record the version of these documents you accepted at sign-up and the time you accepted it, and you can withdraw consent by deleting your account.

International users. CricNoble is operated from the United States and your information is processed and stored there (and by the providers in Section 8.7, which may process data in other countries). By using the service you understand your information will be transferred to the United States. Where the law of your country (for example the EU/UK GDPR or India's Digital Personal Data Protection Act) gives you additional rights — such as lodging a complaint with a regulator or naming a grievance contact — we will honour them. Our legal bases for processing are to perform our agreement with you (running your account and tournaments), our legitimate interests (security, diagnostics, improving the service), and your consent where we ask for it (for example location, camera and microphone permissions, and optional imports).

California residents. In the last 12 months we collected the categories of information listed in Section 1 (identifiers, contact details, location, images, usage data and inferences from match statistics) for the purposes in Section 2. We do not sell personal information or share it for cross-context advertising.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session securely.
• Remember your preferences across visits.
• Analyse aggregate usage patterns to improve the platform.

We do not use advertising cookies or third-party advertising trackers, and we do not sell or share your personal information for advertising. You can control cookies through your browser settings. Disabling cookies may affect certain functionality of the platform.

8. Google API Services and Third-Party Integrations

8.1 Google API Services User Data Policy

CricNoble's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8.2 Google data we access

When you choose to connect your Google account to CricNoble (for example, to live-stream a match to YouTube), we request your consent for the following OAuth scopes on the YouTube Data API:

• https://www.googleapis.com/auth/youtube — required to create and manage YouTube live broadcasts on your channel.
• https://www.googleapis.com/auth/youtube.force-ssl — required to securely transition broadcasts through their lifecycle (ready → live → complete) and to bind broadcasts to their corresponding live streams.

8.3 How we use Google user data

CricNoble uses these scopes solely to:

• Create a YouTube live broadcast on your channel for a cricket match you are scoring or organising.
• Create a YouTube live stream (RTMP ingestion endpoint) that your phone camera or external encoder streams video into.
• Bind the broadcast to the live stream, transition the broadcast to "live" when the match begins, and to "complete" when it ends.
• Read the broadcast's current status so the in-app interface can display whether your broadcast is ready, live, or ended.

We do not read, modify, upload, comment on, or otherwise interact with any other content in your YouTube account (such as your existing videos, playlists, subscriptions, comments, analytics, or watch history).

8.4 Limited Use compliance

CricNoble's use of data obtained through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not use Google user data to serve advertisements.
• We do not sell, rent, or transfer Google user data to third parties for advertising, marketing, or any other purpose.
• We do not allow humans to read this data, except (a) with your explicit prior consent for specific data; (b) where necessary for security purposes such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymised and is used for internal operations in accordance with applicable privacy and legal requirements.
• We do not use Google user data for any purpose other than the live-broadcasting functionality described above.

8.5 Storage of Google credentials

To maintain the connection between CricNoble and your YouTube channel, we store an OAuth access token and refresh token associated with your Google account on our servers. These tokens are stored securely and are used only to make YouTube API calls on your behalf for live broadcasts you initiate. We do not store, copy, or cache any other content from your YouTube account.

8.6 Revoking Google access

You can disconnect your Google account from CricNoble at any time through either of the following paths:

• Inside the app: Profile menu → Connected Accounts → Disconnect Google Account.
• From Google directly: Visit https://myaccount.google.com/permissions, find "CricNoble" in the list of third-party apps with account access, and click "Remove Access".

When you disconnect, we immediately delete the OAuth tokens we have stored for your account. Live broadcasts already created on your YouTube channel are not deleted by this action; you can manage or delete them through YouTube Studio.

8.7 Other third-party services

The platform also uses other third-party services to provide specific features. These services have their own privacy policies, and we encourage you to review them:

• Google Maps / Places — place search and venue details when you pick a city or ground.
• Open-Meteo — weather and place-name lookups for match locations.
• Firebase (Google) — push notifications, file storage for photos and uploads, and Crashlytics crash reporting (crash traces, device model and operating system).
• Google Gemini (AI) — powers "Know the Rule" and the organiser's reschedule assistant. What you type or say as a question, any rule book PDF an organiser uploads, and, for the reschedule assistant, the tournament's team names, fixture list and dates, are sent to Google to produce an answer. Do not enter sensitive personal information into these features. AI answers can be wrong and are not official rulings.
• Resend — delivery of verification, password-reset and notification emails.
• YouTube — live streaming, as described above, only if you connect your account.

We are not responsible for the privacy practices of third-party services beyond CricNoble's own use of their APIs as described above.

9. Children's Privacy

CricNoble accounts are for people aged 13 or older, and you confirm this when you sign up. We do not knowingly create accounts for, or collect personal information directly from, children under 13. If you believe we have, contact us and we will delete it.

Young players can nonetheless appear in tournament data when an organiser or team manager adds them (see "Information about players who may not have an account" above). That is the organiser's responsibility under our Terms, and they must hold parental or guardian permission. Parents and guardians can ask us to access, correct or delete a child's record at any time. If you live somewhere that sets a higher age of digital consent or majority than 13 (for example, India sets 18 for consent to data processing), you may use CricNoble only with the involvement of a parent or guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the platform after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

• Email (privacy requests and grievances): admin@cricnoble.com
• Location: North Carolina, United States