Privacy Policy

Last updated: 12 May 2026 · NearbyPlay Technologies Private Limited · CIN: U58201TS2025PTC205119

1. Who we are

Data Fiduciary: NearbyPlay Technologies Private Limited
CIN: U58201TS2025PTC205119
Registered Office: 2-47/170/A/2, Southern Mega Township, Tondapally, Shamshabad, K.V.Rangareddy, Telangana 509325, India

NearbyPlay operates a platform that helps people discover, host, and join casual sports and fitness activities in their local communities. We operate through a mobile application (Android and iOS), a WhatsApp-based interface, and a website at www.nearbyplay.in.

For all data protection matters, you may contact us at contact@nearbyplay.in.

2. Data we collect

We collect only the data necessary to provide and improve our services. This includes:

Data you provide directly

• Identity data: Name, display name
• Contact data: Mobile phone number (used for OTP-based login and WhatsApp integration)
• Profile data: Sport preferences, skill level, community affiliations (college, residential area, company)
• Activity data: Games you create, host, or join; your participation history
• Communications: Messages sent through our WhatsApp bot, in-app support requests, or contact forms

Data collected automatically

• Location data: Approximate or precise location when you create or search for games (see Section 5)
• Device and usage data: IP address, browser type, device type, operating system, pages visited, time spent, and referral source
• Analytics data: How you interact with the platform, which features you use, and session patterns
• Push notification tokens: If you grant permission, we collect a device token to send you push notifications about game updates, join requests, and community activity. You may revoke this permission at any time through your device settings.

Data from third parties

• Basic profile information from WhatsApp when you interact with our chatbot, subject to WhatsApp's own privacy terms
• Device identifiers from Apple (iOS) or Google (Android) used solely for delivering push notifications through their respective notification infrastructure

3. How we use your data

We use your personal data for the following purposes:

• To match you with relevant games, players, and communities near you
• To help you create, host, and manage game sessions
• To send you notifications about game availability, slot openings, join requests, approvals, and confirmations, via push notification, SMS, or WhatsApp
• To operate in-app support and respond to your Help & Support requests
• To improve the platform based on how users interact with it
• To respond to your queries, feedback, and support requests
• To maintain platform security and prevent misuse
• To comply with applicable laws and legal obligations
• To send you updates about NearbyPlay if you have opted in (you may opt out at any time)

We will not use your data for purposes beyond those listed above without seeking fresh consent where required under the DPDP Act.

4. Legal basis for processing

Under the DPDP Act, 2023, we process your personal data on the following bases:

• Consent: For most processing activities, we rely on your free, specific, and informed consent given when you register, use the WhatsApp bot, submit a form, or use the mobile app. You may withdraw consent at any time.
• Legitimate use: In limited cases, we may process data without explicit consent where permitted by the DPDP Act, such as to respond to medical emergencies during sporting activities or as required by a court or government authority.
• Contractual necessity: To provide the services you have signed up for, including game coordination and player matching.

You may withdraw consent at any time by using the in-app Help & Support feature or emailing contact@nearbyplay.in. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, but may limit your ability to use certain features of the platform.

5. Location data

NearbyPlay is a location-based service. Location data is central to how the platform works. It enables us to show you games and players near you.

• Approximate location may be derived from your IP address or community information you provide (for example, your college or residential area).
• Precise location may be collected through the app or WhatsApp if you choose to share it when creating or joining a game.
• Location data is used only to match you with nearby activities and is not shared with third parties for advertising or profiling purposes.
• You may choose not to share precise location. In such cases, game matching will be based on the community or area you have indicated in your profile.
• We do not continuously track your location. Location is accessed only when you are actively using the platform for a game-related action.

6. Mobile app, WhatsApp, and third-party platforms

Our interfaces include a native mobile application available on Android and iOS, WhatsApp (operated by Meta Platforms, Inc.), and the NearbyPlay website.

Mobile App: The NearbyPlay mobile app is available on Android (Google Play) and iOS (App Store). When you use the app:

• We collect location data only when you grant permission through your device's OS-level location prompt
• We collect a push notification token only if you grant permission through your device's notification prompt
• App analytics are collected through our backend

WhatsApp: When you interact with the NearbyPlay WhatsApp chatbot, your messages are processed through WhatsApp's infrastructure. WhatsApp's own Privacy Policy applies to data handled by Meta. We receive only the content of messages you send to our bot and your WhatsApp number. We do not receive your contact list, media, or other conversations. We use the WhatsApp Business API and are bound by Meta's Business Solution Provider terms.

Cloud Infrastructure: We use Amazon Web Services (AWS) for cloud hosting and data storage. AWS is bound by confidentiality obligations and may not use your data for their own purposes. Data is hosted in the Asia Pacific (Mumbai) region.

Our website may also use analytics tools. These tools may place cookies and collect anonymised usage data. Please refer to Section 12 on Cookies.

We are not responsible for the privacy practices of third-party platforms. We encourage you to read their privacy policies before interacting with them.

7. Sharing your data

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• With other players: When you join or host a game, your display name, age band, gender, sport preferences, and community memberships may be visible to other community members and confirmed participants for coordination purposes. Your raw date of birth and phone number are never visible to other users.
• With service providers: We share data with trusted technology and cloud service providers who assist in operating the platform. These providers are bound by confidentiality obligations and are not permitted to use your data for their own purposes.
• For legal compliance: If required by law, court order, or government authority, we will disclose data to the extent necessary and legally required.
• In the event of a business transfer: If NearbyPlay is acquired or merges with another entity, your data may be transferred to the successor entity, subject to equivalent privacy protections and notice to you.

8. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Account and profile data is retained for as long as your account is active or as needed to provide services.
• Game activity data is retained for a minimum of one year in accordance with DPDP Rules, 2025.
• Communications and support data are retained for up to two years from the date of the interaction.
• Push notification tokens are retained while you have the app installed and notifications enabled; deleted on account closure.
• When data is no longer needed, it is securely deleted or anonymised.

You may request deletion of your data at any time directly through the mobile app: Profile → Settings → Delete Account. Account deletion follows a 45-day grace period during which the request may be cancelled. See Section 9 for your rights and our Account Deletion page for full details.

9. Your rights under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to access

Request a summary of the personal data we hold about you and how it is being used.

Right to correction

Request correction of inaccurate or incomplete personal data we hold about you.

Right to erasure

Request deletion of your personal data when it is no longer necessary for the purpose it was collected. You may also delete your account directly through the mobile app.

Right to withdraw consent

Withdraw consent for processing at any time, without affecting past processing.

Right to grievance redressal

Lodge a complaint with us for any improper handling of your personal data. See Section 14.

Right to nominate

Nominate a representative to exercise your data rights in the event of your death or incapacity.

We will respond to all valid data principal requests within 30 days of receipt. To exercise any of these rights, please email contact@nearbyplay.in with your request and sufficient information to verify your identity.

You also have the right to file a complaint with the Data Protection Board of India if you believe your rights have been violated.

10. Children's data

NearbyPlay's services are intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age.

Under the DPDP Act, 2023, any user under the age of 18 is classified as a child, and processing of their data requires verifiable parental or guardian consent. We do not conduct behavioural tracking, profiling, or targeted advertising directed at minors.

If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will promptly delete such data. If you believe we have collected data from a minor, please contact us immediately at contact@nearbyplay.in.

11. Security and incident reporting

We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures comply with the standards prescribed under the SPDI Rules, 2011 and the DPDP Act, 2023. They include:

• Encryption of personal data in transit (HTTPS/TLS) and at rest where applicable
• Access controls limiting data access to authorised personnel only
• Regular review of security practices and access logs
• Secure data backup mechanisms
• Time synchronisation of all server systems to authoritative time sources
• System logs retained for a minimum of 180 days as required under applicable directions

Cybersecurity incident reporting

In accordance with the directions of the Indian Computer Emergency Response Team (CERT-In) dated 28 April 2022, we will report cybersecurity incidents to CERT-In within six hours of becoming aware of them.

If you discover or suspect a security vulnerability or data breach affecting NearbyPlay, please report it to our designated Point of Contact:

Point of Contact for CERT-In and Security Matters:
Ashwin Naik, Founder
NearbyPlay Technologies Private Limited
Email: contact@nearbyplay.in
Phone: +91 7702068282

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users within 72 hours of becoming aware of the breach, as required under the DPDP Rules, 2025.

No system can guarantee complete security. If you suspect unauthorised access to your data, please notify us immediately at contact@nearbyplay.in.

12. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and understand how visitors use the site.

• Essential cookies: Necessary for the website to function. These cannot be disabled.
• Analytics cookies: Help us understand traffic patterns and usage. These are only placed with your consent.
• Preference cookies: Remember your settings and choices for a better experience.

You may manage cookie preferences through the cookie consent banner on our website, or through your browser settings. Disabling analytics or preference cookies will not affect your ability to use the core platform.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the platform or via SMS.

Continued use of the platform after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Grievance redressal

If you have any concern, complaint, or query about how your personal data is handled by NearbyPlay, you may contact our Grievance Officer:

Grievance Officer: Ashwin Naik
NearbyPlay Technologies Private Limited
Email: contact@nearbyplay.in
Phone: +91 7702068282
Address: 2-47/170/A/2, Southern Mega Township, Tondapally, Shamshabad, K.V.Rangareddy, Telangana 509325

We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days. If you are not satisfied with our resolution, you may escalate your complaint to the Data Protection Board of India at www.meity.gov.in.

15. Contact us

For any general queries about this Privacy Policy or our data practices:

• Email: contact@nearbyplay.in
• Phone: +91 7702068282
• Address: 2-47/170/A/2, Southern Mega Township, Tondapally, Shamshabad, K.V.Rangareddy, Telangana 509325