This policy explains what Beyond 11 keeps about you when you use the Beyond 11 app or book at the turf's desk, why, who can see it, and how long it is kept. It is written to match what the system actually does.
1. Who we are
Beyond 11 is run by BEYOND11, a partnership firm (GSTIN 33ABHFB4255C1ZW), of Survey no 16 17, Ishwarya Garden Main Road (end), Vengavasal, Medavakkam, Chennai, Tamil Nadu 600100, India. For any question about your information, or to complain, write to beyond11official@gmail.com. We answer within 30 days.
2. What we keep about you
| What | Why |
|---|---|
| Your mobile number | It is your login. Team captains can also use it to add you to a team, and the venue can call you about a booking. |
| Your name | So team mates, opponents and the venue know who you are. It appears on teams, bookings and scorecards. |
| Your teams, matches, scores and statistics | This is what the app is for. |
| Your playing details, if you add them: playing role, bowling style and city | So team mates and captains know how you play. The city is the one you type; the app never reads your location. |
| Your bookings | The date and time, the price, any offer, what you have paid and any refund. |
| Payment details | The amount, how you paid (UPI, card or netbanking), and Razorpay's reference numbers for the payment and any refund. You pay on Razorpay's checkout: we never see or keep your card number, UPI PIN or bank password. |
| Payment screenshots, for bookings paid by the older UPI transfer | Before payments in the app went through Razorpay, customers paid the venue's UPI ID and uploaded the screenshot and the 12-digit UPI reference number, so staff could check the payment. |
| A UPI ID for refunds, if you give one | So the venue can send back money it refunds itself: money paid at the desk, or by the older UPI transfer. |
| Login code requests | The time and the internet (IP) address of each request for a login code, to stop people abusing the SMS service. |
| Your phone's notification address, if you allow notifications | To send you notices about your bookings and matches. |
| Error reports from the app and the staff pages | When a screen stops working, the app sends us what went wrong: the error, the screen, the app version and the type of phone, and your account if you are logged in. Phone numbers are removed before it is sent. We also keep the internet (IP) address it came from for one hour, to stop people flooding us with reports. We use it only to fix the app. |
| Reports you send about a name, team or scorecard | If you report something in the app, we keep your account, what you reported, the reason and any note you wrote, so the turf can check it. |
| A record of who did what | Bookings, payments, refunds and staff actions are written to a log that cannot be edited, so mistakes and disputes can be sorted out. |
The app does not read your contacts, your location or your messages. It opens your photos only if you choose a payment screenshot to upload, for the older UPI transfer.
3. If you book at the venue desk
When staff book a time for you at the desk, they type your name and mobile number. These are erased 90 days after the booking ends.
4. Who can see your information
- Your team mates and opponents see your name, and your scores and statistics.
- Anyone using the app can see scorecards and live scores, which show players' names. Your mobile number is never shown to other players.
- If a team captain adds you by your mobile number, you get an invitation in the app that shows the team's name and the name of the person who added you. You can decline it. If you decline, or later leave, that team cannot add your number again for 30 days.
- Venue staff see your bookings, your name and your payments, and any payment screenshot, so they can run the turf and help with payments and refunds. Lists show only the last four digits of your number; staff see the full number only when they open one booking.
We do not sell your information, and we do not use it for advertising.
5. Companies that handle information for us
- Razorpay processes the payments you make in the app. For each payment we send Razorpay the amount and your mobile number, and you type your card, UPI or bank details on Razorpay's checkout, not in our screens. Razorpay's checkout also reads some details of your phone, such as its model, its network and which UPI apps are installed, to offer UPI payment and to prevent fraud. Razorpay's own privacy policy applies to the details you give it.
- Google (Firebase) sends the SMS with your login code. For that, your mobile number is sent to Google each time you ask for a code. Google creates a sign-in record for the number; Beyond 11 removes that record at Google as soon as you are logged in. Google's own privacy policy applies to how it handles the number while sending the SMS.
- Google, Apple and Expo deliver notifications to your phone, if you allow them. A notification never contains your number or payment details.
- Our server provider runs the computer that holds the information, in Singapore (OVH).
- Our backup storage provider holds encrypted copies of the information. Only we hold the keys that open them.
6. How long we keep it
| What | How long |
|---|---|
| Your account, teams and bookings | Until you delete your account. |
| Payment screenshots (older UPI transfer) | 90 days after the booking, and deleted at once if you delete your account. The reference number and the amount stay as the payment record. |
| Login code requests (time and IP address) | 7 days. |
| Error reports | 30 days. |
| Reports about a name, team or scorecard | 180 days. |
| How many login codes were sent each day, with no number or address | About 13 months, for the monthly SMS bill. |
| Name and number typed at the venue desk | 90 days after the booking ends. |
| Booking, payment and refund records | As long as the law requires for accounts and tax. If you delete your account, your name and number are removed from them. |
| Backups | Encrypted copies are kept for about 8 weeks. Information you delete can remain inside those copies until they expire. |
7. Deleting your account
In the app, open Profile and choose Delete account. We send a code to your number to make sure it is you. If you cannot use the app, see Delete your account.
When you delete your account:
- Your mobile number is removed and every device is signed out.
- Your name is replaced by "Deleted player" on teams and scorecards. The scorecards themselves stay, so other players' records are not broken.
- Your payment screenshots are deleted at once.
- If a team had invited your number and you had not answered, or had blocked it from adding you again, that invitation or block stays, unusable, until it runs out. This takes at most 30 days. A block holds only a scrambled form of your number, never the number itself. This stops a team from working out which player left.
- Everything else that identifies you is erased within 31 days, apart from the encrypted backups described above.
8. How we protect it
- The app, this website and the staff pages talk to our server only over an encrypted connection (https).
- Backups are encrypted before they leave the server.
- Only staff the venue's owners have added can open the staff pages, and what they do is recorded.
- Login codes are stored only in a scrambled form and expire after a few minutes.
9. Your choices
- You can change your name in the app.
- You can decline a team's invitation, leave a team, and switch notifications off in your phone's settings.
- You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by writing to beyond11official@gmail.com.
- If you are not satisfied with our answer, you can complain to our grievance officer: Manoj, +91 82202 43513, beyond11official@gmail.com.
10. Children
You must be 18 or older to book and pay. Players under 18 may play in a booking made by an adult who is responsible for them.
11. Changes to this policy
If we change what we keep or how we use it, we will update this page and change the date at the top. For an important change we will also tell you in the app.