Privacy Policy

Last updated: 3 June 2026

1. Who We Are

CricCoach AI is operated from India and available at criccoach.co.in. We act as the Data Fiduciary (under India's DPDPA 2023) and Data Controller (under GDPR/UK GDPR) for all personal data processed through our platform.

Contact: admin@criccoach.co.in

2. What Data We Collect

• Registration data: Name, email address, phone number, age
• Video recordings: Batting videos you upload for analysis
• Biometric pose data: 33 body keypoints (joint positions and angles) extracted from your video using computer vision pose estimation
• Analysis results: Coaching reports, scores, fault assessments, and drill recommendations generated from the above
• Consent records: Timestamps, consent versions, and verification data

3. Biometric Data — Special Category

The 33 pose estimation keypoints extracted from your video constitute biometric data as defined under:

• EU GDPR Article 9 — special category personal data requiring explicit consent
• UK GDPR — same classification as EU GDPR
• India's Digital Personal Data Protection Act 2023 (DPDPA) — personal data processed with heightened Data Fiduciary obligations

This data uniquely identifies body geometry and movement patterns. We process it solely for the purpose of generating your coaching analysis and never for identification purposes.

4. Legal Basis for Processing

We process your personal data, including biometric data, on the basis of explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a); DPDPA Section 6). You provide this consent via a mandatory checkbox during registration, before any video is processed.

You may withdraw consent at any time (see Section 9 below). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

• Generate personalised coaching reports and drill plans
• Deliver reports via email or the platform
• Track athlete progress across sessions
• Improve analysis accuracy (using anonymised, aggregated data only)

6. Data Sharing

We do not sell your data. We do not use third-party analytics or advertising trackers.

Your data is shared only with:

• Your academy — if you registered via an academy, your academy administrator can view your reports
• AWS (Amazon Web Services) — our infrastructure provider, acting as a data processor under appropriate data processing agreements

No other third parties receive your personal or biometric data.

7. Data Retention

• Raw videos: Deleted 90 days after analysis is complete
• Coaching reports and analysis results: Retained indefinitely (or until you request deletion)
• Consent records: Retained for 7 years for legal compliance
• Pose keypoints: Retained until consent is withdrawn or deletion is requested

8. Children and Minors

For athletes under 18 years of age, a parent or legal guardian must provide consent before any data is collected or processed. The guardian must:

• Complete the consent form on behalf of the minor
• Verify their identity as parent/guardian
• Explicitly consent to biometric data processing

We do not knowingly collect data from minors without verified parental consent.

9. Your Rights

You (or the guardian of a minor) have the right to:

• Access — request a copy of all data we hold about you
• Rectification — correct inaccurate personal data
• Erasure — request deletion of all your data
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any right, email admin@criccoach.co.in. We will respond within 30 days.

Upon consent withdrawal or erasure request, all video, biometric, and analysis data is permanently deleted within 30 days (except consent records retained for legal compliance).

10. Security

• All data encrypted at rest using AES-256
• All data encrypted in transit using TLS 1.2+
• Role-based access controls — only authorised personnel can access athlete data
• Infrastructure hosted on AWS with industry-standard security certifications
• Regular security reviews and access audits

11. Cookies

We use only essential cookies required for the platform to function (session management, consent state). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

12. India DPDPA 2023 — Specific Provisions

• CricCoach AI acts as a Data Fiduciary under the DPDPA
• We implement reasonable security safeguards as required under Section 8
• We provide notice of data processing purposes at the point of consent collection
• A Consent Manager mechanism is available — you can review and withdraw consent via email to admin@criccoach.co.in
• We will comply with directions of the Data Protection Board of India

13. GDPR — International Transfers

If you are located in the EU or UK, your data may be transferred to and processed in India. Where applicable, such transfers are protected by EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement to ensure an adequate level of data protection.

14. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes affecting how we process biometric data or share information, we will notify you via email before the changes take effect.

15. Contact

For any privacy-related queries, data requests, or complaints:

CricCoach AI
Email: admin@criccoach.co.in
Website: criccoach.co.in