Privacy Policy

Wickt (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use the Wickt mobile application and website (collectively, the “Service”), how we use it, and what rights you have over it. By using Wickt, you agree to the practices described in this policy.

1. Who We Are

Wickt is a social cricket picks platform operated from India. You can reach our data team at support@wickt.in for any privacy-related queries or requests.

2. Information We Collect

We collect information that you provide directly and information generated through your use of the Service.

2.1 Information you provide to us

• Name: Your full name or display name, used to identify you on the platform.
• Email address: Used for account creation, login, and transactional communications.
• Phone number: Collected during registration for account verification purposes.
• Username: A unique handle you choose, visible to other users in your groups.
• Profile avatar: A photo or image you upload to personalise your profile.
• Cricket preferences: Your favourite cricket team and favourite player, used to personalise your in-app experience.
• City and state: Your approximate location, used for regional personalisation and analytics.

2.2 Information collected automatically

• Device information (model, operating system, app version) to diagnose bugs and ensure compatibility.
• Usage data such as screens visited, features used, and match pick activity, to improve the product.
• Crash logs and error reports, collected anonymously to fix technical issues.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account creation and management: To register your account, authenticate you, and keep your profile up to date.
• Providing the Service: To enable match picks, group creation, leaderboard rankings, and all core features of Wickt.
• Personalisation: To customise your in-app experience based on your cricket preferences, city, and usage patterns.
• Communications: To send you account-related notifications (e.g., match reminders, pick results). We do not send marketing emails without your explicit consent.
• Analytics and improvement: To understand how users interact with the app and to develop new features and fix issues.
• Payment processing: If you purchase a season pass, we use your information to process the transaction securely.
• Legal compliance: To meet our obligations under applicable Indian law, including responding to lawful requests from government authorities.

4. Data Storage and Security

Your data is stored securely on Supabase, a cloud-based database service with enterprise-grade security controls, including encryption at rest and in transit. Supabase infrastructure complies with SOC 2 Type II standards.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Access to user data within our team is restricted on a need-to-know basis.

While we take reasonable steps to protect your data, no system is completely secure. If you believe your account has been compromised, please contact us immediately at support@wickt.in.

5. Third-Party Services

We work with a small number of trusted third-party services to operate Wickt. These services may process your data only as necessary to perform their functions:

5.1 Google Sign-In

We offer Google Sign-In as an authentication option. When you use this feature, Google provides us with your name and email address to create or access your account. Google’s use of your data is governed by Google’s Privacy Policy. We do not receive your Google password or any other account data beyond what is needed for authentication.

5.2 Razorpay

We use Razorpay to process payments for the optional season pass. When you make a payment, Razorpay collects and processes your payment information directly. We do not store your card details or banking credentials. Razorpay’s data handling is governed by Razorpay’s Privacy Policy. Razorpay is PCI-DSS compliant.

6. Data Sharing and Disclosure

We do not sell your personal data to any third party, ever. We do not share your data with advertisers. We may disclose your information only in the following circumstances:

• Service providers: To trusted vendors (such as Supabase and Razorpay) who process data on our behalf, under strict confidentiality obligations.
• Legal requirements: If required by law, court order, or a lawful request by Indian government authorities, we may disclose data as legally obligated.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• Safety: Where we believe disclosure is necessary to protect the rights, property, or safety of Wickt, our users, or the public.

7. Your Rights

Under the Digital Personal Data Protection Act 2023 (DPDPA) and applicable Indian law, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to correction: You can request that we correct inaccurate or incomplete data.
• Right to erasure: You can request the deletion of your account and associated personal data by emailing us at support@wickt.in. We will process deletion requests within 30 days.
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
• Right to grievance redressal: You may nominate a person to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please write to us at support@wickt.inwith the subject line “Privacy Request”. We will respond within 30 days.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, transaction records for tax compliance).

Anonymised and aggregated data (which cannot identify you) may be retained indefinitely for statistical and product improvement purposes.

9. Children’s Privacy

Wickt is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without parental consent, please contact us at support@wickt.in and we will delete it promptly.

10. Compliance

This Privacy Policy is designed to comply with:

• The Digital Personal Data Protection Act, 2023 (India)
• The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through the app or via the email address on your account. Your continued use of Wickt after the effective date of any changes constitutes your acceptance of the updated policy.

We encourage you to review this page periodically. The date of the most recent update is displayed at the top of this page.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

• Email: support@wickt.in
• Website: wickt.in

We will make every effort to address your concerns promptly and transparently.