CWFPrivacy policy
Last updated 3 October 2026
1. Who we are
CWF ("Cricket With Fun", "the app", "we", "us") is operated by Cubbing Solutions Pvt Ltd, a company in India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for personal data processed through the CWF app, the join pages at cricketwithfun.com and the CWF servers.
Contact and Grievance Officer: logesh@cubbingsolutions.com.
Short version. We keep names, match data and a few optional details so teams can score and share cricket. We do not run advertising, we do not sell personal data, and the app does not include any analytics or tracking software. You can see, correct or delete your data, and you can reach a real person at the email above.
2. What we collect
We collect only what the features need. Here is the full list, based on how the app currently works.
| Data | When and why |
|---|---|
| Guest device ID | When you use the app without signing in, the app creates a random identifier on your device and sends it to our servers so that your guest account (your teams and matches) is recognised the next time you open the app. It is not linked to your name, email or phone unless you later sign in. |
| Sign-in details | If you sign in with Google or Apple we receive your name, email address (Apple may give us a private relay address instead), profile picture link where the provider supplies one, and the provider's unique ID for you. We never see your Google or Apple password. For Apple sign-in we may store an encrypted token so that we can revoke Apple access when you delete your account. |
| Sessions | To keep you signed in we store hashed refresh tokens together with the device or browser description (user agent) they were issued to. Sessions expire within 30 days of inactivity and at most 90 days after sign-in. |
| Player profile | A display name, and optionally a playing role, batting and bowling style and jersey number. A profile can be created by you or by a captain on your behalf. |
| Phone number (optional) | A captain may add a phone number to a player, and a person joining through a web invite may type their own. It is stored in a standard international format. See phone numbers below. |
| Team, match and scoring data | Teams, squads, fixtures, every ball bowled, scorecards, results, tournament tables and the statistics derived from them. Corrections to a scored match are also recorded. |
| Join and claim activity | Join requests, profile claims, merges of duplicate profiles, disputes ("this match lists the wrong person") and matches you chose to hide, so that captains can review and undo them. When a phone number is added to a profile we record who added it, for which team, when, and how (captain entry or self-join) as proof of consent. |
| Push notification token | Our servers have a place to store a device notification token (and whether it is iOS or Android). The current version of the app does not ask for notification permission or send notifications. If that changes we will update this policy first. |
| Technical logs | Our hosting provider and servers process IP address, request details and error logs when you use the app or this website. We use rate limiting, keyed by IP address, to stop abuse. We do not use these logs to build profiles of people. |
What we do not collect. We do not collect your precise location, photos, microphone recordings or camera images. The app does not currently ask for a date of birth, Aadhaar number or any ID document. The app does not currently let you upload photos or logos; if that is added we will update this policy before turning it on.
Contacts on your device
CWF can open your device's contacts app with your permission when you are a captain adding players to a team. The contact list stays on your device. If you choose to add players from contacts, CWF reads only the entries you select and sends their names and phone numbers to our servers. These are then treated like any other player added by name: the phone number is stored and shown masked as described above, and used for duplicate detection. We do not copy or backup your full contact list, and we do not have access to contacts you do not choose to add.
Phone numbers in detail
- A phone number is optional. Nobody has to give one to be listed on a team or to play.
- It is shown masked (only the last three digits) to everyone except the admins of the teams the player is on and the player themselves once they have claimed the profile. Those people can see the full number.
- We use it to detect duplicate profiles. When a captain adds a number, we only link it to an existing profile automatically if that profile is already on a team the captain administers. If the same number exists elsewhere in CWF, the captain is told only that a profile exists, with its initials and last three digits, and a new profile is created. We do not reveal the other person's name or full number.
- We do not send SMS or WhatsApp messages from our servers. Invite links are shared by the person who creates them, for example through their own WhatsApp.
- You can ask us to remove your number at any time (see your rights). Deleting your account removes it automatically.
3. People added by someone else
CWF lets a captain list teammates by name before they have ever opened the app. If you are one of those people, a captain has given us your name (and perhaps a phone number) so that your matches and stats can be recorded. You can ask us to remove or anonymise your name and number, hide matches from your public profile, or claim the profile as your own. Write to logesh@cubbingsolutions.com. Our terms require captains to add only people who are happy to be listed, and to get a parent or guardian's permission for anyone under 18.
4. Why we use it, and your consent
We process personal data for these purposes only:
- to create and secure your account and keep you signed in;
- to record and show teams, matches, scorecards, statistics and tournaments, which is the core of the service;
- to let people join teams, claim their profiles, merge duplicates and resolve disputes;
- to generate optional AI commentary during scoring;
- to prevent abuse and keep the service running, and to respond to your requests and grievances; and
- to meet legal obligations.
Where the DPDP Act requires it, we rely on your consent, which you give when you sign in, add or accept a profile, enter a phone number or join a team through an invite. You can withdraw consent at any time by deleting your account in the app or by emailing us. Withdrawal does not affect processing already done, and some match records may remain as described in section 10. Where a person is added by a captain, we rely on the captain's confirmation that they have the person's permission, and on the person's right to object or ask for removal at any time.
5. What is public
CWF is a sharing product, so some information is public by design. A player's display name, match history and statistics, and the live and final scorecards of matches, can be viewed by anyone who has the link or finds the profile. Team names are public, and an invite page shows the team's players by first name to anyone who opens the invite link. Phone numbers are never public (see above). Email addresses and sign-in IDs are never shown to other users.
You can hide a match you appear in from your public profile, report a match that lists the wrong person, and ask for your name to be anonymised.
6. AI commentary
When a scorer asks for AI commentary, the app sends the current score, the names of the striker and bowler, the last few balls (runs, wickets, extras) and an optional short match context to a language model running on Cloudflare Workers AI. No email addresses, phone numbers or account IDs are sent. Because the striker and bowler are named players, those names are part of the request. The generated text is returned to the scorer and not used to make decisions about anyone. Cloudflare states that it does not use Workers AI customer content to train models or to improve its services without explicit consent. AI commentary is rate limited and can fail, in which case the app shows a generic line.
7. Analytics and tracking
The CWF app and this website contain no analytics, advertising or tracking software, and no third-party cookies. This website does not set cookies. Our infrastructure provider keeps standard server logs and aggregated performance metrics as part of running the service.
8. Who we share it with
We do not sell personal data and we do not share it for advertising. We use these service providers, who process data on our instructions:
- Cloudflare, Inc., for hosting, our database, storage, DNS, security and AI commentary. Cloudflare operates a global network, so data can be processed outside India.
- Google and Apple, only when you choose to sign in with them.
We may disclose data if the law or a court order requires it. Data you put in public scorecards (section 5) is visible to anyone. We will only transfer personal data outside India to countries that the Government of India has not restricted under the DPDP Act.
9. Age and minors
CWF accounts are for users aged 18 and over. The DPDP Act treats anyone under 18 as a child and requires special protection when a captain lists a minor on a team.
- The app does not ask for a date of birth and does not verify age automatically. Captains are responsible for confirming a person's age before adding them.
- A captain may list a young player (under 18) by name only, and must obtain verifiable parental or guardian consent before doing so. A captain must not add a minor's phone number unless they are the parent or guardian, or have the parent or guardian's explicit permission.
- A parent, guardian or minor can contact us at any time to request that a name be removed or anonymised. Write to logesh@cubbingsolutions.com. We will act on a genuine request promptly.
- We do not show advertising, do not track or profile the behaviour of anyone, and do not direct anything at minors beyond cricket scoring and statistics.
10. How long we keep it
- Account and sign-in data: until you delete your account.
- Sessions: up to 30 days after last use, and no more than 90 days after sign-in.
- Match, scoring and team records: kept for as long as the match or team exists, because other people's scorecards and statistics depend on them. When an account is deleted, matches it created stay with the creator link removed. Your player profile is renamed to "Deleted player" on team sheets and scorecards so other people's records remain complete. See account deletion for the exact list.
- Phone numbers: until the player or a captain removes them, or the account is deleted.
- Backups: our database keeps point-in-time recovery copies for a limited period (currently up to 30 days), after which deleted data is no longer recoverable.
11. Security
Traffic to CWF is encrypted in transit. Refresh tokens are stored only as hashes. Apple tokens, where we hold them, are encrypted. Sign-in, invite and roster endpoints are rate limited. No system is perfectly secure. If a personal data breach affects you we will tell you and the Data Protection Board of India as the law requires.
12. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and who we share it with;
- Correct or complete inaccurate data, and erase data we no longer need;
- Withdraw consent at any time;
- Grievance redressal, described below; and
- Nominate another person to exercise your rights if you die or become unable to do so. Tell us the nominee's name and email and we will record it.
To delete your account, use Me, then Account, then Delete account in the app, or follow the steps on the account deletion page. For anything else, email logesh@cubbingsolutions.com from the address linked to your account, or tell us which team you were listed on so that we can find your profile. We may ask you to prove who you are before sharing or changing data. We aim to complete requests within 30 days.
13. Grievance Officer
If you have a complaint about how we handle your personal data, contact our Grievance Officer first:
Grievance Officer, Cubbing Solutions Pvt Ltd
Email: logesh@cubbingsolutions.com
We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India, once the Board is operational and after you have used our grievance process.
14. Changes to this policy
We will update this page if our practices change, and change the "last updated" date above. For significant changes, such as using data for a new purpose, we will tell signed-in users in the app or by email and ask for fresh consent where the law requires it. This policy is governed by the laws of India.