Privacy Policy

Effective date: 17 June 2026 · Last updated: 20 June 2026

This Privacy Policy explains what personal data CricCuts collects, why, how we use and protect it, and the choices and rights you have. It applies to the CricCuts mobile app (package com.criccuts) and this website.

1. Who we are

CricCuts is operated by Gokul Sundar, an individual developer ("CricCuts", "we", "us", "our"). For any privacy question or request, contact us at gkl.sundar@gmail.com. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we act as the Data Fiduciary for the personal data described here, and the contact above also serves as our grievance/contact point.

2. Our privacy-first approach

CricCuts is built to keep your footage private. All video import, bat-on-ball detection, clip selection, trimming, and export happen locally on your device. Your raw videos and finished reels are stored only in the app's storage on your phone. They are not transmitted to us or to any server as part of normal use.

3. What we collect

(a) On-device content — stays on your device

• Your videos and the data derived from them: imported video files, detected events (audio/motion/ball-contact), generated clips, your keep/drop choices and labels, sessions, and exported highlight reels.
• This content is stored in the app's local database and file storage on your phone. We do not receive it. Deleting the relevant items in-app, clearing the app's storage, or uninstalling the app removes it.

(b) Account data

• When you use the app we create an account through Firebase Authentication (a Google service). This generates a unique user identifier (UID). If you sign in with a provider such as Google, we also receive the basic profile information that provider returns (for example your name, email address, and profile photo).

(c) Early-access / quiz information (optional)

• If you complete the "Get early access" questionnaire — on this website or in the app — we collect what you provide: name, email address, phone number (optional), a CricHeroes or social profile link (optional), your cricketing details (role, level, gender, disciplines, batting/bowling style), the problems you'd like solved, and your consent to be contacted.
• We use this to send you the build, occasional product updates, and to shape what we build. Website submissions may be stored with a forms provider or with Google Firestore; in-app submissions are stored in Google Firestore.

(d) Content you choose to share

• If you publish or share a reel, any metadata you add (such as player names, a social handle, location, or watermark details) is included with what you share, on the platform you share to.

(e) Diagnostics and usage

• We use Firebase Analytics and Firebase Crashlytics (Google services) to understand basic app usage (for example, sign-in/sign-out events) and to receive crash reports. These may include your Firebase UID, a device/installation identifier, device model and OS version, app version, and technical logs around a crash. We do not use this to identify you personally beyond your account.

(f) Push notifications (optional)

• CricCuts can send optional push notifications with exclusive offers and product updates. They are off by default — you turn them on in Settings → Notifications inside the app, and you can turn them off again at any time. When enabled, we use Firebase Cloud Messaging (a Google service), which generates a device messaging token used solely to deliver these notifications. We do not use it to track you, and turning the option off unsubscribes your device so we stop sending them.

4. How we use your data

• To provide and operate the app and its on-device features.
• To create and maintain your account and keep you signed in.
• To respond to you and, where you've opted in, send you the build and product updates.
• Where you've opted in, to send you push notifications about exclusive offers and new features.
• To diagnose crashes, fix bugs, improve performance, and prioritise features.
• To keep the service secure and prevent abuse, and to comply with legal obligations.

5. Legal basis (DPDP Act, 2023)

We process your personal data based on your consent (which you give when you create an account, submit the questionnaire, or opt in to updates) and, where permitted, for certain legitimate uses such as security, fraud prevention, and complying with the law. You can withdraw your consent at any time (see Your rights); withdrawing it does not affect processing already carried out.

6. Who we share it with

We do not sell your personal data. We share limited data only with service providers who help us run CricCuts:

We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or others.

7. International transfers

Our service providers (notably Google) may process and store data on servers located outside your country. Where data is transferred internationally, it is handled under those providers' own safeguards and privacy commitments.

8. How long we keep it

• On-device content: kept on your device until you delete it or uninstall the app. We never hold it.
• Account data: kept while your account exists, then deleted on account deletion (see below).
• Early-access submissions: kept until you ask us to delete them or they are no longer needed.
• Diagnostics: retained for a limited period per the providers' defaults, then deleted or aggregated into non-identifying form.

9. Your rights

Subject to applicable law (including the DPDP Act), you may:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or update inaccurate or incomplete data.
• Erase your data and delete your account — see our Account & Data Deletion page.
• Withdraw consent or opt out of product emails and push notifications at any time.
• Raise a grievance about how we handle your data.

To exercise any of these, email gkl.sundar@gmail.com. We aim to respond within 30 days.

10. Children

CricCuts is not directed to children under 13, and we do not knowingly collect their data. If you are a minor (under 18) under the DPDP Act, you should use CricCuts only with the consent and involvement of a parent or legal guardian. If you believe a child has provided us personal data, contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures to protect personal data, and we rely on Google Firebase's infrastructure security for the data it processes. No method of transmission or storage is completely secure, but keeping your footage on-device by design significantly limits exposure.

12. Deleting your account and data

13. Changes to this policy

We may update this Privacy Policy as the app evolves. We'll change the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use after an update means you accept the revised policy.

14. Contact

Questions, requests, or grievances about privacy:
Gokul Sundar — gkl.sundar@gmail.com