Privacy Policy

Last updated: April 2026

1. Introduction

OnlyKrida ("we", "our", "us") is a sports talent discovery platform that connects athletes with scouts, coaches, teams, and opportunities. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

By using OnlyKrida, you consent to the data practices described in this policy. If you are under 18, please review this policy with your parent or guardian.

2. Information We Collect

Profile Information

• Name, email address, and password
• Date of birth, gender
• Sport, position, team affiliation
• Location (city, state, country)
• Bio, achievements, and goals
• Physical stats (height, weight) when voluntarily provided
• Profile photo and cover image

Content You Create

• Posts, photos, and highlight videos you upload
• Comments and reactions on other users' content
• Messages sent through direct and group messaging
• Opportunity applications you submit

Fitness Test Data

• Beep test (Yo-Yo IR1) results, sprint times, agility scores, vertical jump measurements
• Calculated fitness zones and VO2max estimates
• Accelerometer sensor data during fitness tests (processed on-device)

Analytics and Device Information

• Screen views, interactions, and feature usage
• Device platform (iOS, Android, Web)
• Operating system version and app version
• Profile view tracking (who viewed your profile)

3. How We Use Your Information

We use your data to:

• Create and maintain your athlete, scout, coach, or team profile
• Match athletes with relevant scouts and opportunities using AI
• Generate personalized profile improvement suggestions
• Enable communication between users (messaging, comments)
• Display fitness test results and rankings to scouts
• Send notifications about matches, messages, and opportunities
• Improve platform performance and user experience
• Ensure platform safety and enforce our terms of service

4. AI-Powered Features and Third-Party Services

OnlyKrida uses artificial intelligence to power several features. When you use AI features, your relevant data is processed as follows:

Anthropic Claude AI

We use Anthropic's Claude AI models to generate scouting recommendations, profile coaching tips, opportunity matching, and power the Krida AI assistant. When these features are used, relevant profile data (such as your sport, stats, achievements, and fitness results) is sent to Anthropic's API for processing. Anthropic processes this data according to their privacy policy and does not use it to train their models.

Supabase

We use Supabase for database hosting, user authentication, file storage (photos and videos), and real-time messaging. Your data is stored on Supabase's cloud infrastructure with encryption in transit (TLS) and row-level security policies controlling data access.

5. Data Storage and Security

• All data transmitted between your device and our servers is encrypted using TLS
• Database access is protected by row-level security policies ensuring users can only access authorized data
• Authentication tokens are stored locally on your device
• Profile photos and post media are currently served from public storage URLs, which means anyone holding the link can open the file without signing in. We are migrating these to signed, expiring URLs. Fitness-test videos are already private and require a signed link.

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your data.

6. Data Sharing

We do not sell your personal data to third parties. We share data only in the following circumstances:

• With other users as part of platform functionality (your public profile, posts, and fitness results are visible to other users based on your privacy settings)
• With AI service providers (Anthropic) to power platform features, as described above
• With law enforcement or regulatory authorities when required by law
• To protect the safety of our users, particularly minors

7. Your Rights

You have the right to:

• Access your personal data through your profile and settings
• Correct inaccurate information by editing your profile
• Delete your account and associated data by contacting us
• Data portability — request a copy of your data in a portable format
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us at privacy@onlykrida.com.

8. Children's Privacy

Under India's Digital Personal Data Protection Act 2023, anyone under the age of 18 is a child. Processing a child's personal data requires verifiable consent from a parent or legal guardian, and the Act separately prohibits tracking, behavioural monitoring and targeted advertising directed at children.

OnlyKrida is in early access and is currently intended for users aged 18 and over. We are building guardian-consent and age-assurance flows before opening general access to under-18 athletes. Until those are in place, we ask that under-18s do not create an account independently, and we are working directly with coaches and academies so that younger athletes are onboarded with their guardian's involvement.

If you believe an account belonging to someone under 18 has been created without guardian consent, or you are a parent or guardian who wants an account reviewed, removed, or its data deleted, contact us at anirudhasn4@gmail.com and we will act on it.

For users in the UAE, we comply with applicable data protection regulations regarding minors.

9. Data Retention

• Active account data is retained for as long as your account remains active
• If you delete your account, your personal data will be removed within 30 days, except where retention is required by law
• Anonymized analytics data may be retained indefinitely for platform improvement
• Messages are retained for the duration of both participants' accounts

10. Cookies and Local Storage

OnlyKrida uses local storage (localStorage on web, AsyncStorage on mobile) to persist your authentication session and app preferences. We do not use third-party tracking cookies. Analytics data is collected through our own systems, not third-party analytics providers.

11. International Data Transfers

OnlyKrida operates in India and the UAE. Your data may be processed in jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for any international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the platform or email. Continued use of OnlyKrida after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding your privacy, contact us at:

• Email: privacy@onlykrida.com
• General support: support@onlykrida.com