Privacy Policy

Information we collect

• •Account and venue information — account email, owner or staff name, venue name, Firebase authentication identifier, role, subscription status, and access settings.
• •Customer and child information — parent or customer name, child name, phone number, membership information, visit history, and notes entered by the venue.
• •Sessions, bookings, and transactions — check-in and checkout times, booked or extended duration, party booking details, items, discounts, amounts, and payment method. We do not collect full payment-card numbers, UPI PINs, Aadhaar numbers, or government identity documents.
• •WhatsApp information — sender and recipient phone numbers, WhatsApp profile name when supplied by Meta, message text, button or list replies, template name and parameters, message identifiers, timestamps, consent or opt-out status and history, and sent, delivered, read, failed, or skipped status. For media messages, PlayTrack currently records the media type (for example, "Image received") but does not download or store the media file.
• •Support and technical information — information provided in support requests and limited operational logs needed to diagnose errors, secure the service, and prevent abuse.

How we use information

• •Provide authentication, venue administration, check-in, session timing, memberships, bookings, billing records, receipts, reports, and customer support.
• •Send staff-initiated WhatsApp templates, receive parent replies, display conversations to authorised venue staff, update message status, and carry out a selected session-extension action.
• •Process subscriptions, send service emails, maintain audit records, protect accounts, investigate failures, and comply with legal obligations.
• •Improve reliability and usability using service data. We do not use WhatsApp message content or customer data for advertising, behavioural profiling, or sale to data brokers.

WhatsApp and Meta

PlayTrack uses the WhatsApp Business Platform supplied by Meta. When authorised venue staff send a WhatsApp message, PlayTrack provides Meta with the recipient phone number, the approved template and its parameters, and technical identifiers needed to deliver the message. Meta sends PlayTrack webhook events containing replies and delivery information. PlayTrack verifies webhook signatures before processing those events.

Meta processes information under its own terms and privacy policy. You can review the Meta Privacy Policy and WhatsApp Privacy Policy. A parent can stop future venue messages by replying STOP. They can later reply START to reactivate service updates, contact the venue or PlayTrack, or block the business using WhatsApp's controls.

Children's information

PlayTrack is a business tool and does not provide accounts directly to children. A venue may record a child's name and visit information so it can manage a session or membership. The venue must obtain permission from the child's parent or lawful guardian where required. We do not knowingly use children's information for advertising or contact children directly.

Service providers and disclosures

We disclose only the information reasonably necessary to operate PlayTrack:

• •Google Firebase and Google Cloud for authentication, database storage, hosting, server functions, logs, and security.
• •Meta and WhatsApp for business-message delivery, replies, and message-status webhooks.
• •Razorpay for PlayTrack subscription and payment processing. Razorpay handles payment credentials under its own privacy terms.
• •Resend for transactional service emails, such as welcome emails.
• •Authorities or professional advisers when required by law or reasonably necessary to protect users, the service, or legal rights.

We do not sell or rent personal data and do not share it with third-party advertisers.

Storage, security, and international processing

PlayTrack uses Google Firebase and Google Cloud infrastructure. Service providers may process information in India or other countries where they operate. We use access controls, venue data separation, server-side secrets, signed-webhook verification, and provider security controls to protect information. No online system is completely secure, so we cannot promise absolute security.

Venue owners control access to their staff accounts and operator credentials. They should use strong account passwords, restrict staff access, and promptly remove access that is no longer needed.

Retention

• •WhatsApp inbox messages, conversation summaries, and send logs are scheduled for deletion after 90 days.
• •Venue, session, booking, membership, audit, and transaction records are retained while the venue account is active and afterwards only as reasonably needed for deletion requests, disputes, security, accounting, or legal obligations.
• •Account-deletion requests are processed within 30 days after we verify the request, except for records we must retain by law. If residual copies remain in a service provider's backups, they may persist until the provider's ordinary replacement cycle and are not used for active business purposes.

Your choices and rights

Depending on your relationship with PlayTrack and applicable law, you may request access, correction, deletion, restriction, or withdrawal of consent. Parents and customers may make a request through the venue that collected their information or contact PlayTrack directly. We may ask for information needed to verify identity and locate the relevant venue records.

See our public Data Deletion Instructions for the request process. We aim to acknowledge privacy requests within seven business days and complete verified deletion requests within 30 days.

Browser storage and analytics

PlayTrack uses essential browser storage for authentication, interface preferences, and app operation. We do not currently use advertising cookies, the Meta Pixel, or third-party behavioural advertising trackers on the PlayTrack website.

Changes to this policy

We may update this policy when PlayTrack, its providers, or applicable requirements change. The effective date above will be revised, and material changes may also be communicated by email or an in-app notice.