Privacy Policy
Last updated 3 November 2026
Effective date: 3 November 2026
Instring is made by Quantloop Technologies Private Limited (“Instring”, “we”, “us”), 20 Shubh Elegance, UGVCL Road, Nr DPS, Bopal, Ahmedabad, Gujarat 380058. This policy explains what personal data we handle when you use the Instring website (instring.co.in), the Instring app (app.instring.co.in and our Android and iPhone apps), and court booking.
We have written it in plain language. If anything is unclear, write to privacy@instring.co.in.
1. Who is responsible for your data
Instring is used in two different ways, and the person responsible for your data is different in each.
a) When you use Instring through an academy or coach. If you are a player, parent, coach or staff member of an academy (or a student of a solo coach) that uses Instring, that academy or coach decides what data is collected and why. Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), they are the Data Fiduciary and Instring is their Data Processor. We process this data only on their instructions and only to run the service for them.
For questions about this data, such as what your academy records about your child, contact your academy first. If they don’t respond, you can write to us and we will help.
b) When you deal with Instring directly. Instring is the Data Fiduciary for:
- academy owners and solo coaches who sign up for and pay for Instring,
- people who book a court on our website,
- visitors to our website,
- anyone who contacts our support.
2. What we collect
| Who | What we collect | Why |
|---|---|---|
| Academy owners and solo coaches | Name, mobile number, email, academy name and address, branch and court details, billing and GST details | To create and run your account, bill you, and support you |
| Coaches and staff (added by an academy) | Name, mobile, email, role, assigned branches and sessions, availability | So the academy can schedule and manage its team |
| Players (added by an academy or coach) | Name, date of birth (for age groups), sport, level, group, attendance, session notes, practice and match sheets, skill ratings, match results, goals, fees and payment records, photos or videos the coach uploads | So the academy can coach, track progress, run events and collect fees |
| Parents and guardians | Name, mobile, email, relationship to the player, consent records | To link you to your child, send updates and collect consent |
| People who book a court | Name, mobile number, booking details (venue, court, time, players, add-ons), ratings and reviews you write | To make and manage your booking, remind you, and let the venue know who is coming |
| Everyone who logs in | Login details (hashed password, one-time codes, or, if you choose “Continue with Google / Apple”, your name, email and profile photo from that account; we never see your Google or Apple password), device type, app version, push notification token, approximate location only if you tap “near me” | To keep your account secure, send notifications, and show nearby courts |
| Website visitors | Basic technical data: IP address, browser, pages visited, and spam protection checks | To keep the site working and secure |
| People who ask us to email a free-tool report or tell them when courts open | Only the email address (or, for court alerts, the mobile number) you type, with your consent, plus the tool’s result numbers or the city. We never ask for children’s details or your academy’s accounts. The calculators themselves run in your browser and send us nothing. | To email you the report, or tell you when courts open in your city |
We do not collect Aadhaar numbers, card numbers, or bank account numbers. When online payments are added, they will be handled by our payment partner. We will only see whether a payment succeeded.
3. Children’s data
Many Instring players are under 18. The DPDP Act treats anyone under 18 as a child. We take this seriously:
- Parent or guardian consent first. An academy must get verifiable consent from a parent or guardian before adding a child’s data. Instring has a consent step built in: the parent confirms with a one-time code sent to their own mobile or email. This is recorded with the date and time.
- Only what’s needed. We ask only for what coaching needs. Date of birth is used for age groups and can be hidden from other members.
- Kept private. A child’s date of birth, contact details, sheets and progress are visible only to the child’s own parent or guardian and the academy staff who need them. They are never shown to other players or parents.
- No tracking or advertising. We do not track children’s behaviour across sites, profile them for advertising, or show them ads. Instring has no ads.
- Parents stay in control. A parent can see, correct, download or ask to delete their child’s data at any time. They can do this from the app, through the academy, or by writing to us.
4. How we use data
We use personal data only to:
- provide Instring: scheduling, attendance, sheets, fees, events, messages and court booking;
- send messages you need, such as session reminders, fee receipts, booking confirmations and one-time codes, by SMS, email, WhatsApp or push notification;
- keep accounts safe, prevent fraud and spam, and fix problems;
- bill academies and coaches and meet tax and legal duties;
- improve Instring using aggregated or de-identified usage data;
- Instring AI (when your academy turns it on): draft short monthly progress notes, session plans for coaches and summaries for the academy, and answer questions you ask about your own data (or your child’s). See “Instring AI” below.
We do not sell personal data. We do not use it for advertising.
Instring AI
Instring AI is off unless your academy switches it on.
- Who provides it. Anthropic (the Claude models), through Anthropic’s API. Anthropic processes the requests in the United States.
- Exactly what we send. Only what the task needs: the player’s first name; that month’s sessions and attendance; the coach’s skill ratings; notes from practice and match sheets, with other people’s names removed; and match results, with opponents anonymised (“the opponent”). Session plans use the group’s sport, age band and size, and the coach’s recent sheet notes. Academy summaries use numbers only, with no one named.
- What we never send: contact details (phone, email, address), date of birth, other children’s names or data, or anyone’s ID in our systems.
- A coach reviews it first. Nothing written by AI reaches a family until a coach has reviewed and approved it. Approved notes are labelled “Written with AI, reviewed by Coach …”. Every AI answer is checked automatically before anyone sees it; anything that mentions health or treatment, legal or money matters, contact details, links, other people, or unsuitable words is held back: the coach writes that note instead, and Ask Instring politely declines. Anyone can tap “Report this” on AI content, and Instring reviews every report.
- Not medical advice. Instring AI never gives medical, health or diet advice. Training-load notes are called “Load & recovery” and only suggest when a lighter week may help. Please talk to a doctor about anything medical.
- Players under 18. Players under 18 only see AI content their coach has approved. They can’t use “Ask Instring”; a parent can use it for them. A player whose date of birth isn’t on record is treated as under 18.
- Parents can turn it off. A parent can turn Instring AI off for their child at any time in the app. Their child’s data is then never sent to it. A child can turn it off too, but only a parent can turn it back on.
- Training. By default, Anthropic does not use data sent through its API to train its models. Anthropic keeps API data for a limited time under its own policies, for example to keep its service safe.
We keep AI drafts and answers inside Instring like the rest of your academy data, and they are included when you download or delete your data.
5. Who we share it with
We share data only when needed:
- Your academy or coach, for data about their own members.
- Venues, for a court you book: your name, mobile number, booking time and number of players.
- Service providers who help us run Instring, under contracts that limit how they use the data:
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Servers, database and backups | Mumbai, India |
| MSG91 | One-time codes and SMS messages | India |
| Resend | Email delivery | Outside India |
| Google Firebase / Apple Push Notification service | Push notifications to phones | Outside India |
| Google / Apple sign-in, only if you use it | Logging you in | Outside India |
| Cloudflare | Spam and bot protection on forms | Outside India |
| Anthropic (Claude) | Instring AI, only if your academy turns it on: drafting progress notes and session plans, and answering questions about your own data | United States |
| Razorpay, when online payments start | Processing payments | India |
- The law. We will share data if a court, government authority or law requires it, or to protect people’s safety.
Some providers are outside India. We transfer data only as allowed under Indian law, and only what each service needs.
6. How long we keep data
- While your account is active, we keep your data so the service works.
- When an academy or coach closes their account, they get 30 days to download their data. We then delete it from our systems within 90 days. Backups roll over within 30 days.
- Inactive accounts: if an account has not been used for 1 year, we may delete it. We will warn you at least 48 hours before.
- Court bookings: kept for 3 years for support and disputes, then deleted or anonymised.
- Free-tool report requests: deleted after 12 months. “Notify me” requests for a city: deleted after 3 years, or sooner if you ask. Free-tool usage is counted only as anonymous daily totals.
- Invoices and tax records: kept for as long as tax law requires, currently up to 8 years.
- Security logs: kept for at least one year, as the DPDP Rules require.
- To prevent repeat free trials, after an account is deleted we keep only a one-way scrambled (hashed) copy of the owner’s email and mobile number. It cannot be turned back into the original.
- Audit and privacy-request records (who did what, and how we handled your request) are kept for 3 years to show we followed the law.
7. Keeping data safe
We protect data with:
- encryption in transit (HTTPS) and at rest;
- each academy’s data kept separate from every other academy’s;
- role-based access, so a coach sees only what their role allows;
- hashed passwords, one-time codes with rate limits, and optional fingerprint or Face ID lock in the app;
- daily backups, access logs and regular updates.
No system is perfect. If a breach affects your data, we will tell you without delay, and tell the Data Protection Board of India and your academy as the law requires. We will also explain what happened and what you can do.
8. Your rights
Under the DPDP Act, you can:
- see what personal data we hold about you and how it is used;
- correct or update it;
- delete it, unless we must keep it by law;
- withdraw consent at any time. This does not affect anything done before you withdrew, and some features may stop working;
- nominate someone to exercise your rights if you die or become unable to;
- complain to us, and then to the Data Protection Board of India if you are not satisfied.
Most of this you can do in the app (Profile → Privacy). For anything else, email privacy@instring.co.in from your registered email, or contact the Grievance Officer below. If the data belongs to an academy, we will pass your request to them and help them answer it.
9. Cookies
The website uses only the cookies it needs to work: keeping you logged in, remembering your language and city, and spam protection. We do not use advertising cookies. If we add analytics, it will be privacy-friendly. We will update this section, and ask for consent where needed.
10. Grievance Officer
Vinish Kumar Lonhare Quantloop Technologies Private Limited, 20 Shubh Elegance, UGVCL Road, Nr DPS, Bopal, Ahmedabad, Gujarat 380058 Email: grievance@instring.co.in · Phone: +91 9016388002
We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.
11. Changes to this policy
If we make an important change, we will tell you in the app or by email before it takes effect. The date at the top shows when this policy was last updated.
Privacy requests and grievances
To see, correct, export or delete your data, or to raise a grievance, use our privacy request form.