HomeResources · Privacy PolicySign in
Grass2Glory · Resources · Privacy Policy

PRIVACY POLICY

How Grass2Glory collects, uses, and protects your personal data — aligned with the Digital Personal Data Protection Act, 2023.

Create account Sign in
DPDP Act 2023Last Updated: 01 Jul 2025Version 1.0

1. Introduction

Grass2Glory Technologies Pvt. Ltd. operates the Grass2Glory Athlete Potential Intelligence Platform ('Platform'). This Privacy Policy explains how we collect, use, and protect personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India and applicable rules thereunder. By using our Platform, you (Data Principal) consent to the practices described herein.

2. Information We Collect — Personal Information

We collect the following personal data: (a) Identity: Full name, date of birth, gender, school or institution name, sport discipline, athlete ID number. (b) Contact: Email address and phone number — collected for coaches and school administrators only, not for athletes. (c) Institutional: School registration number, district, state, board affiliation, sport program names.

3. Information We Collect — Performance Data

We collect results from the Grass2Glory battery: sit-and-reach, standing vertical jump (including the standing and jump reaches it is measured from), 30 m flying sprint, the standard T-test (including both timed runs), 60-second strict pull-ups, 60-second sit-ups, 60-second push-ups, and the Cooper 12-minute run. For athletics athletes we also collect contested event results. Each measurement is stored with the date, the recording method or protocol used, how long a timed set ran and why it ended, and the venue and conditions where given. These are used to compute the Performance Index and training recommendations. Results recorded under protocols an earlier benchmark edition used — the 4x10 m shuttle run, untimed pull-ups and push-ups, and the flexed-arm hang — are retained and still shown to the athlete, but are no longer scored.

4. Information We Collect — Body Measurements

We collect height and weight, and from them compute body mass index and, for athletes within the growth reference's range, a BMI-for-age z-score and screening flag. This is health data under the DPDP Act and is treated as such. It is shown as context with its reference stated; it is never scored, never ranked, and never part of a training plan or a performance judgement.

5. Information We Collect — Device Information

We collect operating system version and request timestamps for crash diagnostics. No microphone, camera, or location data is collected.

6. Cookies & Local Storage

The web dashboard uses session cookies for authentication. We do not use third-party advertising cookies and we do not run third-party analytics.

7. Data Usage

Personal data is used to: (a) Compute and display the Performance Index and per-test benchmark results; (b) Generate training recommendations; (c) Populate role-appropriate dashboards; (d) Produce performance reports; (e) Enable leaderboard rankings.

8. Third-Party Services

The Platform is hosted on our own managed infrastructure under a DPDP-compliant data processing agreement. No personal data is shared with advertising networks, data brokers, or marketing platforms.

9. Data Retention

Athlete performance data is retained for 5 years from last active test session, or until consent is withdrawn — whichever is earlier. On expiry or withdrawal, data is anonymised or deleted within 30 days. Coach and admin contact data is retained for 2 years post account closure.

10. User Rights

Under the DPDP Act 2023, you have the right to: (a) Access — receive a copy of your personal data; (b) Correction — correct inaccurate or incomplete data; (c) Erasure — request deletion when no longer required; (d) Grievance — lodge a complaint with our Data Protection Officer within 48 hours; (e) Nomination — nominate a person to exercise rights on your behalf; (f) Consent withdrawal — revoke consent at any time, triggering anonymisation within 30 days.

11. Children's Privacy

Since our platform primarily serves school-age athletes (under 18), all athlete data processing requires verifiable parental or guardian consent as the legal basis under the DPDP Act. Schools collect and maintain these consent records as intermediaries on behalf of Grass2Glory. No athlete data is processed without recorded consent. We do not collect more data from minor athletes than necessary for the stated purposes.

12. Contact Information

Data Protection Officer: info@grass2glory.com | Grievance Officer: info@grass2glory.com | Response time: 48 hours | Grass2Glory Technologies Pvt. Ltd., New Delhi, India. To exercise any of your rights listed above, email the Data Protection Officer with your athlete ID or registered email address.

Grass2Glory Technologies Pvt. Ltd. · CIN: U74999DL2025PTC000001 · Effective 01 July 2025

READY TO GET STARTED?

Sign up and record your first session. Nobody has to approve it.

Create accountSign in