AAROORA Technologies (“we”, “us”) operates the Leli mobile app and the leli.app website. This policy explains what personal data we collect, why, who we share it with, and the choices you have. By using Leli you agree to it.
1. What we collect
- Account. Your mobile number. You sign in with a one-time code sent to it by SMS — there are no passwords, and no Google, Apple or email sign-in.
- Profile. Your name, the city or place you set, the sports you play, and an optional profile photo.
- Location. If you allow it, your device location while the app is open, used to set your place and show tournaments and matches near you. You can deny the permission and pick a city by hand instead.
- People you add. When you add someone to a match line-up, a team or a tournament squad, we store the name and mobile number you enter for them — including people who don’t use Leli yet — so the match can be scored and they can claim their record when they join. We keep a list of the people you’ve added so you can pick them again.
- Device contacts. Only when you choose to add someone from your contacts: the system contact picker opens and the app receives that one contact. We never read or upload your whole address book. (On Android the picker requires the Contacts permission; on iPhone it doesn’t.)
- Photos and camera. Photos you choose to upload (profile, team, tournament banners, sponsor logos), and the camera when you scan a team QR code or take a photo.
- Registration details and documents. When a tournament asks for them: the answers to the organizer’s questions, and documents such as an ID, age proof, medical certificate, photo or signed waiver.
- Activity. Tournaments you create or join, matches you score or play in, ball-by-ball and point-by-point scoring events, results, rank points and the history behind them.
- Purchases. When you buy something in the app (for example, publishing a tournament, a rated match, or sponsor display), the store confirms the purchase to us and we keep a record of what you bought. Payment is handled entirely by Google Play or the App Store — we never see your card, UPI or bank details.
- Website. leli.app uses Vercel Web Analytics to count page views and clicks on download buttons. It sets no cookies and doesn’t identify you. The website has no sign-in.
- Messages to us. If you contact us by email or WhatsApp, we receive your email address or WhatsApp number and what you send, and use them only to reply and help.
2. Why we use it
- Run the service: sign you in, show tournaments and matches near you, run registrations, fixtures and live scoring.
- Keep records correct: attribute runs, goals and points to the right player, compute rank points, and let people claim matches they were added to.
- Keep things fair and safe: review tournaments before they go public, and investigate abuse, fake scores or fraud.
- Verify purchases with the store and unlock what you bought.
- Answer support requests.
We don’t sell your personal data and we don’t use it for third-party advertising.
3. What other people can see
- In the app: your name, photo, city, sports, teams, match stats and rank are visible to other Leli users.
- Organizers of a tournament you register for see your registration answers and any documents you upload for it.
- On leli.app and in share images: a public tournament’s details, its organizer’s name, and the names, photos and cities of teams in it; a shared match shows team names and the score. Phone numbers are never shown publicly.
4. Who we share it with
Only the service providers we need to run Leli:
- Supabase — database, sign-in and file storage.
- WhatsApp (Meta) — carries the messages you send us on WhatsApp.
- MSG91 — sends your sign-in code by SMS (your mobile number).
- Google — maps and place search when you set a location or venue; Google Play for purchases on Android.
- Apple — App Store purchases on iPhone.
- Expo — delivers app updates.
- Vercel — hosts leli.app and its share pages, and provides its analytics.
- Razorpay — only for payments made on leli.app before the website stopped taking payments.
- Law enforcement — only when required by a valid legal order.
5. How long we keep it
- Your account and profile: while your account is active. Deleting your account removes them immediately — see Delete your account.
- Matches, results and tournaments you took part in: kept after deletion with your name replaced by “Deleted user”, so other players’ records stay correct.
- Purchase records: kept as long as tax and accounting law requires, no longer linked to your identity after deletion.
- Registration documents and your profile photos: deleted with your account. Photos you added to a team or tournament stay with that team or tournament.
6. Your choices and rights
- Edit your name, photo, place and sports in the app at any time.
- Remove people from your saved list, and deny or revoke location, contacts, camera and photo permissions in your phone’s settings.
- Delete your account in the app (You → Delete account), or see Delete your account for other ways.
- Ask for a copy of your data, a correction, or removal of something specific (for example, a number someone else added for you) by emailing hello@aaroora.com.
7. Security
There are no passwords to leak — sign-in is by one-time code. Traffic is encrypted in transit (HTTPS) and data is encrypted at rest by our hosting providers. Database access rules limit each account to what it is allowed to see, registration documents are stored privately, and admin actions are logged.
8. Changes
We’ll update this page when our practices change and revise the “Last updated” date. For material changes we’ll tell you in the app before they take effect.
9. Contact
Questions or requests? Email hello@aaroora.com.