Last updated: June 9, 2026
AAROORA Technologies (“we”, “us”) operates the leli mobile and web apps. This policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. By using leli you agree to the terms below.
1. What we collect
- Account. Email address (from Sign in with Google or Sign in with Apple) and the OAuth subject identifier needed to log you back in.
- Profile. Display name, optional avatar, preferred sports, home city, and an optional phone number used for referral links.
- Location. Approximate device location when you open the discover screen, so we can rank nearby grounds. You can deny the permission — distance ranking turns off, everything else still works.
- Contacts. When (and only when) you tap “Invite friends” we read your device contacts to flag the ones already on leli. Phone numbers are normalized in memory and matched against existing accounts; we do not upload your contact book.
- Uploads. Photos and documents you upload (ground photos, profile avatar, govt ID or medical certificates for tournament registration) are stored in Supabase Storage under buckets scoped to your account.
- Activity. Bookings, match results, scoring events, ratings, missions, referrals, and audit trails — all required to operate the service.
- Push tokens. When you grant notification permission we store the Expo push token your device returns so we can send you booking reminders, match invites, and payout notifications.
2. Why we use it
- Run the service: authenticate, show nearby grounds, take bookings, run matches, pay owners.
- Keep play fair: compute and update your skill rating, enforce eligibility on tournament entry, run the moderation queue.
- Reach you: booking and match reminders, payout confirmations, support replies, and (optionally) marketing updates you opt into.
- Keep things safe: detect fraud, abuse, refund disputes, and code-of-conduct violations.
3. Who we share it with
We do not sell your personal data. We share data only with the processors required to run leli:
- Supabase — database, authentication, storage, realtime.
- Vercel — web hosting (landing page, admin console, webhooks, cron).
- Expo — push notification delivery.
- Google / Apple — sign-in identity verification.
- Law enforcement — only when compelled by a valid legal order.
4. Where it’s stored
Primary storage is in Supabase’s Mumbai (ap-south-1) region. Backups may be replicated to additional regions for disaster recovery.
5. How long we keep it
- Account and profile: as long as your account is active. Deletion is immediate — see Delete your account for what happens.
- Ratings, match results, and tournament participation: retained after deletion with your identity replaced by “Deleted user”, so opponents’ and teammates’ records stay correct.
- Financial records (payments, payouts, audit log): seven years, to satisfy Indian tax and accounting requirements.
- Push tokens: until the device unregisters or a send returns a permanent error.
- Uploaded documents (govt ID, medical certs): for the lifetime of the tournament plus one year.
6. Your rights
You can delete your account from inside the app (You → Delete account) or by emailing hello@aaroora.com. Deletion is immediate and permanent. See Delete your account for exactly what is removed and what is retained (anonymised) to meet Indian tax and accounting requirements.
7. Children
leli is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has signed up, email us and we will delete the account.
8. Security
Passwords are not stored — sign-in uses Google or Apple OAuth. All traffic is encrypted in transit (HTTPS). Data at rest is encrypted by our cloud providers. Row-level security on the database enforces that you can only read and write your own rows; admin actions are logged immutably.
9. Changes
We’ll update this page when our practices change and revise the “Last updated” date. For material changes we’ll notify you in-app before they take effect.
10. Contact
Questions or requests? Email hello@aaroora.com.