1. About This Policy
1on1 Arena ("we", "our", "us") operates a skill-based competitive platform accessible via our mobile application (Android), website at 1on1arena.com, and related digital interfaces. Our platform enables users to create profiles, participate in challenges and tournaments, upload content, compete in city-based and national leaderboards, and engage with other users in skill-based competitions.
1on1 Arena is operated by [REGISTERED LEGAL ENTITY NAME — TO BE COMPLETED BEFORE LAUNCH], having its registered office at [REGISTERED ADDRESS — TO BE COMPLETED BEFORE LAUNCH] (the data fiduciary/controller for the purposes of this policy).
This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have regarding your data. By accessing or using the 1on1 Arena platform, you agree to the practices described in this policy.
This policy applies to all users of the 1on1 Arena mobile app, website, and any other digital interface or service operated by 1on1 Arena. It does not apply to third-party services that we link to or integrate with.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Platform Operations
- Creating and managing your account, authenticating your identity via phone OTP
- Enabling you to participate in challenges, tournaments, and competitions
- Processing your content submissions and displaying them to other users
- Calculating and displaying rankings, leaderboards, and performance scores
- Enabling city-based, regional, national, and global competition features
3.2 Personalization and Recommendations
- Tailoring your content feed based on your participation history, city, and interests
- Recommending challenges, tournaments, and other users to compete with
- Improving your discovery experience across skill categories
3.3 Safety and Platform Integrity
- Detecting and preventing fraud, cheating, manipulation of rankings or voting, and abuse
- Enforcing our Terms of Service and community guidelines
- Investigating reports and disputes
- Protecting users from harassment and harmful content
3.4 Communications
- Sending transactional messages such as OTP codes, account notifications, and challenge updates
- Notifying you of results, new challenges, rankings updates, and platform announcements
- Responding to your support requests or queries
3.5 Analytics and Improvement
- Analysing usage patterns to improve platform features, performance, and user experience
- Conducting internal research on how users engage with competitions and content
- Identifying and resolving technical issues
4. Public Information & User-Generated Content
Important: Much of what you do on 1on1 Arena is public by nature. When you participate in challenges and competitions, your submissions, rankings, username, city, and profile are visible to other users of the platform.
The following information is publicly visible by default on the platform:
- Your username and profile photo
- Your city (as selected by you)
- Your competition submissions (videos, images) that you upload for challenges
- Your rankings and scores on city, national, and global leaderboards
- Your challenge history and participation record
- Votes and engagement metrics on your submissions
By uploading content to the platform, you acknowledge and consent to that content being visible to other registered users and, in some cases, to the general public through shared links or featured content. You retain ownership of content you create, but you grant us a licence to display, distribute, and use it on the platform as described in our Terms of Service.
Do not upload content that you do not wish to be seen publicly. If you upload a video for a challenge, that video may be viewed by any user of the platform.
5. How We Share Your Information
We do not sell your personal information to third parties. We share your information only in the following circumstances:
5.1 With Other Users (Public Profile & Content)
As described above, your username, city, profile photo, rankings, and competition submissions are visible to other users of the platform as part of the core competition and leaderboard features.
5.2 With Service Providers
We share data with trusted third-party service providers who help us operate the platform:
- Google Firebase (Authentication, Firestore, Storage): Our primary backend infrastructure, used for authentication, database storage, and media file storage. Firebase is operated by Google LLC. Data may be processed on Google's servers globally.
- Cloud infrastructure providers: For hosting, content delivery, and platform operations.
- Analytics providers: For usage analytics and crash reporting to improve the app.
All service providers are contractually bound to use your data only for the purposes we specify and to maintain appropriate security measures.
5.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect our legal rights, protect your safety or the safety of others, or investigate fraud or security issues.
5.4 Business Transfers
If 1on1 Arena is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
5.5 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
6. Data Storage and Security
Your data is stored using Google Firebase, which provides industry-standard security measures including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security monitoring and vulnerability management
- Compliance with ISO 27001, SOC 1, SOC 2, and SOC 3 standards
Profile images and video submissions are stored in Firebase Storage with access controls that limit exposure to authorised users and systems.
While we implement strong security measures, no system is completely secure. We cannot guarantee the absolute security of your data and encourage you to use strong account practices and report any suspected security issues to [email protected].
Firebase services may process and store data on servers located globally, including outside India. See Section 11 on International Data Transfers for more information.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
- Account Data: Retained for the lifetime of your account, plus up to 3 years after account deletion for legal and dispute resolution purposes.
- Competition Content (Videos/Images): Retained while your account is active. Upon deletion request, content is removed from public visibility immediately and from our servers within 30 days, unless retention is required for an ongoing dispute or legal obligation.
- Rankings and Leaderboard Data: Historical ranking data may be retained in aggregate or anonymised form for analytical and platform integrity purposes even after account deletion.
- Log and Usage Data: Typically retained for up to 12 months for security and analytics purposes.
- Communications: Support correspondence retained for up to 2 years.
When data is no longer required, we delete it securely or anonymise it so it can no longer be linked to you.
8. Your Rights
You have the following rights with respect to your personal information. To exercise any of these rights, contact us at [email protected].
- Right of Access: You may request a copy of the personal information we hold about you.
- Right to Correction: You may update or correct inaccurate information through your account settings or by contacting us.
- Right to Deletion: You may request that we delete your account and personal data. We will process this within 30 days, subject to legal retention requirements.
- Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
- Right to Object: You may object to certain types of processing, including direct marketing.
- Right to Grievance Redressal: Under the Digital Personal Data Protection Act, 2023, you may raise a complaint with our Grievance Officer (see Section 16).
Some rights may be limited where data is necessary for competition integrity, legal compliance, or where retention is required by law. We will inform you if we are unable to fulfil a request and the reason for it.
9. Children's Privacy
1on1 Arena is intended for users who are at least 13 years of age. Certain features — including participation in competitions involving rewards, prizes, or payments — are available only to users who are 18 years of age or older.
We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will delete that information promptly.
Users between 13 and 18 years of age must have the consent of a parent or legal guardian to use the platform, in accordance with applicable law including the Digital Personal Data Protection Act, 2023.
10. Third-Party Services
Our platform integrates with and may link to third-party services. These services have their own privacy policies and we are not responsible for their data practices:
We recommend reviewing the privacy policies of any third-party services you interact with through our platform. We will update this list as we add new third-party integrations.
11. International Data Transfers
1on1 Arena is operated from India. However, our service providers — including Google Firebase — may store and process your data on servers located outside India, including in the United States and other countries.
When we transfer your personal data internationally, we ensure that appropriate safeguards are in place in accordance with applicable law, including the Digital Personal Data Protection Act, 2023, and we rely on contractual protections, standard clauses, or the security certifications of our service providers.
By using our platform, you acknowledge and consent to your data being transferred to and processed in countries outside India, subject to adequate protections as described above.
12. Indian Data Protection Compliance
We are committed to complying with applicable Indian data protection laws, including:
12.1 Information Technology Act, 2000 and IT (Amendment) Act, 2008
We comply with the provisions of the Information Technology Act, 2000, including obligations related to data protection and prevention of unauthorised access.
12.2 IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
We treat certain categories of information as Sensitive Personal Data or Information (SPDI) under these Rules, including passwords and biometric information where applicable. We maintain reasonable security practices as required.
12.3 Digital Personal Data Protection Act, 2023 (DPDPA)
We are preparing for full compliance with the DPDPA. Under this Act:
- We process personal data on the lawful basis of consent and for legitimate uses as defined under the Act
- We appoint a Grievance Officer to address user complaints and requests
- We give you the right to correction, deletion, and grievance redressal as described in Section 8
- We do not transfer personal data to countries notified as restricted under the Act
- We maintain records of processing activities as required
12.4 Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023 and applicable Indian law, you may contact our Grievance Officer for any privacy-related complaints or requests:
- Name: [GRIEVANCE OFFICER NAME — TO BE COMPLETED BEFORE LAUNCH]
- Designation: Grievance Officer, 1on1 Arena
- Email: [email protected]
- Subject Line: "Privacy Grievance — [Your Name]"
- Response Time: We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.
13. Cookies and Tracking
Our mobile app does not use browser cookies. The app may use local storage and device-level identifiers for session management and user preferences.
Our website (1on1arena.com) does not set any cookies and does not use any analytics, advertising, or third-party tracking technologies. It is a static informational site. We do not profile visitors, and no consent banner is required because no non-essential tracking takes place.
Fonts and other static assets used by the website are served from our own infrastructure rather than third-party content delivery networks, so loading the site does not share your data with external font or analytics providers.
If we introduce cookies or analytics on the website in the future, we will update this policy and, where required by law, request your consent before any non-essential tracking begins.
14. Skill-Based Platform Disclaimer
1on1 Arena is a purely skill-based competitive platform. All competitions, challenges, and rankings on this platform are determined solely by user skill, performance, and merit. This platform does not involve any games of chance, gambling, wagering, or any element of randomness in determining competition outcomes.
The collection and processing of user performance data, rankings, and competition history is solely for the purpose of operating skill-based competitions and leaderboards. No financial transactions or betting of any kind are facilitated on this platform in its current form.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Notify you via in-app notification or push notification
- In some cases, ask for your renewed consent
Your continued use of the platform after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.