This Privacy Policy explains how SpyderAI Technologies Private Limited, Kovilpatti, Tamil Nadu, India ("SpyderAI", "we", "us"), processes personal data when you use the Viyazhaa app, website and related services (the "Service"). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law. For the purposes of the DPDP Act, SpyderAI is the Data Fiduciary for account data. A Business (court, academy, gym or centre) that records information about its members in the Service decides why that information is recorded; we process it on the Business's behalf and on our own behalf only as described here.

1. Personal data we collect

You give us:

Account data: name, mobile number, email address (optional for Users), password (stored only as a one-way hash), city, state, and for Users age and gender.
Business data: business name, business phone and email, city, state, address, description, categories, and documents you email to us for verification.
Membership data: join requests, memberships, groups or batches, attendance, notes, diet and workout plans, measurements, results, homework, online class participation, and fees recorded by the Business.
Staff data: name, mobile number, role, access and salary records entered by a Business owner.

Created when you use the Service:

Login sessions, device and log information needed for security, and records of important actions (audit logs).
Payment data: for subscriptions, Razorpay order and payment identifiers and the amount; for online fees, the order and payment identifiers and the amount. We do not collect or store card numbers, UPI PINs or bank credentials — Razorpay processes them.

2. Why we use it (purpose)

We use personal data only to: create and secure your account and verify your mobile number; let Businesses and their members use the features of the Service; verify Businesses; run subscriptions, reminders and in-app notices; enable online fee payments to Businesses; provide support and respond to grievances; prevent fraud and misuse; and comply with law. We do not sell personal data and do not use it for third-party advertising.

3. Consent and legitimate uses

We process your personal data on the basis of your consent, given when you register and use the Service, and for the legitimate uses permitted by Section 7 of the DPDP Act (for example, where you voluntarily provide data for a specified purpose, or to comply with law). You may withdraw consent at any time by deactivating your account in Settings or by writing to support@spyderai.in. Withdrawal does not affect processing already done, and some features cannot work without the data they need.

Where a User is a child (under 18), the Service is used through a parent or lawful guardian, whose verifiable consent is required; we do not track children or target advertising at them.

4. Who we share it with

The Business you join sees the profile information you share with it and the records it keeps about your membership. Businesses you do not join see only what is public in Explore (business listings, not personal data of members).
Service providers who process data for us under contract: cloud hosting, SMS/email delivery, and Razorpay for payments.
Authorities, where required by law or to protect rights, safety and security.

Online fee payments are made to the Business's own Razorpay account; the Business is the merchant of record and receives the payment details Razorpay provides to merchants.

5. Retention and deletion

We keep personal data for as long as your account is active and as needed for the purposes above.
Deactivated accounts are deleted completely 30 days after deactivation, unless reactivated before then. Businesses that are not verified within 7 days of registration are removed automatically.
On deletion we erase or anonymise your personal data (name, contacts, profile). Records we are required to keep by law — for example payment, tax and audit records — are retained in anonymised or minimal form for the period the law requires and are never shown in the app again.

6. Your rights

Under the DPDP Act you have the right to:

access a summary of your personal data and the processing we do;
correct, complete or update your data (most fields can be edited in Settings; your name is locked — write to us to correct it);
erase your data (deactivate your account, or write to us);
nominate another person to exercise your rights in the event of death or incapacity;
grievance redressal — see section 8.

We respond to requests within the time the law requires. We may need to verify your identity first.

7. Security

We use reasonable security safeguards, including encrypted connections, hashed passwords, encrypted storage of payment-gateway tokens, tenant isolation of each Business's data and access controls. No system is completely secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

8. Grievance Officer

If you have a concern about how your personal data is handled, contact our Grievance Officer:

Grievance Officer SpyderAI Technologies Private Limited, Kovilpatti, Tamil Nadu, India Email: support@spyderai.in

We will acknowledge your grievance promptly and try to resolve it within the period prescribed by law. If you are not satisfied, you may approach the Data Protection Board of India.

9. Changes

We may update this Policy. The effective date above shows the latest version; for material changes we will notify you in the app.