Privacy Policy

Nymbo is a mobile app for booking sports grounds and courts. This policy describes the personal information the app collects, why it is collected, who it is shared with, and the choices you have. It covers the Nymbo Android app and the Nymbo API at api.nymbo.co.

Information we collect

You give us this directly when you use the app:

• Mobile number — required to create an account and sign in. We send a one-time code to it.
• Name, email address and date of birth — optional, from your profile. Date of birth is used to confirm you are 18 or over.
• Profile photo — optional, if you upload one.
• Delivery and billing addresses — if you save them, including the postcode and the map coordinates of the address.

The app also records, as a result of using it:

• Your bookings — venue, court, sport, date, time and amount.
• Payment records — the payment reference, amount and status. Card and UPI details are entered inside Razorpay's own checkout and are never seen or stored by Nymbo.
• Device notification token — so we can send you booking confirmations and reminders.
• Approximate location — only if you grant location permission, and only to show grounds near you.

Why we use it

To create and secure your account, show you available courts, take and confirm bookings, process payments, send booking confirmations and service messages, respond to support requests, and detect misuse of the service.

We do not use your information for advertising, and we do not sell it.

Who we share it with

We share only what each provider needs to do its job:

• Razorpay — payment processing. Receives the booking amount and your contact details to complete a transaction.
• 2Factor — delivers one-time sign-in codes by SMS. Receives your mobile number.
• Cloudinary — stores images you upload, such as a profile photo.
• MongoDB Atlas — hosts the database holding your account and bookings.
• Google — delivers email we send you, such as verification messages.
• Venue operators — receive the booking details needed to honour your reservation, including your name and booking time.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Where it is stored

Account and booking data is stored on servers in India. Some providers listed above may process data outside India under their own terms.

How long we keep it

Your account information is kept while your account is active. Booking and payment records are kept for as long as tax and accounting rules require, normally eight years, after which they are deleted or anonymised.

Your rights

You can access and correct your profile information from inside the app at any time. You can also ask us to delete your account and the personal information attached to it, or to send you a copy of it, by writing to the address below. We will respond within 30 days.

Deleting your account does not remove booking and payment records we are legally required to retain, but those records are detached from your profile.

Security

Traffic between the app and our servers is encrypted with TLS. Passwords, where used, are stored hashed and never in readable form. Access to the production database is restricted. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify affected users of a breach that puts their information at risk.

Children

Nymbo is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, write to us and we will delete it.

Changes

If this policy changes we will update this page and change the date at the top. Significant changes will also be announced in the app.

Contact