Khelix Privacy Policy

Who we are

Khelix (khelix.in) makes the Khelix app for shooting ranges and academies (“academies”) and for shooters. This page explains what the app keeps, where, and how you can delete it.

What the app keeps

• Your account: your name and mobile number. Passwords and PINs stay only on your phone, stored as a salted hash, never in plain text.
• The academy’s records, typed in by the academy: students’ names, mobile and WhatsApp numbers, parents’ names and numbers, date of birth, photos and documents (such as Aadhaar or a birth certificate), fees, payments and dues, attendance, scores, stock and staff. Admission forms and receipts the academy prints or saves as PDF are made on the phone.
• Shooter side (for a shooter’s own phone): the shooter’s name, events and NRAI shooter ID, their own match and practice scores, their academy fee (amount and joining date, to show pending months and remind them with a notification made by the phone itself), their own expenses (fees, pellets, cartridges, match entry fees, travel) and the documents they add (such as an NRAI ID card, Aadhaar or arms licence). These stay only on that phone: they are never sent to the Khelix cloud or anywhere else, and Profile → Delete all my shooter data removes them.
• Camera: used only when you choose “Take photo” for a student photo or document, or scan a QR code. The photo is kept like any other added file.
• Phone contacts: when you choose “Pick from phone contacts”, only the one name and number you pick are added. Khelix does not read your address book.
• Fingerprint or face unlock: checked by the phone itself; Khelix never receives it.
• Where: on the phone where they were entered. The data on the phone can be encrypted, and the app can be locked with a PIN.
• Cloud sync (optional, turned on by the academy owner): the academy’s records are copied to the Khelix cloud database, hosted by Supabase, so that the owner’s phone, the laptop and staff phones show the same data. Photo and document files stay on the phone that added them (on the laptop version, small files are kept with the record). Data travels encrypted (HTTPS), and only the people the owner has let in can read it.
• Staff login: the staff member’s name and mobile number, and a one-time code that only the owner sees. The code works for 30 minutes.
• Pending dues at another range: when both ranges use Cloud sync and the owner has not turned this off (Settings → Academy), another Khelix range that registers the same mobile number is told only that dues are pending here, with this range’s name, city and phone. Amounts and history are never shared.

What we do not do

• No ads.
• No selling or renting of your data.
• No tracking across other apps or websites, and no analytics.
• We do not read your messages: WhatsApp messages and SMS are sent by your phone’s own apps when you choose to send them.
• No microphone: the training timers only play sounds.

Other services the app uses

• Supabase: the cloud database for Cloud sync.
• Expo (EAS Update): app updates are downloaded from Expo’s servers, which see your IP address and the app version.
• NRAI (thenrai.in): the app reads NRAI’s public notices and championship results. When something new is posted, the app itself shows a notification on the phone; no Khelix server is involved.
• NRAI ID login (thenrai.org): opens NRAI’s own shooter portal in the browser. You log in with NRAI directly; Khelix never sees your NRAI e-mail or password.
• WhatsApp: only when you choose to send a message.

Children

The range side of the app is for academy owners and staff, who are adults. An academy may keep records about students who are children; the academy is responsible for having their parents’ consent.

How long data is kept

Records stay until the academy deletes them. The cloud copy is deleted when the owner resets the academy. Shooter-side data stays on the shooter’s phone until they delete it or remove the app.

Delete your account

• Staff: in the app, Profile → Delete my account. Your staff login is removed from the academy and from the Khelix cloud, and the academy’s data is deleted from your own phone.
• Owner: in the app, Settings → Data & privacy → Reset. This deletes the academy with all its records on the phone, in the Khelix cloud and on staff phones, together with your account.
• Shooter: in the app, Profile → Delete all my shooter data.
• Without the app: write to support@khelix.in from the mobile number or e-mail linked to the account. We delete the account and its cloud data within 30 days. More on the delete account page.

Your choices

• Export the academy’s data as an Excel file (Settings → Data & privacy).
• Turn Cloud sync on or off.
• Turn off telling other ranges about pending dues.
• On the Shooter side: delete all your shooter data at any time (Profile → Delete all my shooter data).

Contact

Questions about privacy: support@khelix.in

If this policy changes, we update this page and the date at the top.