Privacy Policy

This Privacy Policy explains how BTechnoid, operating the FlexNation brand (“FlexNation”, “we”, “us”, or “our”), collects, uses, shares, stores, and protects personal information when you access or use flexnation.co and related services (the “Platform”).

Where we decide why and how personal data is processed, FlexNation acts as the data fiduciary for that processing. Event organizers, federations, promoters, or partners may separately act as data fiduciaries for event-day operations, eligibility review, judging, venue access, federation compliance, or their own communications.

Account and identity information.

• Name, email address, phone number, login method, account role, and authentication details.
• Date of birth, gender, city, state, country, gym affiliation, and profile details you choose to provide.
• For organizers or admins, business, federation, event, contact, and role-related information.

Athlete and event information.

• Height, weight, selected event categories, registrations, payment status, approval status, receipts, certificates, and event participation records.
• Profile photos, pose photos, winner media, event media, uploaded proofs, and other content you submit.

Payment and transaction information.

• Payment amount, order ID, payment ID, receipt token, payment status, settlement status, and related transaction references.
• We do not store your full card number, CVV, UPI PIN, or sensitive payment credentials. These are handled by payment partners such as Razorpay.

Usage and device information.

• IP address, browser type, device information, operating system, referral source, page visits, timestamps, clicks, and approximate location inferred from device or network data.
• Cookies, session identifiers, analytics events, and similar technologies used for authentication, security, preferences, and platform performance.

• To create, authenticate, secure, and manage accounts.
• To operate athlete profiles, event listings, category selection, registration flows, payment status, receipts, notifications, and organizer dashboards.
• To help organizers verify registrations, category eligibility, athlete identity, age divisions, gender divisions, height classes, weight classes, and event participation details.
• To process payments, reconcile transactions, support settlements, maintain records, detect abuse, and prevent fraud.
• To send transactional communications such as OTPs, login alerts, registration confirmations, receipts, approval or rejection updates, schedule changes, and support replies.
• To send product, event, or marketing communications where permitted. You may opt out of non-essential communications.
• To improve, debug, personalize, measure, and protect the Platform.
• To comply with legal, tax, accounting, regulatory, law-enforcement, and dispute-resolution obligations.

We process personal information only for lawful and specific purposes connected with the Platform, including account access, event registration, payment processing, organizer review, support, security, legal compliance, and product improvement.

• For account, registration, checkout, payment, security, and support features, the requested information is required to provide the relevant service.
• Where a feature needs optional information or optional marketing communication, we will provide a choice where required and you may opt out or withdraw that optional consent.
• For Google or other social login, we receive only the account details made available by that provider for login, such as name, email address, profile image, and login identifier.
• You may withdraw consent or exercise privacy rights by using available account controls or by contacting us at the email listed in this Policy. Withdrawal may affect features that need the relevant information to work.
• We may maintain consent, notice, and privacy-request records, including timestamps, account identifiers, source, and policy version, for compliance, audit, fraud prevention, and dispute handling.

We share information only as needed to operate, secure, improve, or comply with obligations related to the Platform.

• Event organizers and federations: athlete and registration details needed to review, verify, manage, and conduct the event.
• Payment partners: transaction information needed to process payments, receipts, settlements, disputes, and compliance checks.
• Service providers: hosting, storage, email, analytics, error monitoring, security, customer support, communication, and operational tooling providers.
• Authorities or legal parties: where required by law, court order, legal process, safety concerns, fraud prevention, or protection of our rights.
• Business transfers: if FlexNation or BTechnoid is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction.

We do not sell your personal information to advertisers.

Some information may be visible to other users, organizers, admins, or the public depending on the feature. This may include athlete name, city, gym, approved registrations, event results, spotlight features, public profile details, gallery media, and published winner information.

Organizer dashboards may show information needed to manage events, including athlete profile details, selected categories, payment status, contact details, and registration status.

We use cookies and similar technologies for authentication, session management, fraud prevention, security, saved preferences, analytics, performance measurement, and product improvement.

You may control cookies through your browser settings, but disabling essential cookies may affect login, registration, checkout, and dashboard functionality.

• We use reasonable technical and organizational safeguards to protect personal information.
• Passwords are protected using standard hashing practices.
• Authentication cookies are configured with security protections such as HttpOnly where applicable.
• Payment credentials are handled by payment partners and are not stored in full on FlexNation servers.
• Where appropriate, we use access controls, logging, monitoring, backups, and vendor safeguards to reduce the risk of unauthorized access or misuse.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect the Platform and respond to security issues responsibly.

If we become aware of a personal data breach, we will assess the incident, mitigate risk, keep appropriate records, and notify affected users and the Data Protection Board of India where required by applicable law.

We retain personal information for as long as necessary to provide the Platform, maintain your account, manage registrations, operate organizer dashboards, preserve transaction records, resolve disputes, prevent abuse, comply with law, and enforce our terms.

Some records, including payment, invoice, settlement, audit, tax, support, and compliance records, may be retained even after account deletion where required or permitted by law.

Security logs, transaction logs, and processing records may be retained for at least the minimum period required under applicable law, and longer where needed for security, fraud prevention, tax, accounting, legal claims, or dispute handling. When retention is no longer required, we delete, anonymize, or restrict the information using reasonable measures.

• You may update most profile and account information from your account or profile pages.
• You may request access to a summary of your personal information and how it is being processed.
• You may request correction, completion, updating, deletion, or restriction of certain personal information.
• You may withdraw consent for optional processing, including non-essential marketing communications.
• You may nominate another individual to exercise your rights after death or incapacity, as permitted by applicable law.
• You may opt out of non-essential marketing communications using the unsubscribe or preference options provided where available.
• Some requests may be limited by legal, security, fraud-prevention, dispute, tax, accounting, or event-record obligations.

To make a privacy request, email us from your registered email address or provide enough information for us to verify your identity. We aim to respond to privacy requests and grievances within 90 days or any shorter period required by applicable law.

The Platform is not intended for unsupervised use by children. An individual under 18 may use the Platform or register for an event only with verifiable consent and supervision of a parent or legal guardian, and only where the applicable event rules allow such participation.

We do not knowingly use children's personal information for targeted advertising or behavioral tracking. If you believe a child has provided personal information without appropriate consent, please contact us so we can review, restrict, correct, or delete the information as appropriate.

The Platform may contain links to third-party websites or services, including payment gateways, organizer sites, social platforms, maps, or federation pages. Their privacy practices are governed by their own policies, not this Privacy Policy.

We may use service providers for hosting, storage, payment processing, email, SMS or WhatsApp communication, analytics, performance monitoring, error monitoring, security, customer support, social login, and operational tools. These providers may process or store personal information in India or other countries where they or their sub-processors operate, subject to applicable law and contractual safeguards.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Your continued use of the Platform after an update means you accept the revised policy.

Where a change materially expands the purpose of processing or requires fresh consent under applicable law, we will provide an appropriate notice and seek consent before applying that change to the relevant processing.

For privacy questions, data requests, consent withdrawal, nomination requests, or grievance-related communication, write to FlexNation Privacy & Grievance Officer at support@flexnation.co. Use the subject line “DPDP Privacy Request” where possible. You can also reach us through the Contact page.

We may ask for account identifiers such as your registered email address or mobile number to verify and process your request. If you are not satisfied with our response, you may use remedies available under applicable law.