Privacy Policy

Last updated: 14 October 2026 · This is a living document. Material changes will be posted on this page with an updated date.

This Privacy Policy explains how Stingrays Swimming School (Stingrays India) ("Stingrays", "we", "us", or "our"), collects, uses, stores, and protects personal data when you visit stingraysindia.in, enrol your child or yourself in our swim programmes in Chennai, use the Stingrays Quest mobile app, contact us on WhatsApp or by phone, or interact with our social media pages.

It is written in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. Under the DPDP Act, we are the Data Fiduciary for the personal data described here.

1. What personal data we collect

• Contact details: parent or guardian name, mobile number, email address, and area of residence.
• Swimmer details: child's name, age, swim stage, venue, and any medical or safety notes you choose to share.
• Booking and payment records: trial and class bookings, schedule, attendance, and fees paid.
• Progress records: stage progress and skills assessed and signed off by your child's coach.
• Stingrays Quest activity: skill cards, XP, badges, quiz results and missions in the app (see Section 4).
• Messages: what you send us on WhatsApp, by email, by phone or through our social media pages.
• Technical data: website analytics, app version and device type, a push-notification token, and server logs (IP address and timestamps).

2. Why we use it

• To answer enquiries and book trial classes and lessons.
• To run your child's classes: schedules, attendance, fees, and operational messages such as a cancelled session or a venue change.
• To keep swimmers safe: medical or safety notes help our coaches look after your child in the water.
• To show parents their child's progress in the Stingrays Quest app and let children see their own cards, XP and quizzes.
• To send promotional messages, only with your consent. Reply STOP on WhatsApp at any time to opt out.
• To improve our programmes using aggregated, anonymised statistics, and to meet our legal obligations.

3. Consent, including for children

• We process your personal data on the basis of your consent, given when you enquire or enrol, and for legitimate uses permitted by the DPDP Act, such as complying with law or responding to a medical emergency.
• Most of our swimmers are under 18. We process a child's personal data only with the consent of their parent or lawful guardian, who is the person who enrols the child with us.
• We do not track or monitor the behaviour of children for advertising, and we do not direct targeted advertising at children.
• You can withdraw consent at any time by messaging us. Withdrawing consent may mean we can no longer provide classes or app access, and does not affect processing already done.

4. The Stingrays Quest app

• Enrolled families only. Accounts are created by Stingrays; parents sign in with the mobile number registered with their venue. There is no public sign-up.
• For parents: attendance, class schedule, stage progress (Starfish to Stingray), coach-signed skills and venue notices.
• Kids Zone: children can view skill cards, XP, badges, water-safety quizzes and missions earned in their lessons. Children cannot type messages, upload photos, chat with anyone or share personal information in the app.
• Rewards: XP can be redeemed for Stingrays-branded gear through your venue. No payments are taken in the app and there are no in-app purchases.
• No advertising: the app shows no third-party ads and does not use advertising identifiers.
• Notifications: with your permission, the app sends class, progress and venue notices. Turn them off at any time in your phone's settings.

5. Who we share it with

We do not sell personal data. We share it only with:

• Coaches and venue partners delivering your classes, only as needed for safe coaching. For residents-only venues, this may include confirming residency with the community's management.
• Data Processors acting for us: hosting for our website, booking systems and the Stingrays Quest app; Google Workspace for email; and the AI service providers behind our WhatsApp assistant, which helps our team answer enquiries.
• Meta (WhatsApp, Facebook, Instagram): message content you send us on these platforms is processed by Meta under its own privacy policy.
• Apple and Google: to distribute the app and deliver notifications. They receive only the technical data needed, not progress records.
• Our group: Stingrays Sports (Pvt) Ltd in Sri Lanka helps run our systems and curriculum and may process data on our behalf. Aggregated, anonymised data may be used for group reporting.
• Authorities, where the law requires it, and then only the minimum necessary.

6. Cookies, the Meta Pixel and analytics

stingraysindia.in uses strictly necessary cookies, aggregated analytics, and the Meta Pixel, which measures whether our Facebook and Instagram ads lead to enquiries (for example, a tap on a WhatsApp button) and helps show our ads to interested adults. You can manage this in your Facebook ad preferences and by blocking third-party cookies in your browser. The Stingrays Quest app does not use the Meta Pixel or any advertising tracker.

7. How long we keep it

• Swimmer, progress and app records: while enrolled, plus 2 years after the final class, unless you ask us to delete them sooner.
• Stingrays Quest account and notification token: deleted within 30 days of an account deletion request.
• Payment records: for the period required by Indian tax and accounting law.
• Enquiry conversations: up to 2 years after the last message if you do not enrol.
• Server, website and app logs: 90 days, or longer where the law requires.

8. Security

We use encryption in transit (HTTPS) on the website and between the app and our servers, role-based access so coaches see only their own swimmers and parents only their own children, and audit logs on our internal systems. If we become aware of a personal data breach, we will inform affected people and the Data Protection Board of India as the DPDP Act requires.

9. Your rights

Under the DPDP Act, you (and a parent or guardian on behalf of a child) can:

• Ask for a summary of the personal data we hold and how we use it, and who we have shared it with.
• Ask us to correct, complete, update or erase it.
• Withdraw consent at any time.
• Nominate another person to exercise these rights if you die or become unable to.
• Raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.

Email info@stingraysindia.in with the subject "Data request". We respond as quickly as possible and within the time the DPDP rules allow.

10. Deleting your Stingrays Quest account

Accounts are managed by Stingrays, so deletion is handled by our team. Full steps are on our account deletion page: message us on WhatsApp at +91 72005 35360 or email info@stingraysindia.in from your registered number, and we delete the app account and your children's Quest profiles within 30 days. Payment records the law requires us to keep are retained for that period only.

11. Processing outside India

Some personal data is processed outside India: by our parent company in Singapore, our group company in Sri Lanka, and service providers such as Google, Meta and our hosting providers. We transfer only what is needed for the purposes above, use providers who protect it with encryption and access controls, and do not transfer data to any country the Government of India restricts under the DPDP Act.

12. Grievances and contact

We acknowledge grievances within 2 working days.

13. Changes to this policy

We may update this policy as our services or the law change. The "Last updated" date shows the latest version. Material changes will be announced on this website and, where they affect the app, in Stingrays Quest.