Privacy Policy

PakkaPass is operated by:

For privacy-related questions, requests, or complaints, please contact us using the details above.

We collect only the information reasonably necessary to provide, maintain, secure, and improve our Services.

2.1 Information You Provide

When you create or use a PakkaPass account, we may collect:

Full name

Email address

Mobile phone number

Profile photograph, if you choose to upload one

Login and authentication information

Education board

Class/grade/standard

Academic year

Branch/stream, where applicable

School, college, or institution name

State

District

City

Parent/guardian name

Parent/guardian mobile number

Parent/guardian email address

Information required to establish or manage the parent-student relationship

Subjects and topics studied

Chapters and topics completed

Study duration

Study sessions

Study streaks

Academic progress

Practice activity

Video/content interaction

Content ratings and reviews

Supplementary or supply-subject subscriptions

Support requests

Messages and communications

Feedback

Information you provide while resolving an issue

2.2 LAWFUL BASIS FOR PROCESSING

PakkaPass processes personal data only for lawful purposes and only to the extent reasonably necessary for the purposes described in this Privacy Policy.

with the consent of the Data Principal;

where the personal data has been voluntarily provided for a specified purpose and processing is permitted under applicable law;

for providing, administering and maintaining the Services requested by the user;

for processing subscriptions, payments and related transactions;

for complying with applicable legal, regulatory, tax, accounting or governmental requirements;

for maintaining security, preventing fraud, abuse and unauthorized access;

for responding to lawful requests, court orders or other legal processes;

for other purposes expressly permitted under applicable law.

Where consent is the basis for processing, PakkaPass will seek consent through a clear, informed and affirmative mechanism and will provide an appropriate mechanism for withdrawal of consent.

Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal and may affect the availability of features or Services where the relevant processing is necessary for providing those Services.

When you use PakkaPass, certain technical and usage information may be collected automatically.

This may include:

Device manufacturer

Device model

Operating system and version

IP address

Network information

Application/session information

Date and time of activity

Error and diagnostic information

Login timestamps

Security and audit logs

Notification delivery and read status

We use this information primarily to operate the application, maintain security, diagnose technical problems, and improve reliability.

3.1 COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES

PakkaPass and its authorised service providers may use cookies, software development kits (SDKs), local storage, device identifiers and similar technologies, where applicable, to operate the Services, maintain sessions, remember preferences, understand usage, diagnose technical problems, improve performance and maintain security.

Depending on the technology used, these tools may collect information such as device information, application usage, session information, diagnostic information and interaction with features.

Where applicable, PakkaPass will provide appropriate controls or disclosures concerning technologies that require user consent under applicable law.

PakkaPass does not use children's personal data for targeted behavioural advertising.

PakkaPass may use One-Time Passwords (OTPs) for account registration and login.

When an OTP is requested, we may process your mobile number or email address for the purpose of:

Sending the OTP

Verifying your identity

Completing registration or login

Preventing unauthorized access

Detecting suspicious or abusive activity

OTPs are temporary authentication credentials and should not be shared with anyone.

PakkaPass may allow you to upload a profile photograph.

If you choose to use this feature:

You may select a photograph from your device.

Where supported, you may take a photograph using your device camera.

The photograph is used for your PakkaPass profile.

Camera or photo-library access is requested only when required for the relevant feature.

We do not require you to provide a profile photograph unless a particular feature expressly requires it.

We use personal information for legitimate purposes necessary to operate PakkaPass, including:

Educational notes

Video lectures

Study materials

Practice questions

Curriculum-based content

Other learning resources

Class

Board

Branch/stream

Subjects

Learning activity

Create and maintain your account

Authenticate your account

Verify your identity

Maintain student and parent relationships

Provide account-related support

Record completed topics

Track study activity

Calculate study streaks

Generate progress summaries

Provide learning analytics to the student

Improve the educational experience

Manage subscriptions

Process purchases

Apply eligible coupons

Manage trial periods

Verify subscription status

Maintain billing records

Send subscription-related notifications

OTPs

Important account notifications

Subscription notifications

Service announcements

Study reminders, where enabled

Support responses

Transactional communications

Detect unauthorized access

Prevent fraud and abuse

Protect accounts

Investigate security incidents

Maintain system integrity

Troubleshoot technical problems

Comply with applicable laws, regulations, lawful requests, court orders, and government requirements.

Where PakkaPass relies on consent to process personal data, the request for consent will be presented in clear and plain language and will identify, as applicable:

the categories or specific items of personal data proposed to be processed;

the specific purpose or purposes for which the personal data is proposed to be processed;

the relevant Services or features enabled by such processing;

the manner in which consent may be withdrawn;

the manner in which privacy rights may be exercised;

the contact details of the person or function responsible for responding to privacy-related requests.

Consent will not be treated as having been given merely because a user continues to use the Services where applicable law requires an affirmative consent mechanism.

PakkaPass is an educational platform and may be used by students who are below 18 years of age (“children” under applicable law). We recognise the importance of protecting the privacy, safety and well-being of children.

Where required under applicable law, PakkaPass will obtain verifiable consent from the parent or lawful guardian before processing the personal data of a child.

We may use reasonable and legally permitted mechanisms to verify the identity, age and authority of the person providing parental or guardian consent.

We collect and process children's personal data only to the extent reasonably necessary for providing and administering the educational Services, maintaining the student's account, enabling learning functionality, managing subscriptions where applicable, providing support, maintaining security and complying with applicable law.

We do not knowingly collect personal data from children beyond what is reasonably necessary for the relevant educational or operational purpose.

PakkaPass will not knowingly process children's personal data in a manner that is likely to cause a detrimental effect on the well-being of a child.

PakkaPass will not use children's personal data for targeted behavioural advertising.

To the extent applicable under law, PakkaPass will not undertake tracking or behavioural monitoring of children except where such processing is expressly permitted or exempted under applicable law and is necessary for the relevant educational or safety-related purpose.

Subject to applicable law, a parent or lawful guardian may contact PakkaPass to request access to, correction

PakkaPass may take reasonable steps to verify the identity and authority of the person making such a request before acting upon it.

Where a student's account is linked to a parent, guardian, school or other authorised educational institution, relevant educational or account information may be made available to such authorised person or institution as necessary for the provision or administration of the Services and as permitted by applicable law.

PakkaPass does not sell children's personal data.

We do not sell or rent your personal information.

We may share information only when reasonably necessary for the purposes described in this Privacy Policy.

8.1 Parents or Guardians

Where a student account is linked to a parent or guardian account, relevant information may be made available to that parent or guardian, including information concerning:

Learning progress

Completed topics

Study activity

Subscription status

8.2 Educational Institutions and Partners

Where access to PakkaPass is provided, sponsored, or managed through a school, college, coaching centre, institute, or other authorized educational partner, certain information may be shared with authorized personnel as necessary to provide or administer the service.

The information shared may include enrollment information and relevant academic or usage information, depending on the arrangement.

8.3 Service Providers

We may use third-party service providers to operate our Services.

Such providers may process information only as necessary to provide their services to us and subject to appropriate contractual or legal safeguards.

8.4 Legal Requirements

We may disclose information where reasonably necessary to:

Comply with applicable law

Respond to lawful government requests

Comply with court orders

Protect the rights, property, or safety of PakkaPass, our users, or others

Investigate fraud, abuse, or security incidents

8.5 DATA PROCESSORS

PakkaPass may appoint third-party service providers or vendors to process personal data on its behalf.

Such service providers may include cloud hosting providers, payment processors, communication providers, analytics or monitoring providers, customer-support providers, security providers and other technology service providers.

Where required by applicable law, PakkaPass will enter into appropriate contractual arrangements with such Data Processors and will require them to process personal data only for authorised purposes and to maintain appropriate security safeguards.

PakkaPass remains responsible for personal data processing carried out on its behalf to the extent required under applicable law.

PakkaPass may use third-party technology and service providers.

Depending on the features you use, these may include:

We may use Amazon Web Services (AWS), including Amazon S3, for storing application files, profile images, educational media, or other information.

Payments may be processed through third-party payment providers such as Razorpay.

PakkaPass does not intentionally store complete payment-card numbers, CVV numbers, UPI PINs, or other authentication credentials used by payment providers.

We may use email delivery services or SMTP infrastructure to send OTPs, receipts, account notifications, and other service-related communications.

Users should note that the actual third-party providers and SDKs used by PakkaPass may change from time to time, and the list should be updated where material to the processing of personal data.

If you purchase a paid subscription, we may collect and retain information such as:

Transaction ID

Subscription/plan information

Purchase amount

Discount amount

Coupon code

Payment status

Transaction date

Payment method/type

PakkaPass does not store your complete credit/debit card number, CVV, or UPI PIN.

Payment transactions are handled through authorized payment service providers.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

HTTPS/TLS encryption for data transmitted between your device and our services

Access controls

Authentication mechanisms

Restricted backend access

Secure cloud infrastructure

Monitoring and logging

Security and operational controls

However, no method of transmission or electronic storage is completely secure. Therefore, while we take reasonable steps to protect your information, we cannot guarantee absolute security.

PakkaPass maintains reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or other forms of unlawful processing.

In the event of a personal data breach, PakkaPass will assess and respond to the incident in accordance with applicable law and the DPDP Act and DPDP Rules, including any applicable requirements relating to notification of the Data Protection Board of India and affected Data Principals.

Where notification to affected users is required, PakkaPass will provide information reasonably necessary to enable affected individuals to understand the nature of the breach and take appropriate protective measures.

PakkaPass will also take reasonable steps to contain, investigate, remediate and prevent recurrence of the breach.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

Maintaining your account

Providing educational services

Maintaining subscription and transaction records

Providing customer support

Preventing fraud and abuse

Maintaining security and audit records

Complying with legal, tax, accounting, or regulatory obligations

Resolving disputes

When personal information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable law.

Certain information may need to be retained for a longer period where required by law.

PakkaPass will periodically review retained personal data and, where the applicable purpose is no longer being served and continued retention is not required or permitted by law, will delete, anonymise or securely dispose of such personal data in accordance with applicable law.

Depending on your location and applicable law, you may have rights relating to your personal information.

You may request information about the personal data we hold about you.

You may request correction of inaccurate or incomplete personal information.

You may request deletion of your personal information, subject to legal or legitimate retention requirements.

Where processing is based on consent, you may withdraw your consent. Withdrawal of consent may affect our ability to provide certain features or Services.

You may contact us regarding concerns or complaints about the processing of your personal information.

Where permitted by applicable law, parents or lawful guardians may exercise relevant rights concerning the personal information of their child.

To exercise an applicable privacy right, a Data Principal may contact PakkaPass through the contact details specified in Section 23 or through the in-app privacy/support mechanism, where available.

A request should contain sufficient information to enable PakkaPass to identify the relevant account and understand the nature of the request. PakkaPass may take reasonable steps to verify identity and, where a request relates to a child, the authority of the parent or lawful guardian.

PakkaPass will process privacy requests within the time period prescribed under applicable law. Where a request cannot be fully complied with, PakkaPass may communicate the applicable legal or operational reason, subject to applicable law.

You may request deletion of your PakkaPass account and associated personal information.

The in-app support feature; or

The official privacy/support email address provided in this Privacy Policy.

We may need to verify the identity and authority of the person making the request before processing it.

Deletion may not immediately remove information that we are legally required or legitimately permitted to retain, such as certain transaction, tax, security, or audit records.

Used when you choose to upload a profile photograph or access/download supported study materials.

Used when you choose to take a profile photograph.

Required to communicate with our servers, load educational content, stream videos, process account information, and synchronize learning activity.

Used to send permitted service notifications, including study reminders, subscription notifications, important account information, and support updates.

You can manage certain permissions through your device settings. Restricting a permission may prevent the associated feature from working.

PakkaPass is designed as an educational service.

We do not sell personal information.

We do not use children's personal information for targeted behavioural advertising.

We do not knowingly collect more children's personal information than reasonably necessary for providing the Services and complying with applicable legal requirements.

PakkaPass may contain links to third-party websites, educational resources, payment services, or other external services.

When you access a third-party service, that service may collect information under its own privacy policy.

PakkaPass is not responsible for the privacy practices, security, or content of third-party services that we do not control.

We encourage you to review the privacy policy of any third-party service before providing personal information.

Where PakkaPass permits users to upload, submit or otherwise provide photographs, assignments, answers, comments, feedback, documents or other content, such content may be processed to provide the relevant feature or Service.

Users should not upload personal information relating to another individual unless they are authorised to do so.

PakkaPass may retain such content for as long as reasonably necessary for the purpose for which it was submitted, for account administration, dispute resolution, security, legal compliance or other purposes permitted under applicable law.

Where user-generated content is no longer required and there is no lawful basis for continued retention, PakkaPass may delete or anonymise such content in accordance with this Privacy Policy.

Where PakkaPass uses artificial intelligence, machine-learning systems or automated technologies, such technologies may process information relating to a user's learning activity for purposes such as providing educational assistance, generating recommendations, improving content or supporting the Services.

PakkaPass will use such technologies in accordance with applicable law and will take reasonable measures to ensure that personal data is processed only for authorised purposes.

Where applicable law provides specific rights or safeguards concerning automated processing, PakkaPass will provide such rights or safeguards in accordance with the applicable requirements.

PakkaPass and its authorised service providers may process or store personal data in India or in other jurisdictions, depending on the infrastructure and services used.

Where personal data is transferred, accessed or processed outside India, PakkaPass will comply with applicable requirements concerning such transfer, access or processing, including any restrictions or safeguards prescribed under applicable Indian law.

PakkaPass will take reasonable steps to ensure that third-party service providers handling personal data maintain appropriate contractual, technical and organisational safeguards.

If you have questions, requests, or complaints concerning this Privacy Policy or your personal information, please contact:

PakkaPass

Where required, communications concerning the exercise of privacy rights will contain or refer to the appropriate contact details for further communication.

We will review and respond to privacy-related requests in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect:

Changes to our Services

Changes to our data practices

Changes to applicable laws

Changes to our third-party service providers

Security or operational requirements

When we make material changes, we may notify users through the application, website, email, or other appropriate means.

The "Last Updated" date at the beginning of this Privacy Policy will be updated when changes are made.

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including applicable data protection and privacy laws and regulations.

Nothing in this Privacy Policy is intended to limit, exclude or waive any mandatory rights or protections available to a Data Principal under applicable law.