This is not a wall of legal jargon designed to confuse you. This document explains, in plain language, what data we collect, why we collect it, and what rights you have. Pinaka is compliant with India's Digital Personal Data Protection Act (DPDP) 2023.
Your Rights
Right to Access You can request a copy of all data we have about you. We will provide it within 30 days.
Right to Deletion You can request complete deletion of your account and all associated data at any time.
Right to Portability You can request an export of your test history and analytics. We will provide it in a machine-readable format within 30 days.
What We Collect
Account Information
- Email address (for login and communication)
- Phone number (optional, for OTP verification)
- Date of birth (to determine if parental consent is required)
- Parent/guardian contact (for minors under 18, used only for consent verification)
Test Performance Data
- Answers submitted during tests
- Time spent on each question
- Scores and behavioral analytics
- Persona classification and diagnostic results
Technical Data
- Device type and browser (for compatibility)
- IP address (for security and fraud prevention)
- Session logs (for debugging issues)
What We Do NOT Collect
- Precise GPS location: We do not track your physical location.
- Financial data: Payments are processed by third-party providers. We never see your card details.
- Biometric data: No face scans, fingerprints, or camera access.
How We Use Your Data
- To provide the service: Running tests, generating diagnoses, building your behavioral profile.
- To improve our platform: Aggregated, anonymized data helps us build better diagnostics.
- To communicate with you: Test reminders, feature updates, support responses.
- To comply with law: Legal requirements under DPDP Act and other regulations.
Who Sees Your Data
The Short Answer Only you and anyone you choose to share with.
Your diagnostic results are visible only to the account holder. If you want to share results with a parent, teacher, or mentor, you can download and share them yourself. We do not provide third-party access to your results.
- Pinaka team: Only authorized members with a legitimate need (support, debugging).
- Cloud providers: Our infrastructure provider hosts your data. Data is encrypted at rest and in transit.
- Law enforcement: Only if required by valid legal order. We will notify you unless prohibited.
Data Retention
- Active accounts: Data is retained as long as your account is active.
- Deleted accounts: All personal data is permanently deleted within 30 days of account deletion.
- Analytics data: Aggregated, anonymized data may be retained indefinitely for research.
Security Measures
- Data is encrypted at rest and in transit
- Access logs monitored for suspicious activity
- Secure password hashing with industry-standard algorithms
Grievance Officer
As required by DPDP Act 2023, we have appointed a Grievance Officer to address your data protection concerns:
Email: hello@mypinaka.com Response time: Within 48 hours
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email at least 7 days before they take effect.