PediaPopPrivacy Policy
- We collect only what PediaPop needs to work: your login details, your profile and your study progress.
- Photos and PDFs you upload (Premium) are stored privately in your account. Only you can open them.
- Your data is stored in India (Mumbai) with Google Firebase.
- We never sell your data and never show advertising.
- You can see, correct or delete your data at any time.
1. Who we are
PediaPop is a pediatrics self-study app for medical students. It is owned and operated by CareGlint Labs Private Limited ("CareGlint", "we", "us"). Its registered office is in Trichy, Tamil Nadu, India.
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), CareGlint is the Data Fiduciary for your personal data in PediaPop.
2. What we collect
| Type | Details |
|---|---|
| Login details | Your email address. If you log in with Google, also your name as shown on your Google account. If you use email login, your password is handled by Google Firebase and is never visible to us. |
| Profile | The name, batch and college you enter in the app. |
| Study data | Chapter status, study logs, revision dates, mistakes diary, attendance and marks you enter, exam plans, focus-timer sessions, XP, badges, mission progress, references and typed notes. |
| Uploaded files (Premium: 1 GB included; 2 GB with the Cloud Storage add-on) | The snapshots, PDFs and text files you choose to upload, with their names, sizes, dates and the question they belong to. Only you can open them. |
| Invite friends (referrals) | Your personal invite code, and which accounts bought Premium using your invite link, so we can count your progress and give the reward. Your friends do not see your study data, and you do not see theirs; you only see how many friends joined. |
| College (optional) | If you choose or type your college, we store its name and state with your profile. We use it only for statistics, shown as totals per college, and to plan college offers. It is not shown to other students. |
| Signed-in devices | A random device ID, the device type and browser (for example "iPhone · Safari") and when each device was last used, so we can apply the 2-device limit and show you your devices in My account. |
| Consent record | The date and version of the Terms and Privacy Policy you accepted. |
| Payment information (PediaPop Premium) | Your mobile number (our payment partner needs it to process UPI payments and send receipts), and the plan you bought, amount, date, order ID and payment status. Card numbers, UPI PINs and bank details are collected by our payment partner. We never see or store them. |
| Technical data | Basic information our service providers process automatically to run and secure the service, such as IP address, browser or device type and error logs. |
We do not collect your phone contacts, location, camera, microphone or any patient information. Please do not enter patient-identifiable information in notes or uploads.
3. How we use it
- To create and secure your account and log you in.
- To save your progress and restore it on any device where you log in.
- To show your dashboard, revision reminders, XP, badges and reports.
- To provide premium features you have paid for, and to keep payment records as required by law.
- To answer your questions, fix problems and prevent misuse.
- To understand overall usage (for example, how many students use the app) so we can improve it. We use only combined counts for this, never individual profiling for advertising.
4. Your consent
We process your personal data on the basis of the consent you give when you tick the agreement box and create your account. You can withdraw your consent at any time by deleting your account (see section 9). Withdrawing consent means we can no longer provide the service to you. It does not affect processing that happened before you withdrew.
5. Where it is stored
Your account and study data are stored with Google Firebase (Firebase Authentication and Cloud Firestore). Uploaded photos and PDFs are stored in Firebase Cloud Storage. The database is located in the Mumbai, India (asia-south1) region. Google acts as our data processor under its standard data-processing terms.
6. Who we share it with
We share your data only with:
- Google Firebase, for login, database and website hosting.
- Cashfree Payments India Pvt. Ltd., our payment partner, only when you buy Premium: your name, email and mobile number are shared to process the payment.
- Authorities, if required by Indian law, a court order or a lawful government request.
We do not sell, rent or trade your personal data. Your college, teachers and other students cannot see your record. Only you, and authorised CareGlint staff who need it for support, can access it.
7. How long we keep it
- Account and study data: for as long as your account is active.
- Uploaded files: while your Premium or Cloud Storage plan is active, plus 60 days after it ends. After that they may be permanently deleted. You can delete any cloud file yourself at any time.
- When you delete your account, we erase your personal data within 30 days, except where the law requires us to keep it.
- Payment records: kept for the period required by Indian tax and accounting laws (usually 8 years).
8. Security
Data is encrypted in transit (HTTPS) and at rest by Google Firebase. Database security rules make sure each student can read and write only their own record. No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law.
9. Your rights
Under the DPDP Act, you have the right to:
- Access: ask for a summary of the personal data we hold about you. You can also download your progress at any time with Settings → Export backup.
- Correct: edit your name, batch and college in Settings → Profile, or ask us to correct anything else.
- Erase: erase your progress with Settings → Reset progress, or ask us to delete your whole account.
- Withdraw consent, as described in section 4.
- Grievance redressal: contact our Grievance Officer (section 13). If you are not satisfied with our response, you may approach the Data Protection Board of India.
- Nominate another person to exercise these rights on your behalf in case of death or incapacity.
To make a request, email us from the email address you log in with. We will respond within 30 days.
10. Age
PediaPop is meant for medical students aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has created an account, please contact us and we will delete it.
11. Data stored on your device
To work offline, PediaPop keeps a copy of your progress in your browser's storage on your device. Files you upload are stored in your account's private cloud storage, not only on the device. Logging out removes your progress from that device; it stays safe in your account. PediaPop does not use advertising or tracking cookies.
12. Changes to this policy
We may update this policy as PediaPop changes or the law requires. If we make important changes, we will ask you to review and accept the updated version in the app before you continue.
13. Grievance officer & contact
Grievance Officer: Mrs. Keerthana, Grievance Officer
CareGlint Labs Private Limited
Trichy – 621216, Tamil Nadu, India
Email: support@pediapop.in
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
← Back to PediaPop · Terms & Conditions