QuestPix Privacy Policy

This Privacy Policy explains what personal data QuestPix collects, why we collect it, the lawful basis on which we process it, who we share it with, and the rights you have as a Data Principal under India’s Digital Personal Data Protection Act, 2023.

It applies to the QuestPix website at questpix.com, the QuestPix mobile applications on Google Play and the App Store, and all related products, tests, question banks and services (together, the “Platform”).

In this Privacy Policy, “we”, “us” and “QuestPix” mean QuestPix Solutions Pvt. Ltd., a company incorporated in India with its registered office at 1st Floor, C-17, MBS Road, Shubhash Nagar, Kota, Rajasthan – 324005. “You” means the person using the Platform. QuestPix is the Data Fiduciary for the personal data described here.

Please read it together with our Terms and Conditions and Refund and Cancellation Policy.

By creating an account, purchasing a plan, or otherwise using the Platform, you consent to the collection and processing of your personal data as described here. Where we rely on your consent, that consent is specific, informed and unconditional, and you may withdraw it at any time (see Section 10).

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent we need in order to provide a service, we may no longer be able to provide that service to you. If you do not agree with this Privacy Policy, please do not use the Platform.

We collect only what we need to run and improve the service.

• Account data — name, mobile number, email address, password (stored in hashed form), class/grade, target exam and preferred language. Optionally: profile photo, city/state, school or coaching institute name.
• Learning activity — courses and batches enrolled in, tests and quizzes attempted, answers submitted, scores, time spent, bookmarks, doubts raised, notes and progress analytics.
• Transaction data — records of purchases, plan details, invoices, GST details where you provide them, refunds and payment status. Card, UPI and net-banking credentials are collected and processed directly by our payment gateway partners; we do not store full card numbers or UPI PINs.
• Technical and usage data — device model and operating system, app version, browser type, IP address, approximate location derived from IP, crash logs, referring page, and cookies, pixels, SDKs and similar identifiers. Where you have given consent, this also includes usage and interaction data — the pages and features you view, the links you click, how far you scroll, how long you stay. We do not record what you type into password or payment fields.
• Support and communications data — messages, emails, call records and attachments you send our support team, and our responses. If you submit an enquiry or callback form, we record your name, contact details and interest so our counselling team can respond.
• Content you upload — photographs, screenshots of questions, doubt images, answer sheets or documents you upload to the Platform. Where you use an AI doubt-solving or explanation feature, the question text and any image you attach are sent to our AI provider to generate the answer — see Section 7.
• Verification documents — for certain subscription plans, scholarships or examinations we may ask for a government-issued identity document or a student/institution ID. These are retained only for as long as needed for verification and any related dispute.

Some technical data is strictly necessary to run and secure the service and is collected regardless. Analytics and interaction data are collected only in line with the cookie choices you make (see Section 6). We do not knowingly collect financial account passwords, biometric data, health data, or caste, religion or political affiliation.

We collect personal data in three ways:

• Directly from you — when you register, fill in a profile, submit an enquiry, buy a plan, attempt a test, upload content or contact support.
• Automatically — through cookies, pixels, SDKs and server logs as you use the Platform, in line with your consent choices.
• From third parties — payment gateways, and, in the case of a child’s account, the parent or lawful guardian who provides consent.

You may browse parts of the Platform without creating an account. In that case we still collect the limited technical data described in Section 3.

We process personal data only for specified purposes, on the basis of your consent or, where permitted, certain legitimate uses recognised under Section 7 of the DPDP Act.

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you.

We and our service providers use cookies, pixels, tags and SDKs on the Platform. Our consent banner offers two categories, and it is the banner — not this page — that decides what runs on your device.

• Strictly necessary — login and session management, security and fraud prevention, load balancing, and remembering your language and playback preferences. Always active; the Platform cannot function without them.
• Analytics, improvement and advertising — optional and off by default. These help us understand which features are used and where users get stuck, including tools that record page interactions such as clicks, scrolls and navigation paths. The same optional consent also covers our advertising and campaign-measurement tags, which let us measure how our own campaigns perform, understand which of our ads led to a visit or a purchase, and show QuestPix ads to relevant audiences on third-party platforms. Some of those tags are set by advertising and analytics providers who may combine the information with data they already hold about you under their own privacy policies.

Your control. Nothing in the optional category runs until you accept it. You can accept, reject or change your choice at any time — use Manage in the consent banner, which shows what is stored on this device and lets you switch analytics off or erase it on the spot. Withdrawing is as easy as consenting. You can also block or delete cookies in your browser, though some features may then stop working.

One optional choice, not several. Everything in the second category — analytics, interaction recording and advertising alike — is governed by the single optional consent you give or refuse in the banner. Decline it and none of those tags load.

We do not sell your personal data. We share it with vetted service providers acting as Data Processors on our instructions under a written contract, limited to what each needs to perform its function:

• cloud hosting and content delivery providers;
• SMS, OTP, WhatsApp, push-notification and email delivery providers;
• payment gateways and banking partners;
• video streaming and live-class infrastructure providers;
• customer relationship management, counselling and support tools, which receive the contact details and enquiry information you submit so our team can respond to you;
• AI providers — where you use an AI doubt-solving or explanation feature, the question text and any image you attach are sent to a third-party AI model provider to generate the answer. We send only what is needed to answer the question, and we do not send your name, contact details or payment data with it.
• analytics and product-improvement providers, where you have consented;
• advertising and campaign-measurement providers, where you have consented.

Partner institutes and schools. If you enrolled through a coaching institute, school or other QuestPix partner, that partner can see your enrolment, attendance and performance on the Platform through their own portal, so they can teach and support you. They see only their own students.

Some analytics and advertising providers act as independent controllers of the data they collect through their own tags, under their own privacy policies. Where you decline the optional cookie category, those tags are not applied.

We may also disclose personal data where required by law, court order or a lawful request from a government or regulatory authority; to enforce our Terms and Conditions or investigate suspected fraud, cheating, content piracy or security incidents; to protect the rights, property or safety of QuestPix, our users or the public; and to professional advisers under a duty of confidentiality.

Business transfers: if QuestPix is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the acquiring entity, which will remain bound by protections no less protective than this Privacy Policy. We will notify you. Aggregated and anonymised data — for example average scores by topic — is not personal data and may be published or shared freely.

We retain personal data only as long as necessary for the purposes set out above, or as required by law.

When the purpose is served and no legal requirement applies, we erase the data or irreversibly anonymise it.

We apply reasonable security safeguards, including encryption of data in transit (TLS), encryption at rest for sensitive fields, hashed passwords, role-based access controls, logging and monitoring, periodic security reviews, and confidentiality obligations on staff and processors.

Your responsibilities. You are responsible for keeping your login credentials confidential, for not allowing anyone else to use your account, and for ensuring the information you give us is accurate and up to date. Sharing your account or Platform content is a breach of our Terms and Conditions. Please tell us at once at support@questpix.com if you suspect unauthorised access to your account.

Breach notification. No system is perfectly secure. In the event of a personal data breach we will notify the Data Protection Board of India and affected users in the manner and within the timelines required by the DPDP Act and its rules.

To exercise any right in the summary above, write to us using the contact details in Section 13 and we will action it. If you have an account, you can also edit your details, change your notification choices and delete your account from Account in the app.

• We may ask you to verify your identity before acting on a request, to protect your data.
• We aim to respond within 30 days of receiving a verifiable request.
• We may decline or partially decline a request where the DPDP Act or another law permits or requires us to retain the data — for example tax records, or data needed for an ongoing investigation. We will tell you the reason.
• Requests must be made in good faith. Please do not submit false or frivolous requests, or impersonate another person; the DPDP Act places duties on Data Principals too.

Nomination. You may nominate an individual to exercise your rights on your behalf in the event of death or incapacity, by writing to support@questpix.com.

Opting out of marketing. You can stop promotional messages at any time. Promotional emails carry an unsubscribe link, and if you subscribed to updates without an account you can use that link or the unsubscribe page. For WhatsApp and SMS, use the stop messages page, reply to ask us to stop, or use WhatsApp’s own block and report controls. Account holders can also turn promotional messages off under Account → Notifications & consent, or write to support@questpix.com. You will continue to receive essential service messages such as OTPs, payment confirmations and class schedules.

Opting out of analytics and advertising. Change your cookie choice at any time as described in Section 6.

QuestPix is used by school students, and some of our users are children (under 18 years of age).

• A parent or lawful guardian must consent to this Privacy Policy and to the use of the Platform on the child’s behalf, and must make any purchase. By creating or supervising an account for a child, the parent or guardian confirms that consent.
• We do not process a child's personal data in a way likely to cause any detrimental effect on their well-being.
• A parent or guardian may access, correct, or request deletion of their child’s data, and may withdraw consent, by writing to us at support@questpix.com.

If we learn that we have collected a child’s data without the required consent, we will delete it promptly.

Your data is processed on servers operated by us or our service providers, which may be located in or outside India. Where personal data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified by the Central Government, and under contractual safeguards requiring standards of protection no less protective than this Privacy Policy.

Our Grievance Officer is Pradeep Sahani, reachable at support@questpix.com. If you have a question, request or complaint about how we handle your personal data, email that address and mention “Privacy request” or “Grievance” in the subject line, along with the mobile number or email registered with your account, so we can locate your records. We will acknowledge your grievance and respond within the timelines prescribed under applicable law. If you are not satisfied with our response, or we do not respond in time, you may escalate to the Data Protection Board of India in the manner prescribed under the DPDP Act. You can also browse our help centre.

The Platform may contain links to third-party websites, payment pages, or embedded content. We do not control those services and are not responsible for their privacy practices. Please read their privacy policies before providing them any information.

We may update this Privacy Policy from time to time. Material changes will be notified on this page and, where required, directly to you by email, in-app notice, or at your next login. The “Last updated” date reflects the latest revision. Your continued use of the Platform after a change takes effect means you accept the updated Privacy Policy.