1. Who we are
Imnemosyne Technologies Private Limited is a private limited company incorporated in India under the Companies Act, 2013, having its registered office at Plot No. 17, Vrindavan Colony, Parsodi, Jawaharnagar Road, Thana Petrol Pump, Bhandara, Maharashtra - 441906, India. Corporate Identification Number (CIN): U63999MH2023PTC415388. For the purposes of the DPDP Act, we act as a Data Fiduciary in respect of personal data we process directly, and as a Data Processor when we process personal data on behalf of our clients.
2. What this policy covers
This policy covers personal data we collect through (i) our website at the domain on which this policy is hosted, (ii) our mobile applications, including the Vriddhi app, and (iii) any other services that link to this policy (collectively, the "Services"). It does not cover third-party websites, apps or services we do not control, even if they are linked from our Services.
3. Personal data we collect
We collect only the personal data needed to operate and improve the Services. This typically includes:
- Account information: name, email address, phone number and password (where you create an account).
- Profile information: optional information you choose to provide, such as preferred language, education level or area of interest.
- Usage data: in-app activity such as lessons started, progress, scores, and pages visited, used to power features and improve the product.
- Device and technical data: device model, operating system, app version, language settings, time zone, IP address and basic crash diagnostics.
- Communications: the content of any email, support ticket or feedback you send us.
We do not knowingly collect special categories of personal data (such as financial account credentials, health data or biometrics) unless a specific feature requires it and we have explicitly told you so at the point of collection.
4. Children's data
Some of our products, including Vriddhi, are designed to be useful to students who may be under the age of 18. Where the user is a child as defined under the DPDP Act, we will:
- obtain verifiable consent of the parent or lawful guardian before processing the child's personal data;
- not undertake tracking, behavioural monitoring of children, or targeted advertising directed at children; and
- not process the child's personal data in a way that is likely to cause any detrimental effect on the well-being of the child.
5. How we use personal data
We use personal data only for purposes that are clear and proportionate, including to:
- provide, secure, operate and maintain the Services;
- create and manage your account, and authenticate you when you log in;
- personalise content (for example, recommending lessons in your preferred language);
- communicate with you about service updates, security notices and support requests;
- monitor performance, debug crashes, and improve quality and reliability;
- comply with legal, regulatory and tax obligations applicable to us; and
- prevent fraud, abuse and violations of our Terms of Service.
6. Lawful bases for processing
We process personal data on one or more of the following bases under the DPDP Act:
- your consent, freely given for a specified purpose;
- certain legitimate uses recognised under the DPDP Act, such as where you voluntarily provide data for a clear purpose; and
- compliance with applicable Indian law, judicial orders or regulatory directions.
7. Sharing of personal data
We do not sell personal data. We share personal data only with carefully selected service providers who help us run the Services — for example, cloud hosting, analytics, crash reporting, customer support and payment processing. These service providers are contractually required to process personal data only on our instructions and to keep it confidential and secure.
We may also disclose personal data when required to do so by Indian law, by a court of competent jurisdiction, or by a lawful authority acting within its powers.
8. International transfers
Some of our service providers may process personal data outside India. Where we transfer personal data across borders, we do so only to countries that are not restricted by the Central Government under the DPDP Act, and we put in place reasonable safeguards to protect that data.
9. Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable law. When personal data is no longer required, we delete or anonymise it in line with our internal retention schedule.
10. Security
We implement reasonable technical and organisational security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encryption in transit, access controls, audit logging and regular review of our security practices. However, no method of electronic storage or transmission is fully secure, and we cannot guarantee absolute security.
11. Your rights as a Data Principal
Subject to applicable law, you have the right to:
- Access the personal data we hold about you and a summary of the purposes for which it is processed;
- Correct personal data that is inaccurate, incomplete or misleading, and to update it where necessary;
- Erase personal data that is no longer needed for the purpose for which it was collected, subject to legal exceptions;
- Withdraw consent at any time where processing is based on consent (this will not affect the lawfulness of processing carried out before withdrawal);
- Nominate another individual to exercise your rights in the event of your death or incapacity; and
- Grievance redressal through the readily available channels described below.
To exercise any of these rights, please contact us using the details in the "Contact and Grievance Officer" section.
12. Cookies and similar technologies
Our website uses a small number of cookies and similar technologies for essential functionality (such as remembering your theme preference) and for basic analytics so we can understand how the site is used. You can block or delete cookies in your browser at any time; certain features may not work as expected if you do.
13. Third-party services
Our Services may contain links to third-party websites and services (for example, the Google Play store listing for Vriddhi). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with any personal data.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page, and where the changes are material we will take reasonable steps to notify you in advance.
15. Contact and Grievance Officer
If you have a question, request or complaint about how we process your personal data, please contact our Grievance Officer:
- Grievance Officer: Harsh Kumar Sharma
- Email: hksrise@gmail.com
- Postal address: Imnemosyne Technologies Private Limited, Plot No. 17, Vrindavan Colony, Parsodi, Jawaharnagar Road, Thana Petrol Pump, Bhandara, Maharashtra - 441906, India
We will acknowledge receipt of grievances and respond within the time frames required under applicable Indian law. If you are not satisfied with our response, you may approach the Data Protection Board of India established under the DPDP Act.