Privacy Policy

1. Introduction

This Privacy Policy describes how Napeans Technologies ("we", "our", "us") collects, uses, and protects your personal information when you use the FeeZaap mobile application and website ("Service"). We are committed to protecting your privacy and ensuring compliance with the Digital Personal Data Protection Act 2023 (DPDP) and other applicable data protection laws in India.

By using FeeZaap, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2. Data Controller Information

3. Information We Collect

3.1 Personal Data Collected by Administrators

Since parents do not register directly, dance school administrators collect and input the following information:

• Student Information: Name, age, class/batch assignments, attendance records
• Parent/Guardian Information: Name, mobile number, email address (optional), physical address
• Payment Information: Fee amounts, payment history, outstanding balances
• Communication Data: SMS and notification preferences, delivery status

3.2 Technical Information

• Device information (model, operating system)
• App usage data and interaction patterns
• IP addresses and network information
• Login timestamps and session data

3.3 Payment Data

• Transaction amounts and dates
• Payment method information (tokenized)
• Payment status and confirmation details
• Zaap coins/points earned and redeemed

3.4 Data We Do NOT Collect

• Full credit/debit card details (we use tokenization)
• Aadhaar numbers or other government IDs (unless legally required)
• Biometric data
• Location data beyond IP-based region

4. How We Use Your Information

4.1 Primary Purposes

• Service Delivery: Managing dance class batches, staff assignments, and student enrollment
• Payment Processing: Facilitating fee payments from parents to dance schools
• Communication: Sending fee reminders, payment confirmations, and important updates
• Account Management: Maintaining user accounts and providing customer support

4.2 Secondary Purposes

• Service Improvement: Analyzing usage patterns to enhance functionality
• Security: Detecting and preventing fraud, unauthorized access
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Customer Support: Responding to queries and resolving issues

5. Legal Basis for Processing

Under the DPDP Act 2023, we process your personal data based on:

• Legitimate Use: Processing necessary for service delivery and payment facilitation
• Consent: Explicit consent provided by dance school administrators on behalf of parents
• Contractual Obligation: Fulfilling our agreement with dance schools
• Legal Compliance: Meeting tax, financial, and regulatory requirements

6. Data Sharing and Disclosure

6.1 With Dance Schools

Authorized dance school administrators have access to:

• Student and parent information they have entered
• Payment status and transaction history
• Communication logs and fee reminder status
• Batch and enrollment management data

6.2 With Third-Party Service Providers

We may share limited data with:

• Payment Processors: For secure transaction processing (tokenized data only)
• SMS/Email Providers: For sending notifications and reminders
• Cloud Storage Providers: For data hosting (within India only)
• Security Services: For fraud detection and prevention

6.3 We Do NOT Share Data For

• Marketing or advertising purposes
• Commercial exploitation by third parties
• Sale to data brokers or aggregators
• Profiling for non-service related purposes

7. Data Storage and Security

7.1 Data Localization

In compliance with Indian data protection laws:

• All personal data is stored on servers located within India
• No cross-border data transfer without explicit consent
• Regular audits to ensure data residency compliance

7.2 Security Measures

• Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
• Access Control: Role-based access with multi-factor authentication
• Monitoring: 24/7 security monitoring and intrusion detection
• Regular Audits: Quarterly security assessments and vulnerability testing

7.3 Data Retention

• Payment Records: 7 years (as per tax compliance requirements)
• Student Data: Until 1 year after course completion or withdrawal
• Communication Logs: 2 years for dispute resolution purposes
• Account Data: Until account deletion or 3 years of inactivity

8. Your Rights Under DPDP Act 2023

8.1 Right to Information

You have the right to know what personal data we hold about you and how it's being used.

8.2 Right to Correction

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

8.4 Right to Data Portability

You can request a copy of your personal data in a structured, commonly used format.

8.5 Right to Withdraw Consent

You can withdraw consent for data processing, though this may affect service availability.

8.6 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: mailus@feezaap.com
• Subject line: "Data Rights Request - [Your Name]"
• Response time: Within 30 days of verified request

9. Children's Privacy

9.1 Enhanced Protection

We take special care to protect children's data:

• Parental consent verification for all users under 18
• No behavioral profiling of minors
• No targeted advertising to children
• Enhanced security measures for children's data

9.2 Parental Rights

• Parents can access and control their child's data
• Parents can request deletion of child's information
• Direct communication with parents for consent matters

10. Cookies and Tracking

Our website uses minimal cookies for:

• Essential Cookies: Basic website functionality and security
• Preference Cookies: Remembering user language and settings
• Analytics Cookies: Understanding website usage (anonymized)

You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

11. International Transfers

We generally do not transfer personal data outside India. If international transfer becomes necessary:

• We will obtain your explicit consent
• Ensure adequate protection in the destination country
• Implement appropriate safeguards (contractual clauses)
• Maintain records of all cross-border transfers

12. Data Breach Notification

In the unlikely event of a data breach:

• We will assess the risk and impact within 24 hours
• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take immediate steps to secure the breach
• Provide regular updates on remediation efforts

13. Third-Party Links

Our Service may contain links to third-party websites, including:

• Payment gateway providers
• Napeans Technologies website
• App store download links

This Privacy Policy does not apply to third-party websites. We recommend reviewing their privacy policies before sharing personal information.

14. Updates to This Policy

We may update this Privacy Policy to:

• Reflect changes in our practices
• Comply with new legal requirements
• Improve clarity and transparency

We will notify users of material changes through:

• In-app notifications
• Email updates to registered administrators
• Website announcements

Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.

15. Grievance Redressal

15.1 Internal Grievance Process

1. Initial Contact: Email mailus@feezaap.com
2. Acknowledgment: Within 24 hours
3. Investigation: Thorough review of the complaint
4. Resolution: Response within 7 days

15.2 External Redressal

If unsatisfied with our response, you may escalate to:

• Data Protection Board of India (when established)
• Consumer forums for service-related issues
• Relevant state data protection authorities

Data Deletion Policy

You may request the deletion of your account and associated data, or request deletion of specific personal data, by contacting our support team. Please follow the steps below:

1. Send an email to mailus@napeans.com with the subject: Account deletion request or Specific data deletion request, as appropriate.
2. In the body of the email, please mention the Dance School Name, Children Name(s), and clearly specify which data you would like to delete (entire account or specific item).
3. Our team will validate and verify your request.
4. Once confirmed, the deletion process will be completed within 7 days.
5. You will receive an email confirmation once your account or requested data has been deleted.

For transparency, you may also find this policy and process outlined in our Google Play Store listing.

Note: You have the right to request deletion of specific personal data (e.g., a particular child’s information or payment record) without deleting your entire account.

16. Contact Information

For privacy-related questions, concerns, or requests:

17. Compliance and Certification

FeeZaap is committed to maintaining compliance with:

• Digital Personal Data Protection Act 2023 (DPDP)
• Information Technology Act, 2000
• Reserve Bank of India (RBI) guidelines for digital payments
• Google Play Store and Apple App Store privacy requirements

We undergo regular audits and maintain appropriate certifications to ensure ongoing compliance.