Privacy

Privacy policy

VIP Express is designed around the Digital Personal Data Protection Act, 2023. We collect the minimum data needed to prove a student visited a partner vendor and to make the discount verifiable.

What we collect, and why — each with its own consent

• Profile data (name, class, area and pincode, school, photo) — to issue your card and show relevant vendors.
• Location — captured once, in the foreground, only at the moment a vendor scans your card. Never in the background, never continuously.
• ID-card photo — for annual renewal. Encrypted at rest.
• Bill photos — to verify logged purchases. Encrypted at rest.

Minors

If you are under 18, a parent or guardian must confirm consent with their own mobile number before your card is activated.

Retention

Accounts inactive for the configured retention period are warned and then permanently deleted, including photos. You can request deletion at any time from Settings.

Who sees your data

Partner vendors see your name, photo and card status when they scan you, and aggregate visit statistics. Administrators see activity to moderate and to produce analytics. We never sell personal data.

Grievances

Our grievance officer's contact details are in the footer of every page.