Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how we keep it safe.
Welcome to MyPledge — a student productivity and wellness platform. We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how MyPledge ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and website.
This policy applies to all users of the MyPledge platform, including students, parents, institute administrators, and any other visitors to our website.
We collect different types of data depending on how you interact with our platform. We collect only what is necessary to provide you with a high-quality experience.
Phone number (for OTP authentication), full name, student ID, class/batch information, profile photo, and email address (optional).
App usage patterns, screen time, task completion rates, challenge participation, goal-setting history, and productivity metrics.
Journal entries, mood tracking responses, wellness check-in answers, and any mental health self-assessments. This data is treated with the highest sensitivity.
Device type and OS, FCM (push notification) tokens, IP address, crash logs, and app performance data to maintain service quality.
Coarse location data may be collected only when you trigger the Emergency SOS feature, to help notify your emergency contacts. We do not track your location continuously.
Enrolment details, academic year, division, roll number, and any information provided or imported by your educational institution.
We use the information we collect for the following purposes:
We do not sell your personal data. We share it only in the following limited circumstances:
We retain your personal data only as long as necessary to fulfil the purposes described in this policy or as required by law. Below is a summary of our retention practices:
| Data Type | Retention Period | Notes |
|---|---|---|
| Account Data | Duration of account + 2 years | Deleted upon verified account deletion request |
| Wellness & Journal Data | Duration of account | Immediately deleted when account is closed |
| Usage Analytics | 3 years | Anonymised after 1 year for aggregated reporting |
| Notification Tokens | Until app is uninstalled or token refreshed | Automatically cleared on logout |
| SOS Location Data | 24 hours | Deleted automatically after alert resolves |
| Transaction Records | 7 years | Required for financial and tax compliance |
To request deletion of your data, please contact us at support@mypledgeapp.com. We will process verified requests within 30 days.
Our website uses a minimal set of cookies to ensure proper functionality and improve your experience. Our mobile app does not use browser cookies.
Required for core website functionality such as session management and CSRF protection. Cannot be disabled.
Help us understand how visitors interact with our site. Collected data is aggregated and anonymous.
We do not use advertising or tracking cookies. No third-party ad networks are used.
You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
MyPledge is designed for students, which may include minors under 18 years of age. We take extra precautions to protect younger users:
Depending on your location, you may have the following rights regarding your personal data. We are committed to honouring these rights.
To exercise any of these rights, email us at support@mypledgeapp.com with subject line "Privacy Rights Request". We will respond within 30 days.
We work with carefully selected third-party service providers to operate our platform. Each provider is bound by a data processing agreement and is not permitted to use your data for their own purposes.
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
We implement multiple layers of security to protect your data against unauthorised access, alteration, or disclosure:
All API requests require a signed JSON Web Token, ensuring only authenticated users can access their data.
Sensitive data is encrypted at rest. All data in transit is protected using TLS/HTTPS.
We use phone-based OTP instead of passwords, reducing the risk of credential-based attacks.
Role-based access control ensures each user (student, teacher, admin, parent) sees only data relevant to their role.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:
Your continued use of MyPledge after the effective date constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, our privacy team is here to help.
We aim to respond within 3 business days.
Subject line: "Privacy Rights Request"