100%
Our policies and terms for HeyNick
Last updated 30 September 2026
This notice explains what personal data HeyNick collects, why, who sees it, how long we keep it, and the rights you have over it — including the extra protections for learners under 18.
HeyNick is run by [Company legal name], [registered address] (“we”, “us”). For your personal data we are the Data Fiduciary under the Digital Personal Data Protection Act 2023 (the DPDP Act). You — the learner or parent using HeyNick — are the Data Principal.
| Data | Why we use it |
|---|---|
| Account: name, username, email, mobile number, password (stored hashed), profile PIN | To create your account, sign you in and keep it secure |
| Learner profile: class, board, stream, date of birth | To show the right subjects and textbooks, and to know whether a parent’s approval is needed |
| Family links: which parent is linked to which learner | So parents can manage their children’s accounts and see their progress |
| Learning activity: questions to Nick, homework photos and text, revision and practice sessions, answers and scores | To teach you, track progress, and improve HeyNick’s teaching |
| Payments: plan, amount, dates, Razorpay payment reference (we never see or store card or UPI details) | To sell plans, issue GST invoices and handle refunds |
| Support requests and feedback | To help you and fix problems |
| Device and usage data: device type, app version, notification token, sign-in times, IP address | To send notifications you’ve allowed, keep accounts secure and keep the service running |
We process your data with your consent, which you give when you sign up and which you can withdraw at any time (see “Your rights”), and for the legitimate uses the DPDP Act allows, such as meeting our legal obligations (for example keeping tax records).
Withdrawing consent doesn’t affect what was done before, but we may no longer be able to provide the service.
Many HeyNick learners are under 18. The DPDP Act (s.9) gives them extra protection, and so do we:
We don’t sell your data. We share it only with service providers who process it for us under contract:
We may also disclose data when the law requires it, for example to a court or government authority.
[Data is stored in India / Data may be processed outside India in countries the Government of India has not restricted.]
Service messages about your account — receipts, plan reminders, password resets, replies from support — are part of the service.
Offers (discounts and promotions) are sent only to adults who have said yes. You can change this any time under Privacy & data in the app, or with the unsubscribe link in any offer.
| Data | Kept for |
|---|---|
| Your account and learning activity | While your account is open. Deleted when you ask us to delete it. [Inactive accounts: deleted after N years without use, with notice 48 hours before.] |
| Payment records and invoices | 8 years, as tax and company law require — linked only to an anonymous ID once your account is deleted |
| Security and audit logs | At least 1 year, with your user ID only |
Under the DPDP Act you can:
Use Privacy & data in the app, or email grievance@heynick.ai from the email on your account. For a learner under 18, the linked parent makes these requests. We acknowledge within 48 hours and respond within 30 days. If we need to confirm it’s you, we’ll send a code to your registered email or mobile.
Data is encrypted in transit and at rest. Passwords are hashed. Staff access is limited by role, needs two-factor sign-in, and is recorded.
If a breach affects your data, we’ll tell you and the Data Protection Board without delay, and say what happened and what you can do.
[Name], Grievance Officer, [Company legal name], [address]. Email grievance@heynick.ai. If you aren’t satisfied with our answer, you can complain to the Data Protection Board of India.
If we change how we use your data in a way that matters, we’ll tell you in the app or by email before the change takes effect, and ask again where the law needs your consent.