Comprehensive Privacy Policy

Effective Date: May 1, 2026 | Last Updated: August 23, 2026

Stayforall Plus Services Private Limited ("VokPanda", "we", "our", or "us") is dedicated to complete transparency regarding how your data is collected, handled, and safeguarded. This Privacy Policy applies to our website (https://vokpanda.com), our mobile applications on Google Play Store and Apple App Store, and all related educational services.

1. Complete Data Collection & Usage Matrix

Below is an exhaustive breakdown of every category of personal data we collect, our exact purpose for collecting it, and the legal basis for processing:

Category of Data	Specific Data Elements Collected	Purpose of Collection & Usage
1. User Identity & Account Data	Full name, email address, telephone/WhatsApp number, profile photograph, country & state of residence.	Account creation, multi-factor authentication, booking reminders, tutor-student introductions, and customer service.
2. Live Video & Audio Classrooms	Real-time camera video stream, microphone audio stream, live classroom whiteboard inputs (transmitted via Agora RTC).	Delivering interactive 1-on-1 and batch language lessons. Streams are transmitted encrypted and never recorded or stored without prior mutual written consent.
3. AI Matchmaker Interactions	Learning goals, CEFR target exam, timeline deadline, budget, and language background submitted to Panda Match Advisor.	Processing prompts via Google Gemini 2.5 Flash to recommend matching tutors. Prompts are not used to train public LLM models.
4. Learning & Progress Analytics	Spaced repetition flashcard review times, accuracy rates, learned word counts, streak records, quiz submissions.	Generating automated personalized vocabulary review schedules and tracking student progress toward Goethe/TELC milestones.
5. Payment & Billing Records	Order ID, transaction amount, GST invoice details, date/time of payment, status (Success/Failure/Refunded).	Statutory tax accounting and invoice generation. We NEVER store credit/debit card numbers, CVVs, or UPI PINs (handled directly by Razorpay).
6. Tutor KYC & Accreditation Data	Goethe/TELC/ÖSD language certificates, degree transcripts, government ID, Indian bank account & IFSC code.	Verifying tutor qualifications before public listing, KYC compliance, and processing weekly automated earnings payouts.
7. Device & Technical Telemetry	IP address, device hardware model, OS version, app version, IDFA (iOS), GAID (Android), crash logs (Firebase Crashlytics).	Securing the platform against fraud/abuse, debugging application errors, and serving non-intrusive advertisements in free guest mode.

2. Device Permissions & Purpose

When using the VokPanda mobile app, we request specific device permissions only when required:

• Camera: Used exclusively during live 1-on-1 video lessons to allow the tutor and student to see each other.
• Microphone: Used for speaking practice in live video classes and pronunciation practice.
• Photo Library / Storage: Used to upload profile pictures, student assignment PDFs, or tutor qualification certificates.
• Push Notifications: Used to notify you of upcoming live class reminders, tutor messages, and daily flashcard review prompts.

3. Payment Security & PCI-DSS Compliance

4. Third-Party Service Providers

We work with vetted technology providers bound by strict confidentiality and data processing obligations:

• Agora RTC: Encrypted WebRTC live streaming infrastructure.
• Google Gemini AI: Processing matchmaking advisory requests.
• Firebase (Google LLC): Authentication and crash diagnostics.
• Oracle Cloud Infrastructure (OCI): ISO 27001-certified cloud infrastructure hosting in Mumbai, India.
• Google AdMob: Serving contextual non-intrusive advertisements in guest tiers.

5. Child Protection & Safeguarding (POCSO Act Compliance)

VokPanda maintains a strict zero-tolerance policy against child abuse, grooming, harassment, and exploitation. Minor learners between 13 and 17 years old must register with verified parental/guardian consent. Any suspected violation of child safety is immediately escalated to law enforcement authorities under the Protection of Children from Sexual Offences (POCSO) Act and Indian IT Act.

6. Your Rights Under DPDP Act 2023 & GDPR

You have the absolute right to:

• Access a copy of your personal data held by VokPanda.
• Correct inaccurate or incomplete profile records.
• Withdraw consent for optional communications at any time.
• Permanently erase your account and all associated personal data via our Account Deletion Portal.

7. Statutory Grievance Redressal Officer