Privacy Policy

Last updated: May 30, 2026

1. Introduction

At OKNEPPO ("we", "us", or "our"), we respect your privacy and are committed to protecting it through our compliance with this policy. This Privacy Policy applies to information we collect through:

• Our website at okneppo.in (the "Website")
• Our mobile application Ok Neppo Fashion Academy (the "App"), available on Android (package: com.okneppo.mobileapp)
• Any related services, communications, and interactions

By using our Website or App, you agree to the collection, use, and sharing of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect the following personal information that you voluntarily provide:

• Account Information: Full name, phone number, and optionally email address when you register on our App
• Authentication Data: Phone number for OTP verification (delivered via WhatsApp), Google account details if you choose Google Sign-In, or Truecaller profile data if you use Truecaller verification
• Body Measurements: Tailoring measurements you voluntarily save in the App for custom clothing orders
• Payment Information: Transaction details processed through Razorpay, including order ID, payment ID, payment method, and amount (in INR). We do not store your full card or bank account details—these are handled securely by Razorpay
• Communication Data: Messages and inquiries you send via our contact form or WhatsApp

2.2 Information Collected Automatically

When you use our App or Website, we may automatically collect:

• Device Information: Device type, operating system version, unique device identifiers
• Push Notification Token: Your Expo/FCM push token to send course updates, payment confirmations, and other notifications
• Course Progress Data: Lesson completion status, video watch time, and learning progress heartbeats to track your course advancement
• Usage Data: App interaction patterns, pages visited, features used, and session information
• Log Data: API request logs including timestamps, IP addresses, and request metadata for security and debugging purposes

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: To create and manage your account, verify your identity via phone OTP, and maintain your login sessions
• Course Delivery: To provide access to purchased courses, track your lesson progress, issue completion certificates, and deliver video content
• Payment Processing: To process course and bundle purchases through Razorpay, manage refunds, and maintain payment history
• Notifications: To send push notifications about course updates, new lessons, payment confirmations, and important announcements
• WhatsApp Communication: To send OTP codes for verification, registration welcome messages, and course-related group invitations via WhatsApp Business API
• Custom Clothing: To use your saved body measurements for tailoring and custom fashion orders
• Service Improvement: To analyze usage patterns, improve our App and Website, and enhance the learning experience
• Security: To detect and prevent fraud, abuse, and unauthorized access

4. Third-Party Services

We use the following third-party services that may collect or process your data:

• Razorpay: Payment processing. Razorpay's privacy policy governs how they handle your payment data. Visit razorpay.com/privacy
• WhatsApp Business API (Meta): OTP delivery and transactional messages. Governed by Meta's privacy policy
• Google Services: Google Sign-In authentication and Firebase Cloud Messaging for push notifications
• Truecaller: Optional phone number verification during sign-in
• Expo (EAS): App build and push notification delivery infrastructure

We only share the minimum data necessary with these services to provide our features. We do not sell your personal information to any third party.

5. Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• Passwords are hashed using bcrypt with a salt factor of 12
• Authentication uses JWT-based access and refresh tokens stored securely
• OTP codes are time-limited and expire after a short window
• API communications are encrypted using HTTPS/TLS
• Payment data is processed through PCI-DSS compliant Razorpay infrastructure

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account Data: Retained until you request account deletion
• Course Progress: Retained for the duration of your enrollment and account lifetime
• Payment Records: Retained as required by applicable tax and financial regulations
• OTP Codes: Automatically expired and invalidated within minutes of issuance
• API Logs: Retained for a limited period for debugging and security monitoring

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct your personal information through the Edit Profile section in the App
• Deletion: Request deletion of your account and personal data through our Data Deletion Request page. We will process deletion requests within 30 days
• Opt-out of Notifications: Disable push notifications through your device settings at any time

8. Children's Privacy

Our App and Website are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

9. Cookies

Our Website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze site traffic. You can manage cookie preferences through your browser settings.

10. Disclosure of Information

We may disclose your personal information in the following circumstances:

• To comply with any court order, law, or legal process, including responding to government or regulatory requests
• To enforce our Terms and Conditions and other agreements
• If we believe disclosure is necessary to protect the rights, property, or safety of OKNEPPO, our users, or others
• To service providers who assist in our operations (as listed in Section 4), bound by confidentiality obligations

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by posting the updated policy on this page with a revised "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and applicable data protection rules. Any disputes shall be subject to the exclusive jurisdiction of courts in Rourkela, Odisha, India.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone / WhatsApp: +91 6370826619
• Address: Jhirpani, Rourkela, Odisha, India
• Data Deletion Request: okneppo.in/delete-data