CollectifyMe

Privacy Policy

Last updated: 4 November 2026

CollectifyMe helps tuition centres, gyms and classes track fees, attendance and payments. This policy explains what data we handle, why, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who is responsible for which data

Centre owners' account data (your name, email, phone, centre details and plan): CollectifyMe decides how this is used, so we are the Data Fiduciary for it.

Students' and members' data that a centre enters (names, parent names, phone numbers, batches, fees, payments, attendance): the centre decides what to collect and why, so the centre is the Data Fiduciary. CollectifyMe only stores and processes it on the centre's instructions, as a Data Processor.

Centres are responsible for having a lawful reason to enter this data and, where a student is under 18, for obtaining the consent of a parent or guardian as the DPDP Act requires.

2. What data we handle

  • Account: name, email address, password (stored only as a secure hash – we can never see it).
  • Centre details: centre name, type, phone, address, UPI ID, fee settings.
  • Records the centre adds: student or member names, parent/guardian names, phone numbers, batches, subjects or plans, fees, bills, payments, receipts and attendance.
  • Support requests: what you write to us, and the name and contact you give.
  • Technical data: login session cookies and basic server logs (time, page, errors) needed to run and secure the service.

We do not use advertising trackers, and we do not sell or rent personal data to anyone.

3. Why we use it

  • To provide the service: bills, reminders, receipts, reports, attendance and payment pages.
  • To manage your account, free trial and subscription.
  • To send essential emails (account confirmation, password reset, important service notices).
  • To answer support requests and keep the service secure and working.

4. Payments

Parents pay centres directly through UPI apps (such as Google Pay or PhonePe) using the centre's own UPI ID. CollectifyMe does not receive, hold or process this money, and never sees UPI PINs or bank details. A parent may optionally type a UPI transaction reference so the centre can match the payment.

5. WhatsApp messages

Reminder and receipt buttons open WhatsApp on the centre owner's own phone with a message ready. The owner chooses to send it from their own WhatsApp account. CollectifyMe does not send WhatsApp messages itself and does not access anyone's WhatsApp.

6. Payment and receipt links

Each student has private links (for fees and receipts) that work without logging in. They contain a long random code that cannot practically be guessed, and they show only what a parent needs: the student's name, amounts due or paid, and the centre's name and UPI ID. Anyone who has the link can open it, so please share it only with the right person.

7. Where data is stored and who helps us

Data is stored in India (Mumbai). We use a small number of trusted service providers who process data only to run CollectifyMe:

  • Supabase – database and login (hosted in Mumbai, India).
  • Vercel – website hosting (servers in Mumbai, India).
  • Resend – sending account emails such as confirmation and password reset.

Some of these companies may process limited technical data outside India, under their own security and privacy commitments.

8. How we protect data

  • Each centre can only see its own records – enforced by the database itself, not just the app.
  • All connections are encrypted (HTTPS). Passwords are stored as secure hashes.
  • Access to the admin area is limited to the CollectifyMe team and shows business-level information, not student records.

No system is perfectly secure. If a data breach affects you, we will inform you and the authorities as the law requires.

9. How long we keep data

We keep your data while your account is active. If you ask us to delete your account, we delete your centre's data within 30 days, except where we must keep certain records (for example, invoices for tax purposes). Backups are overwritten in the normal backup cycle.

10. Your rights

Under the DPDP Act you can ask to:

  • access a summary of your personal data and how it is used;
  • correct or update it (centre owners can edit most data directly in the app);
  • erase it, or withdraw consent;
  • nominate someone to exercise these rights if you are unable to; and
  • raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Students and parents: please contact your centre first, since it controls your records. We will help the centre respond.

11. Contact and grievance officer

For privacy questions, requests or complaints, email support@collectifyme.com or use our Report an issue page. Our Grievance Officer will respond within 30 days.

12. Changes to this policy

If we make important changes, we will update the date above and notify centre owners in the app or by email.