QRakshak · Legal
Your Data Rights
Effective: 29 October 2026 · Version 2.1 · Operated by ThinkAIQ LLP
In short: You can ask us what data we hold, correct it, export it, delete it, withdraw consent, or nominate someone to act for you. Requests are free; we acknowledge within 1 day and resolve within 15 days.
Under the Digital Personal Data Protection Act, 2023 (India), you are a Data Principal and we are the Data Fiduciary for your personal data. This page explains your rights and exactly how to exercise them.
1. Your rights
| Right | What it means | How to use it |
|---|---|---|
| Access | A summary of the personal data we process, the purposes, and the categories of processors we share it with. | Email a request; we may ask you to verify your identity. |
| Correction & completion | Correct inaccurate or incomplete data (for example, a wrong phone number or medical note). | Edit most fields in the app, or email us for account-level changes. |
| Erasure | Delete data that is no longer necessary, subject to legal retention (tax, audit, legal claims). | Delete a QR/contact in the app, or request account deletion. |
| Withdraw consent | Stop processing that relies on consent, as easily as you gave it. | Email us or use the in-app controls; we confirm the effect. |
| Grievance | A readily available officer and a time-bound response. | See Grievance Redressal. |
| Nomination | Nominate a person to exercise your rights if you die or become incapacitated. | Email us the nominee's details; we record and verify the nomination. |
2. How to submit a request
- Email contact@thinkaiq.com with the subject line “Data rights request”.
- Tell us which right you are exercising (access, correction, erasure, consent withdrawal, nomination, or a combination) and the email/phone registered to the account.
- Describe the data or QR concerned, if you can. This helps us find it faster.
- We may ask for verification — for example a one-time code to the registered phone/email, or details only the account holder would know. This protects you from someone else deleting or exporting your data.
- If you are a guardian, school or authorised representative, tell us your relationship and we will explain the authority we need.
There is no fee for a request. We may decline or charge a reasonable administrative fee only where a request is manifestly unfounded, excessive or repetitive, and we will explain why.
3. Timelines
- Acknowledgement: within 1 day.
- Resolution: within 15 days of a complete, verified request.
- Erasure: completed within 30 days, except for records under a legal retention obligation or legal hold.
- Consent withdrawal: processing stops within 30 days; if the data is essential to a QR, we tell you before deactivating it.
- If we need more time, we explain why and give a new date.
4. What you will receive
- A clear summary in plain language, in English (and in an available Indian language on request).
- For a portability/export request, a machine-readable file (JSON or CSV) of your account and QR data, where technically feasible.
- For a correction or erasure, confirmation of what changed and what must be retained by law.
- If we refuse, the reason and how to complain to the Data Protection Board of India.
5. Nomination and authorised representatives
You may nominate one or more persons to exercise your rights in the event of death or incapacity. A nomination must be clear, signed/verified by you, and can be revoked. An authorised representative can act for you with written authority; we may verify both the authority and your identity. A guardian can act for a child profile.
6. If we cannot fulfil a request
We may refuse or limit a request where the law requires us to retain data (for example tax invoices or a legal hold), where it would disclose another person's data, or where it would prejudice an investigation. We will tell you which ground applies and how to challenge the decision through our Grievance Officer and the Data Protection Board of India.
7. Keep your account secure
We will never ask for your PIN, OTP or full card number by email. If someone claims to be from QRakshak and asks for those, do not share them — report it to contact@thinkaiq.com.
8. Contact
Akash Kumar (Grievance & Data Protection Officer)
Email: contact@thinkaiq.com
Grievance: contact@thinkaiq.com
ThinkAIQ LLP · 2nd Floor, C/O Vidya Devi, Vidya Bhawan, Ashok Nagar, Kankarbagh, Patna, Bihar - 800020
Contact & grievance officer
Akash Kumar (Grievance & Data Protection Officer)
Email: contact@thinkaiq.com
Acknowledgement within 1 day · resolution within 15 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act 2023. Data requests: /legal/data-request. Security reports: contact@thinkaiq.com.
2nd Floor, C/O Vidya Devi, Vidya Bhawan, Ashok Nagar, Kankarbagh, Patna, Bihar - 800020 · These documents are provided in English; translations of the privacy notice are available on request and will be published before a language is offered in the app.