Privacy Policy

PharmaSpark (“PharmaSpark”, “we”, “us”, or “our”) is an educational and examination-preparation platform designed primarily for pharmacy students and aspirants.

This Privacy Policy explains the categories of information PharmaSpark processes when you use our mobile application, website, and related services, why we process that information, how it may be disclosed, how long it may be retained, and the choices available to you.

This Privacy Policy should be read together with the PharmaSpark Terms & Conditions and any other policy that applies to a particular subscription, payment, feature, or service.

The information processed by PharmaSpark depends on the features you use.

2.1 Account and Profile Information

We may process:

• Name and email address.
• Account or user identifier.
• Profile information you choose to provide, including a profile image where available.
• Account status and verification information.
• Authentication and sign-in information.

If you use a supported third-party sign-in service, such as Google Sign-In where available, we may receive information that the provider makes available for authentication, such as your verified email address, name, provider account identifier, and profile image.

2.2 Learning and Performance Information

When you use PharmaSpark’s learning and examination-preparation features, we may process:

• Subjects and units accessed.
• Questions attempted and answers submitted.
• Correct and incorrect responses.
• Scores, accuracy, completion and learning progress.
• Attempt history.
• Previous Year Question (PYQ) activity.
• Mock Test attempts and results.
• Daily Challenge participation and scores.
• Leaderboard eligibility and ranking information.
• Other performance information generated through your use of the platform.

We use this information to provide results, preserve learning continuity, calculate progress and performance, and operate the educational features you choose to use.

2.3 Subscription and Transaction Information

If you purchase or use a paid PharmaSpark service, we may process:

• Subscription plan and status.
• Activation, expiry and access-entitlement information.
• Transaction or payment reference.
• Payment status and amount.
• Transaction date and time.
• Information reasonably necessary to verify, reconcile or support a purchase.

2.4 Device, Notification and Technical Information

When necessary to operate, secure or support PharmaSpark, we may process limited technical information such as:

• Device or platform information.
• Push-notification tokens.
• Notification delivery, read or interaction information where supported.
• Authentication and session information.
• Request and event timestamps.
• Application or server errors and diagnostic information.
• Security events.
• IP address and user-agent information where reasonably necessary for authentication, security, fraud prevention, legal records, support or service operation.

2.5 Support Communications

When you contact PharmaSpark through Help & Support, email or another support channel, we may process:

• Your account and contact information.
• Support category, subject and message.
• Information you voluntarily provide in connection with the issue.
• Our responses.
• Ticket status and resolution information.

Do not send passwords, OTPs, UPI PINs, CVVs, banking passwords or other sensitive authentication or payment credentials through support channels.

2.6 Legal and Policy Records

Where PharmaSpark records your acknowledgement or acceptance of a legal document, we may process information necessary to maintain that record, such as:

• Your account identifier.
• The document type and version.
• The date and time of acceptance.
• IP address and user-agent information where recorded for the acceptance event.

PharmaSpark does not intend to store sensitive payment-authentication credentials such as:

• UPI PINs.
• CVVs.
• Banking passwords.
• OTPs used to authorize payments.
• Complete card authentication credentials.

Payments may be completed through a third-party payment service provider. Information entered directly into that provider’s payment interface is handled according to the provider’s own systems, privacy policy and terms.

PharmaSpark may retain transaction identifiers, payment status, amount, timestamps and related records necessary to verify a payment, activate access, maintain financial records, investigate a transaction or provide support.

We may use information to:

• Create, authenticate and manage PharmaSpark accounts.
• Provide Subject-wise Learning, MCQ practice, notes and educational resources.
• Provide PYQ and Mock Test functionality.
• Operate Daily Challenges and leaderboards.
• Calculate scores, accuracy, progress, eligibility and rankings.
• Preserve completed attempts and learning continuity.
• Manage subscriptions and access entitlements.
• Verify payments and resolve transaction issues.
• Deliver service, account and permitted educational notifications.
• Provide Help & Support.
• Diagnose technical problems and maintain service reliability.
• Detect, investigate and prevent fraud, abuse and unauthorized access.
• Maintain security, operational and administrative records.
• Improve PharmaSpark’s functionality and user experience.
• Enforce applicable terms and policies.
• Comply with applicable legal and regulatory requirements.

PharmaSpark records certain learning and examination activity so that users can maintain meaningful progress and review completed results.

Subject-wise Learning, PYQs, Mock Tests, Daily Challenges and other activities may maintain separate progress or attempt histories.

Educational content may occasionally be corrected or updated. Where necessary, PharmaSpark may preserve information associated with a previously completed attempt so that historical results remain understandable and consistent.

If you participate in a leaderboard or competitive learning feature, limited profile and performance information required by that feature may be visible to other users. This may include information such as

your displayed name, profile image where available, score, eligibility or ranking, depending on the feature.

PharmaSpark may investigate and, where appropriate, correct or exclude activity reasonably identified as fraudulent, abusive, invalid or technically corrupted.

Payments for PharmaSpark subscriptions or other paid services may be processed through a third-party payment service provider.

The payment provider may independently process the financial information required to complete the transaction. PharmaSpark may receive transaction identifiers, payment status, amount, timestamps and related information needed to confirm payment, activate purchased access, maintain transaction records, reconcile payments, investigate failed or disputed transactions and provide payment-related support.

The payment provider’s handling of information is governed by its applicable privacy policy and terms.

PharmaSpark may use third-party service providers to support functions such as authentication, infrastructure and hosting, data storage, push notifications, payment processing, email or service communications, security, and technical monitoring.

These providers may process information as necessary to perform services for PharmaSpark or as otherwise permitted under their applicable terms and legal obligations. Some providers may also process information independently under their own privacy policies.

PharmaSpark does not sell your personal information to advertisers.

We may disclose information where reasonably necessary:

• To service providers that support PharmaSpark.
• To payment providers for transaction processing, verification or support.
• To investigate or prevent fraud, abuse, unauthorized access or security incidents.
• To protect the rights, safety, security or integrity of PharmaSpark, our users or others.
• To enforce applicable terms and policies.
• To comply with applicable law, regulation, court order, legal process or lawful governmental request.
• In connection with a lawful business transfer as described below.

We seek to limit disclosures to information reasonably relevant to the purpose for which the disclosure is made.

PharmaSpark uses reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss or misuse.

Measures may include authentication and authorization controls, protected credential handling, session controls, restricted administrative access, role-based permissions, security and administrative audit records, secure network communications, and operational monitoring, as appropriate to the relevant

system.

No application, internet transmission or electronic storage system can guarantee absolute security.

You are responsible for protecting your account credentials and the device used to access PharmaSpark. If you believe your account has been compromised, contact PharmaSpark through Help & Support.

PharmaSpark retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining learning and attempt history, managing subscriptions and transactions, providing support, protecting the service, resolving disputes, and meeting accounting, contractual, regulatory or legal requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, it may be deleted or anonymized in accordance with applicable requirements and operational procedures.

PharmaSpark provides an account-deletion process for eligible user accounts. You may initiate account deletion through the account-related functionality made available within PharmaSpark or through the account-deletion process provided on the PharmaSpark website.

When an account-deletion request is successfully completed, PharmaSpark may delete or anonymize account-associated personal information as appropriate. Account deletion may permanently remove access to learning progress, attempt history and other account-specific information.

Certain records may be retained after account deletion where reasonably necessary or legally required. These may include records related to completed financial transactions, accounting or regulatory requirements, fraud prevention, security investigations, legal claims, disputes, audit integrity or other compliance obligations.

Where necessary to preserve financial, security or audit integrity, PharmaSpark may retain an anonymized internal account reference that is no longer intended to identify the deleted user in ordinary use.

Residual copies may remain temporarily in secured backups until removed through normal backup-retention or rotation processes.

Depending on applicable law and the functionality available through PharmaSpark, you may be able to:

• Access or update certain account information.
• Manage notification permissions.
• Request account deletion.
• Contact us about information associated with your account.
• Raise a privacy-related question, concern or request.

We may take reasonable steps to verify your identity before processing certain requests.

A request may be limited where processing or retention remains necessary for security, fraud prevention, financial records, dispute resolution, compliance with law or another lawful purpose.

Privacy-related requests can be submitted through Help & Support or the contact information below.

PharmaSpark may send communications necessary to operate or protect the service, including messages relating to account security, subscriptions, payments, support requests and important service changes.

Where permitted and enabled, PharmaSpark may also send educational notifications relating to learning activities, Daily Challenges, leaderboard or ranking updates, new educational content, Mock Tests, PYQs, examination preparation and subscription-related reminders.

Push-notification permissions can generally be managed through your device settings. Disabling push notifications does not prevent PharmaSpark from displaying information inside the application or sending communications that are otherwise necessary or permitted through available channels.

PharmaSpark is an educational and examination-preparation service. Users must satisfy applicable age and consent requirements under the laws and platform rules that apply to them.

Where consent or authorization from a parent or legal guardian is required, the service should only be used after the required consent or authorization has been obtained.

If PharmaSpark becomes aware that information was collected in circumstances where legally required authorization was not obtained, we may take appropriate steps in accordance with applicable requirements.

PharmaSpark may use or provide access to third-party authentication services, payment services, websites or other external resources.

Third parties operate under their own privacy policies and terms. PharmaSpark is not responsible for the independent privacy practices of third parties that it does not control.

The infrastructure and service providers used to operate PharmaSpark may process or store information in India or other locations, depending on the services used.

Where applicable, PharmaSpark seeks to handle such processing in accordance with applicable data-protection requirements.

PharmaSpark may process, preserve or disclose information where reasonably necessary to comply with applicable legal or regulatory requirements, respond to lawful requests, establish or defend legal claims, investigate fraud or security incidents, protect PharmaSpark and its users, or enforce applicable agreements and policies.

Where applicable law requires a specific consent or authorization for a processing activity, PharmaSpark will seek it as required.

If PharmaSpark is involved in a merger, acquisition, financing, reorganization, sale of assets or another lawful business transfer, information associated with the service may be transferred as part of that transaction where permitted by applicable law.

Any handling of personal information in connection with such a transaction remains subject to applicable legal requirements.

PharmaSpark may update this Privacy Policy when its services, technology, business operations, legal requirements or information-processing practices change.

The published policy will identify its version and effective or last-updated date. Where required by applicable law, PharmaSpark may provide additional notice or seek appropriate consent or acknowledgement before a material change becomes effective.

Previous policy versions and acceptance records may be retained where reasonably necessary for legal, compliance or record-keeping purposes.

This Privacy Policy should be read together with the PharmaSpark Terms & Conditions and any other policy applicable to a particular service or transaction, including policies relating to subscriptions, payments, cancellation, refunds or account deletion where applicable.

For questions, concerns or requests regarding this Privacy Policy or information associated with your PharmaSpark account, contact PharmaSpark through Help & Support in the application.

Email: support@pharmaspark.in

PharmaSpark India

Please provide enough information for us to understand and respond to your request. Do not send passwords, OTPs, UPI PINs, CVVs, banking passwords or other sensitive authentication or payment credentials through email or support messages.