Legal · Privacy
Privacy Policy.
KwikPG is built on trust. This policy explains exactly what data we collect, why we collect it, how we protect it, and the rights you have over it. We never sell your data — to anyone, ever.
Introduction
This Privacy Policy is published by COREARK SOFTWARE PRIVATE LIMITED ("KwikPG", "we", "our", "us"), a company incorporated under the Companies Act, 2013, with its registered office at Flat No 501, Block C, Sai Balaji Enclave, Hyderabad 500084, Telangana, India.
KwikPG operates a software-as-a-service (SaaS) platform designed for PG owners, hostel operators, co-living spaces, student accommodations, and rental property managers in India. The platform enables property owners and managers to manage tenants, collect rent online, track occupancy, send WhatsApp notifications, handle complaints, and generate analytics — all from a mobile-first interface.
This policy applies to all users of the KwikPG platform, including the mobile applications (iOS and Android), web application at kwikpg.com, and all APIs and services connected to them. By creating an account or using KwikPG in any form, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
KwikPG is a software platform only. We are not a party to any rental agreement, do not own or lease property, and do not act as a landlord or mediator in any housing dispute.
Information We Collect
We collect only what is necessary to operate the platform effectively.
Owner & Manager Account Data
Collected when you register or update your profile.
- Identity — Full name, mobile number, email address, and profile photo.
- Business — Business name, property address(es), GSTIN (if provided), and bank account details for payment settlements.
- KYC documents — PAN card, Aadhaar, or business registration documents uploaded for gateway onboarding or compliance purposes.
Resident (Tenant) Data
Entered by property owners on behalf of their residents.
- Profile — Name, mobile number, email, photo, date of birth, gender, and emergency contact.
- Identity documents — Aadhaar number (masked/hashed), PAN card, or other ID documents uploaded for verification.
- Stay details — Room and bed assignment, move-in/move-out dates, rent amount, security deposit, and billing cycle.
- Occupational details — Company name, designation, work address, or college name (as applicable).
Property owners are responsible for obtaining resident consent before entering their personal data into KwikPG. KwikPG processes this data as a data processor on behalf of the property owner.
Payment & Financial Data
- Transaction records — Payment amount, date, mode (UPI, card, net banking, cash), reference ID, and status.
- Gateway data — Order IDs and payment statuses received from Razorpay, Cashfree, or CCAvenue. Card numbers, UPI PINs, and bank credentials are handled entirely by the payment gateway and are never stored by KwikPG.
- Subscription billing — SaaS subscription plan, billing cycle, invoices, and payment history for your KwikPG account.
Property & Operational Data
- Property name, address, geo-coordinates, floor plan, room types, bed count, amenities, and photos.
- Meal menus, meal preferences, complaint records, notice board content, and staff profiles.
- Analytics data such as occupancy rates, collection rates, and due summaries — generated from the data you enter.
Usage & Device Data
Collected automatically when you use the platform.
- Device — Device model, operating system version, app version, and unique device identifiers.
- Location — Approximate city-level location (IP-based) used for analytics. We do not track GPS location continuously.
- Usage — In-app activity, feature usage patterns, session duration, and navigation flows — used to improve the product.
- Crash reports — Error logs and stack traces collected via Sentry to diagnose and fix software bugs.
- Push tokens — Device push notification tokens (FCM) to deliver in-app and system notifications.
How We Use Your Data
We use data only for the purposes described below. We do not use your data for advertising, profiling, or selling to third parties.
Platform Operations
Manage your account, process rent collections, generate bills, track occupancy, and run all core features of the platform.
Customer Support
Respond to your support queries, investigate complaints, and resolve platform issues.
Product Improvement
Analyse usage patterns and crash reports to fix bugs, improve performance, and build new features.
Legal Compliance
Meet obligations under Indian law including the IT Act, 2000, DPDPA 2023, GST Act, and Income Tax Act.
Security
Detect and prevent fraudulent activity, unauthorised access, and misuse of the platform.
Billing & Invoicing
Process subscription payments, issue tax invoices, and manage renewals for your KwikPG subscription.
WhatsApp & Notifications
KwikPG uses the WhatsApp Business API (via MSG91) to deliver automated notifications to residents on behalf of property owners. These include:
- Rent due reminders and payment receipts.
- Move-in welcome messages and checkout confirmations.
- OTP messages for resident self-onboarding.
- Meal menu updates and complaint status notifications.
- Notice board announcements sent by the property owner.
WhatsApp messages are sent only to residents whose contact details have been entered by the property owner. Residents may opt out of WhatsApp notifications by informing their property owner, who can disable notifications from the platform settings.
KwikPG also sends email and in-app push notifications for account-related communications such as subscription invoices, payment confirmations, and critical alerts.
Third-Party Services
We use trusted third-party providers to operate the platform. Each is bound by a data processing agreement.
Razorpay / Cashfree / CCAvenue
Payment GatewaysProcess online rent payments and subscription billing. They receive transaction data required to complete payments. Sensitive card/UPI data is handled directly by these gateways under PCI-DSS compliance.
MSG91
WhatsApp & SMSDelivers WhatsApp Business messages and OTP SMS to residents and owners. They process mobile numbers and message content for this purpose.
Firebase (Google)
Push NotificationsDelivers push notifications to mobile devices. Device tokens are sent to Firebase Cloud Messaging (FCM) to enable notification delivery.
DigitalOcean
Cloud InfrastructureHosts the KwikPG API servers and databases. All data is stored on DigitalOcean infrastructure in the Singapore (SGP1) or nearest available region.
Sentry
Error MonitoringCaptures application errors and crash reports to help us fix bugs. Error data may include stack traces and anonymised session context.
PostHog
Product AnalyticsCollects anonymised product usage data (screens visited, features used) to help us understand how the platform is being used and prioritise improvements.
Meta (Facebook / Instagram)
Social LoginProvides social login functionality (Meta Login). If you log in via Meta, we receive your name and email address from Meta in accordance with their platform policies.
Google Maps API is used for property geo-location features. Google Login support is planned for a future release.
Data Sharing & Disclosure
KwikPG shares personal data only in the limited circumstances below. We never sell personal data to any third party.
- Service providers — As described in the Third-Party Services section above — only for the specific purpose of operating the platform.
- Legal requirements — When required to comply with a court order, law enforcement request, regulatory direction, or any applicable Indian law.
- Business transfer — In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
- With your consent — For any purpose explicitly consented to by you at the time of collection.
KwikPG does not share resident data with any third party beyond what is required to operate the platform. Property owners — as data principals for their residents — are responsible for ensuring their residents are informed of how their data will be processed.
Data Security
We implement industry-standard technical and organisational measures to protect your data.
Encryption in Transit
All data transmitted between your device and our servers uses TLS 1.2+ encryption.
Encryption at Rest
Sensitive fields including Aadhaar numbers and KYC documents are encrypted at rest using AES-256.
Access Controls
Access to production systems is restricted to authorised personnel with multi-factor authentication and audit logging.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at business@kwikpg.com. We will investigate and take appropriate action within 72 hours.
Data Retention
We retain your data for as long as your account is active. After account closure:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & property data | 90 days post-closure | Grace period for reactivation |
| Payment & invoice records | 7 years | Income Tax Act, GST Act |
| Aadhaar-linked documents | 7 years | Legal and compliance obligations |
| Encrypted backups | Up to 90 days | Disaster recovery |
| Anonymised usage analytics | Indefinite | Product improvement |
Your Rights Under DPDPA 2023
India's Digital Personal Data Protection Act, 2023 grants you the following rights.
Right to Access
Request a copy of the personal data we hold about you and your account.
Right to Correction
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations.
Right to Withdraw Consent
Withdraw your consent to data processing at any time by closing your account or contacting us.
Right to Grievance Redressal
Raise a complaint with our Grievance Officer and receive a response within 30 days.
Data Portability
Export all your data (residents, payments, bills) as CSV or PDF directly from the app at any time.
To exercise any of these rights, email us at business@kwikpg.com from your registered email address. We will respond within 30 days.
Delete Account
You can permanently delete your KwikPG account at any time using either method:
From the App
- Open the KwikPG app.
- Go to Settings → Account.
- Tap Delete my account.
- Confirm with the OTP sent to your registered number.
By Email
Email business@kwikpg.com from your registered email with subject: Account Deletion Request. Include your registered mobile number. We complete the deletion within 30 days.
For full details of what is deleted and what is retained for legal compliance, visit kwikpg.com/delete-account.
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our platform, services, or applicable law. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Send a notification via email or in-app alert to active users at least 14 days before the change takes effect.
- For significant changes, seek fresh consent where required under applicable law.
Your continued use of KwikPG after the effective date constitutes acceptance of the updated policy.
Contact & Grievance Officer
For any privacy-related questions, data requests, or grievances, please reach out to us:
Grievance Officer
As required under the IT Act, 2000 and DPDPA 2023
COREARK SOFTWARE PRIVATE LIMITED
Flat No 501, Block C, Sai Balaji Enclave, Hyderabad 500084, Telangana, India
business@kwikpg.comWe aim to acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDPA 2023.