Privacy policy
Effective 2026-10-18
iPathik is in testing. Bookings are simulated: no real railway tickets are issued and no real money is taken.
Who is responsible
iPathik
Uttar Pradesh
What we collect
- Booking contact: name, mobile number, email (optional), address and PIN code.
- Passengers: name, age, gender and nationality; the passport number of foreign nationals; children under 5 by name, age and gender. If you choose an ID proof, only its type and the last 4 characters are kept, never the full number.
- Account (optional): name, email or mobile, and your password stored only as a salted one-way hash.
- Payments: the amount, status and the payment partner's reference. Card, UPI and bank details stay with Paytm or PhonePe.
- Sign-in cookie: one cookie keeps you signed in. We use no advertising or tracking cookies.
Why we use it
To book and show your tickets, send ticket updates, process cancellations and refunds, and keep the records Indian law requires. We do not sell your data or use it for advertising.
Who we share it with
- Paytm or PhonePe, to take payments and make refunds.
- Indian Railways / IRCTC, for the passenger details a ticket needs.
- Authorities, when the law requires it.
Who can see a ticket
Anyone with a PNR sees it with names masked. The full ticket is shown only to its owner: the signed-in account that booked it, or someone who gives the booking mobile number.
How long we keep it
Booking records are kept for as long as needed for the journey, refunds, and accounting and tax law. Deleting your account removes your account details.
Your rights
Under the Digital Personal Data Protection Act, 2023, you may ask to see, correct or erase your personal data, and complain to us or to the Data Protection Board of India. Write to the grievance officer below.
Grievance officer
Email: support@nahellc.com
Phone: +91 89231 89965
Hours: 10:00 to 18:00 IST, Monday to Saturday