Privacy Policy

1. Overview & Scope

1.1. Scope: This policy applies to all users of KarMuqabla, whether accessing the service independently or through a partner school rollout, institutional deployment, or sponsor program.

1.2. Role Definitions & Controllership:

1.2.1. Self-Registered Accounts: For open/self-registered parent, teacher, and sponsor accounts, KarMuqabla acts as the Data Controller.

1.2.2. School-Affiliated Accounts: When student and staff accounts are created, imported, or managed by a partner school or branch administrator, the school acts as the Data Controller for those records, and KarMuqabla acts as a Data Processor operating under the school’s instructions and partnership agreement.

2. Who This Policy Covers

2.1. Covered User Roles:

2.1.1. Students: Account access provisioned directly by an authorized partner school or linked under a registered parent/guardian account. (Note: Students cannot self-register independent accounts).

2.1.2. Teachers: Self-registered independent educators or teachers affiliated with a partner school.

2.1.3. Parents & Guardians: Self-registered individuals, or parents linked to a student account.

2.1.4. School & Branch Administrators: Designated administrative users onboarded through institutional partnership agreements.

3. Information We Collect

3.1. Account & Identity Information: Name, email address, phone number, username, role (student, teacher, parent, or admin), grade level, section/class association, school name, and hashed passwords. Where phone sign-in is used, we may send a one-time code to that number.

3.2. Educational & Learning Activity Data: Topics viewed, lesson videos watched, quiz responses, assessment scores, streak counts, tournament participation and rankings, worksheet downloads, earned in-app coins/badges, and time spent in the platform.

3.3. Relationship & Association Data: Parent-child linkages, teacher-section assignments, and sponsor-student relationships.

3.4. Payment & Subscription Records: When a Premium Plus package is purchased, we record order ID, package type, amount, payment status, timestamp, and the billing name and address used at checkout. Credit/debit card numbers and banking credentials are entered on the payment provider’s hosted checkout and are never stored on KarMuqabla servers.

3.5. Technical, Device & Usage Data: DDevice type, operating system version, app version, IP address, city from billing address or network information (not GPS), diagnostic crash logs, and network performance metrics used to keep the service running.

3.6. Infrastructure & Diagnostics: We use hosting, video delivery, push notification, payment, messaging, and crash-reporting providers to operate the service. Some of these providers process data outside Pakistan.

4. Children’s Privacy & Parental Safeguards

4.1. Compliance Standards: KarMuqabla serves primary and secondary school students (minors). We comply with applicable legal frameworks regarding children’s data protection.

4.2. Prohibition on Student Self-Registration: Student accounts cannot be created independently. Student access must be granted either by an authorized partner school under institutional consent frameworks or created/linked under a verified parent or legal guardian account.

4.3. Profile Privacy Defaults: Student profiles are not public directories. Leaderboards and tournament standings may show a student’s display name (first and last name as stored on the account), grade, score, and in-app achievements. Some school-only events also show school or campus name. Contact details, phone numbers, email addresses, and home addresses are never shown on those boards.

4.4. No Commercial Sale: KarMuqabla does not knowingly sell, rent, or trade children’s personal information to third parties or advertising networks.

5. How We Use Information

5.1. Core Service Delivery: To deliver grade-appropriate learning topics, videos, quizzes, worksheets, arenas, and tournaments.

5.2. Progress & Analytical Insights: To display academic progress and performance reports to teachers for their assigned sections, and to parents for their linked children.

5.3. Platform Administration & Rewards: To operate virtual performance coins, streak tracking, Premium Plus entitlements, and tournament prize distributions.

5.4. Communication & Notifications: To send essential system updates, transactional messages, and push notifications (e.g., tournament reminders or security alerts).

5.5. Security & Product Improvement: To maintain infrastructure security, investigate unauthorized activity or misuse, fix technical bugs, and optimize user experience.

5.6. Legal Compliance: To comply with applicable statutory legal obligations and enforce our Terms of Use.

6. Third-Party Service Providers

6.1. Infrastructure Partners: We work with select third-party service providers bound by strict data processing and confidentiality agreements to perform essential platform functions:

6.1.1. Video Hosting & Content Delivery: For secure streaming of lesson videos, assets, and digital worksheets.

6.1.2. Cloud Infrastructure & Databases: For encrypted database hosting, user authentication, and secure backup storage.

6.1.3. Push Notification Services: For delivering in-app alerts and mobile push reminders.

6.1.4. Payment Processors: For processing Premium Plus package transactions via secure, regulated financial gateways.

6.2. No Advertising Networks: We do not share personal user data with ad networks or behavioral targeting companies.

7. Cookies & Tracking Technologies

7.1. Essential Cookies: Our web platforms use essential cookies to maintain secure authenticated login sessions and preserve user preferences.

7.2. Preference Controls: Users can control cookie settings through their browser preferences; however, disabling essential cookies may impair platform functionality and prevent proper sign-in.

8. When We Share Information

8.1. Authorized Platform Relationships: Linked parents, assigned teachers, and partner school administrators can see student activity as part of educational monitoring. Other participants can see the limited leaderboard information described in Section 4.3.

8.2. Service Providers: Shared only under strict contract conditions with technical infrastructure vendors as detailed in Section 6.

8.3. Legal Requirements: Disclosed only if required by valid law, court order, or to protect the vital rights, safety, and security of KarMuqabla, its users, or the public.

9. Data Retention & Deletion

9.1. Active Account Retention: Account and learning data are retained for as long as an account remains active under a parent link or school subscription.

9.2. Post-Closure Retention: After deletion, profile and login details are removed. Payment records may be kept for tax and accounting (typically up to 7 years). Quiz activity may be kept without a name attached. Security logs are typically kept up to 12 months. Backups rotate within 30–90 days.

9.3. Institutional Retention: Data provisioned by partner schools is retained or purged in accordance with the institutional partnership agreement.

10. Data Security

10.1. Technical Protection: We use HTTPS/TLS in transit, one-way hashed passwords, and role-based access so staff and school users only see the student data their role allows.

10.2. User Responsibilities: Users are encouraged to choose strong passwords and report any suspicious account activity immediately.

11. Your Rights & Choices

11.1. Access & Correction: You may request a copy of your personal data or request corrections to inaccurate details by contacting support.

11.2. Account Deletion: You may delete your account in the app under Settings → Delete account, or follow the Account Deletion Page if you cannot use the app. For school-managed student accounts, requests should be initiated through the school administrator.

11.3. Notification Controls: Push notifications can be enabled or disabled at any time in device settings.

12. Institutional School Data Policy

12.1. School Policy Reference: Bulk roster imports, school data controllership, and B2B educational obligations are governed in detail under our dedicated School Policy.

13. Changes to This Privacy Policy

13.1. Updates: We may update this Privacy Policy to reflect product enhancements or legal requirement updates.

13.2. Notification: Material changes will be communicated via in-app banners or email, with the “Last Updated” date reflecting the latest revision.