Privacy Policy

1. Overview & Scope

1.1. Scope: This policy applies to all users of KarMuqabla, whether accessing the service independently or through a partner school rollout, institutional deployment, or sponsor program.

1.2. Role Definitions & Controllership:

1.2.1. Self-Registered Accounts: For open/self-registered parent, teacher, and sponsor accounts, KarMuqabla acts as the Data Controller.

1.2.2. School-Affiliated Accounts: When student and staff accounts are created, imported, or managed by a partner school or branch administrator, the school acts as the Data Controller for those records, and KarMuqabla acts as a Data Processor operating under the school’s instructions and partnership agreement.

2. Who This Policy Covers

2.1. Covered User Roles:

2.1.1. Students: Account access provisioned directly by an authorized partner school or linked under a registered parent/guardian account. (Note: Students cannot self-register independent accounts).

2.1.2. Teachers: Self-registered independent educators or teachers affiliated with a partner school.

2.1.3. Parents & Guardians: Self-registered individuals, or parents linked to a student account.

2.1.4. School & Branch Administrators: Designated administrative users onboarded through institutional partnership agreements.

3. Information We Collect

3.1. Account & Identity Information: Name, email address, phone number, username, role (student, teacher, parent, or admin), grade level, section/class association, school name, and hashed passwords. Where phone sign-in is used, we may send a one-time code to that number.

3.2. Educational & Learning Activity Data: Topics viewed, lesson videos watched, quiz responses, assessment scores, streak counts, tournament participation and rankings, worksheet downloads, earned in-app coins/badges, and time spent in the platform.

3.3. Relationship & Association Data: Parent-child linkages, teacher-section assignments, and sponsor-student relationships.

3.4. Payment & Subscription Records: When a Premium Plus package is purchased, we record order ID, package type, amount, payment status, timestamp, and the billing name and address used at checkout. Credit/debit card numbers and banking credentials are entered on the payment provider’s hosted checkout and are never stored on KarMuqabla servers.

3.5. Technical, Device & Usage Data: Device type, operating system version, app version, browser type, IP address, city from billing address or network information (not GPS), diagnostic crash logs, and network performance metrics used to keep the service running. For visitors who are not signed in, and for parents and teachers, we also record usage events such as pages and screens viewed, the website or ad campaign that brought you to us, starting sign-up, logging in, viewing a plan and starting checkout, together with cookie or app-instance identifiers and an internal account number. We do not record usage events for students for advertising (see Section 7.2).

3.6. Infrastructure, Diagnostics & Analytics: We use hosting, video delivery, push notification, payment, messaging, and crash-reporting providers to operate the service, and analytics and advertising-measurement providers (Google Analytics, Google Analytics for Firebase and Meta) as described in Sections 6.2 and 7.2. Some of these providers process data outside Pakistan.

4. Children’s Privacy & Parental Safeguards

4.1. Compliance Standards: KarMuqabla serves primary and secondary school students (minors). We comply with applicable legal frameworks regarding children’s data protection.

4.2. Prohibition on Student Self-Registration: Student accounts cannot be created independently. Student access must be granted either by an authorized partner school under institutional consent frameworks or created/linked under a verified parent or legal guardian account.

4.3. Profile Privacy Defaults: Student profiles are not public directories. Leaderboards and tournament standings may show a student’s display name (first and last name as stored on the account), grade, score, and in-app achievements. Some school-only events also show school or campus name. Contact details, phone numbers, email addresses, and home addresses are never shown on those boards.

4.4. No Commercial Sale: KarMuqabla does not knowingly sell, rent, or trade children’s personal information to third parties or advertising networks. We do not use children’s data for advertising, and children’s activity is not sent to advertising tools (see Section 7.2).

5. How We Use Information

5.1. Core Service Delivery: To deliver grade-appropriate learning topics, videos, quizzes, worksheets, arenas, and tournaments.

5.2. Progress & Analytical Insights: To display academic progress and performance reports to teachers for their assigned sections, and to parents for their linked children.

5.3. Platform Administration & Rewards: To operate virtual performance coins, streak tracking, Premium Plus entitlements, and tournament prize distributions.

5.4. Communication & Notifications: To send essential system updates, transactional messages, and push notifications (e.g., tournament reminders or security alerts).

5.5. Security & Product Improvement: To maintain infrastructure security, investigate unauthorized activity or misuse, fix technical bugs, and optimize user experience.

5.6. Legal Compliance: To comply with applicable statutory legal obligations and enforce our Terms of Use.

6. Third-Party Service Providers

6.1. Infrastructure Partners: We work with select third-party service providers bound by strict data processing and confidentiality agreements to perform essential platform functions:

6.1.1. Video Hosting & Content Delivery: For secure streaming of lesson videos, assets, and digital worksheets.

6.1.2. Cloud Infrastructure & Databases: For encrypted database hosting, user authentication, and secure backup storage.

6.1.3. Push Notification Services: For delivering in-app alerts and mobile push reminders.

6.1.4. Payment Processors: For processing Premium Plus package transactions via secure, regulated financial gateways.

6.2. Analytics and Advertising Partners: On our website and web portal we use Google Analytics and the Meta (Facebook) Pixel, loaded through Google Tag Manager, to measure usage and see which campaigns bring new parents and teachers. Our servers may also report a confirmed registration or payment to Google and Meta, with an internal account number, the plan and the amount, never your name, phone number or e-mail address in readable form. We do not sell personal data, and students’ activity is never sent to these tools (see Section 4.4).

7. Cookies & Tracking Technologies

7.1. Essential Cookies: Our web platforms use essential cookies to maintain secure authenticated login sessions and preserve user preferences.

7.2. Analytics and Advertising Cookies: For visitors who are not signed in, and for signed-in parents and teachers, Google Analytics and the Meta Pixel set cookies that record pages visited and actions such as starting sign-up, logging in, viewing a plan and starting checkout. Signed-in students do not load these tools. In the mobile apps we use Google Analytics for Firebase to understand usage (screens viewed, sign-ins, plan views); the apps do not collect your device’s advertising identifier. See Google’s Privacy Policy and Meta’s Privacy Policy.

7.3. Preference Controls: Users can control cookie settings through their browser preferences; however, disabling essential cookies may impair platform functionality and prevent proper sign-in. The service keeps working if you block analytics and advertising cookies.

8. When We Share Information

8.1. Authorized Platform Relationships: Linked parents, assigned teachers, and partner school administrators can see student activity as part of educational monitoring. Other participants can see the limited leaderboard information described in Section 4.3.

8.2. Service Providers: Shared only under strict contract conditions with technical infrastructure vendors as detailed in Section 6.

8.3. Legal Requirements: Disclosed only if required by valid law, court order, or to protect the vital rights, safety, and security of KarMuqabla, its users, or the public.

9. Data Retention & Deletion

9.1. Active Account Retention: Account and learning data are retained for as long as an account remains active under a parent link or school subscription.

9.2. Post-Closure Retention: After deletion, profile and login details are removed. Payment records may be kept for tax and accounting (typically up to 7 years). Quiz activity may be kept without a name attached. Security logs are typically kept up to 12 months. Backups rotate within 30–90 days.

9.3. Institutional Retention: Data provisioned by partner schools is retained or purged in accordance with the institutional partnership agreement.

10. Data Security

10.1. Technical Protection: We use HTTPS/TLS in transit, one-way hashed passwords, and role-based access so staff and school users only see the student data their role allows.

10.2. User Responsibilities: Users are encouraged to choose strong passwords and report any suspicious account activity immediately.

11. Your Rights & Choices

11.1. Access & Correction: You may request a copy of your personal data or request corrections to inaccurate details by contacting support.

11.2. Account Deletion: You may delete your account in the app under Settings → Delete account, or follow the Account Deletion Page if you cannot use the app. For school-managed student accounts, requests should be initiated through the school administrator.

11.3. Notification Controls: Push notifications can be enabled or disabled at any time in device settings.

12. Institutional School Data Policy

12.1. School Policy Reference: Bulk roster imports, school data controllership, and B2B educational obligations are governed in detail under our dedicated School Policy.

13. Changes to This Privacy Policy

13.1. Updates: We may update this Privacy Policy to reflect product enhancements or legal requirement updates.

13.2. Notification: Material changes will be communicated via in-app banners or email, with the “Last Updated” date reflecting the latest revision.