DRAFT — to be reviewed by the academy and a lawyer before publishing. Text in [brackets] needs a decision.
This policy explains what personal data Kanoonu Kalike ("the academy", "we") collects through this app, why, and your choices.
What we collect
- Account details: your name, email address, chosen language and a securely hashed password (we never store the password itself).
- Learning activity: courses you enrol in, lessons you open or complete, where you stopped in a video, and lessons you save to Downloads.
- Payments: course, amount, method (UPI or cash), the UPI transaction reference (UTR) and the payment screenshot you upload. We do not receive or store your bank, card or UPI PIN details.
- Security data: the IP address and browser/device type of each sign-in, and a log of important account actions such as sign-ins, failed sign-ins and password changes.
- Mobile app: if you allow notifications, a push notification token for your phone. The app does not access your contacts, location, camera or microphone. It asks for photo access only when you choose a payment screenshot.
Why we use it
- To create your account, give you access to the courses you have paid for, and track your progress.
- To verify payments and keep financial records.
- To send service emails: password reset links and updates about your payments and enrollments.
- To send push notifications to your phone about payments, enrollments and academy announcements (you can turn these off in your phone's settings).
- To protect accounts and prevent misuse. Your account can be signed in on one device at a time, and repeated failed sign-ins are temporarily blocked.
We do not sell your data and we do not use it for advertising.
Protecting course content
To prevent course content from being copied, the mobile app blocks screenshots and screen recording on lesson screens where the phone allows it, and shows your email address and learner ID faintly over videos and notes.
Who we share it with
- Email delivery: emails are sent through our email provider [Google Workspace / Gmail].
- Push notifications: delivered through Expo (expo.dev) and Google Firebase Cloud Messaging / Apple Push Notification service. Only the notification text and your phone's push token are shared with them.
- YouTube: some video lessons play from YouTube (youtube-nocookie.com), which receives the usual technical data of a video request.
- Hosting: the app and its data are stored on servers operated for the academy by [hosting provider, location].
- When required by law, for example to comply with a valid legal request.
Cookies and local storage
We use one essential cookie to keep you signed in. Your language choice is also remembered in your browser. We do not use tracking or advertising cookies.
In the mobile app, your sign-in token and language choice are kept in the phone's secure storage. Lessons you download are stored in the app's private storage on your phone (not in your gallery or files) and are deleted when you log out.
How long we keep data
Account and learning data are kept while your account is active and for [period] after it is closed. Payment records are kept for [period, e.g. as required by tax law].
Your choices and rights
You can update your name and password from Profile → My account. To access, correct or delete your data, or to withdraw consent, contact us using the details below. [Describe how and when requests are answered, in line with the Digital Personal Data Protection Act, 2023.]
Deleting your account
[You can delete your account from Profile → Delete account in the app, or by contacting us.] Deleting your account removes your name, email address, learning activity, downloads and push tokens, and signs you out everywhere. Payment records are kept for [period] as required by law, without your contact details.
Children
[State whether the app is intended for users under 18 and, if so, how parental consent is obtained.]
Contact
[Name of the person or team responsible for data protection], [email], [address].
Changes to this policy
We will update the date at the top of this page when this policy changes.