Privacy Policy
Last updated: January 2025
1. Introduction
Welcome to Kholasa ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your information. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our educational software platform and services.
As software quality experts building the next generation of educational tools, we understand the importance of data privacy, especially in educational contexts. This policy reflects our commitment to responsible data handling.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, educational institution, role (student/educator)
- Profile Information: Learning preferences, academic subjects, grade level
- Educational Content: Assignments, responses, study materials you create or upload
- Communication: Messages, feedback, support requests
- Waitlist Information: Email addresses collected for early access notifications
2.2 Automatically Collected Information
- Usage Data: How you interact with our platform, features used, time spent
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP addresses, access times, pages viewed
- Learning Analytics: Progress patterns, performance metrics (anonymized)
2.3 AI and Machine Learning Data
Our AI-powered features may analyze your learning patterns to provide personalized educational experiences. This includes study habits, content preferences, and progress tracking to enhance your learning journey.
3. How We Use Your Information
- Educational Services: Provide personalized learning experiences and AI-powered tutoring
- Platform Improvement: Enhance our software quality and user experience
- Communication: Send updates, educational content, and platform notifications
- Analytics: Understand usage patterns to improve our educational tools
- Safety & Security: Protect against fraud, abuse, and security threats
- Legal Compliance: Meet educational privacy regulations and legal requirements
4. Educational Privacy Compliance
4.1 FERPA Compliance
We comply with the Family Educational Rights and Privacy Act (FERPA) when handling educational records. We act as a school official with legitimate educational interest when processing student data on behalf of educational institutions.
4.2 COPPA Compliance
Our platform is designed for users 13 years and older. If we learn we have collected information from children under 13 without proper consent, we will delete that information immediately.
4.3 Student Data Protection
We never sell student data. Educational data is used solely for educational purposes and platform improvement. We implement additional security measures for student accounts and provide enhanced privacy controls for educational institutions.
5. Information Sharing and Disclosure
We do not sell your personal information. We may share information in these limited circumstances:
- Educational Institutions: Progress reports and analytics for enrolled students (with proper authorization)
- Google Services: We use Google services for analytics, cloud hosting, and educational tools. Data shared with Google is governed by Google's privacy policies and our data processing agreements
- Service Providers: Trusted third parties who help us operate our platform (under strict data protection agreements)
- Legal Requirements: When required by law or to protect safety and security
- Business Transfer: In case of merger or acquisition (with continued privacy protection)
- Consent: With your explicit permission for specific purposes
5.1 Google Services Integration
Our platform integrates with various Google services to enhance your educational experience:
- Google Analytics: For understanding platform usage and improving user experience
- Google Cloud Platform: For secure data storage and processing
- Google Gemini API: For AI-powered educational features, personalized learning, and intelligent tutoring
- Google Fonts: For consistent typography across our platform
Data shared with Google is limited to what's necessary for service functionality and is subject to Google's privacy policies. You can learn more about Google's privacy practices at Google Privacy Policy.
6. Data Security
As software quality experts, we implement industry-standard security measures:
- Encryption in transit and at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication protocols
- Employee training on data protection
- Incident response procedures
- Regular backup and disaster recovery testing
7. Your Rights and Choices
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your data in a readable format
- Opt-out: Unsubscribe from marketing communications
- Privacy Controls: Manage your privacy settings within the platform
To exercise these rights, contact us at privacy@kholasa.live
8. Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data retained while your account is active
- Educational Records: Retained according to institutional policies (typically 3-7 years after graduation)
- Inactive Accounts: Deleted after 2 years of inactivity (with prior notice)
- Legal Requirements: Some data may be retained longer to comply with legal obligations
9. International Data Transfers
Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including adherence to privacy frameworks and contractual protections.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Your continued use of our services after such updates constitutes acceptance of the revised policy.
11. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact us: