Privacy Policy

1. Introduction

Krackitedu ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our KrackIt platform (the "Platform").

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and email address
• Account credentials (username and encrypted password)
• Profile information (optional)
• Payment information (processed by third-party payment processors)
• Communication preferences

2.2 Usage Data

We automatically collect information about how you use the Platform, including:

• Quiz attempts and scores
• Questions answered and time spent
• Study patterns and progress
• Device information (type, operating system, browser)
• IP address and location data
• Login times and frequency of use

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Platform and store certain information. Types of cookies we use:

• Essential Cookies: Required for the Platform to function
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with the Platform
• Marketing Cookies: Track advertising effectiveness (with your consent)

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the Platform
• To manage your account and subscription
• To process your transactions
• To track your progress and provide personalized recommendations
• To send you notifications about your account and progress
• To improve our services and develop new features
• To communicate with you about updates and promotional offers
• To prevent fraud and enhance security
• To comply with legal obligations
• To analyze usage patterns and improve user experience

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your information depends on the specific context:

• Contract: Processing necessary to provide the services you requested
• Consent: You have given explicit consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligation: Processing required to comply with applicable laws

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf:

• Payment processors (Razorpay)
• Cloud hosting providers (Google Firebase, Vercel)
• Analytics providers (Google Analytics)
• Email service providers
• Customer support tools

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure password storage (hashing and salting)
• Regular backups

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data retained for 3 years after last activity
• Deleted Accounts: Most data deleted within 30 days; some data retained for legal/compliance purposes
• Usage Data: Aggregated analytics data may be retained indefinitely

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request transfer of your data to another service
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us at krackitedu@gmail.com. We will respond within 30 days.

9. Children's Privacy

Our Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your jurisdiction where data protection laws may differ. By using the Platform, you consent to such transfers.

11. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Material changes will be communicated via email.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

14. Data Protection Officer

For privacy-related concerns or to exercise your rights, you may contact our Data Protection Officer at: krackitedu@gmail.com