Who we are

KindraIQ is currently operated by an individual based in Singapore ("we", "us", "the Operator") rather than a registered company — see our Terms of Service for details. KindraIQ is an AI-powered learning platform for students following the UK National Curriculum, India's CBSE/NCERT curricula, and Singapore's MOE curriculum. If you have questions about this policy or your data, please use the Feedback option inside the app (available from your Parent, School, or Student dashboard) — it reaches the Operator directly.

What data we collect

• Account details — first name, email address, country/curriculum and year group, and a 4-digit PIN (we only ever store a one-way hash of your PIN, never the PIN itself).
• Parental consent record — for students whose year group indicates they are likely under 13, we record a parent/guardian consent confirmation and the date it was given.
• Learning activity — quiz and lesson sessions, scores, AI Teacher conversation history, stars, badges, time spent, and questions answered.
• Character Journal entries — wellbeing/behaviour notes a student chooses to submit for their linked parent to review and approve.
• Feedback submissions — name, email, message, star rating and the page you submitted it from.
• Site visit data — your IP address (and a masked version of it), browser/device user-agent string, approximate location derived from your IP (country/region/city), and time spent on the site. This is collected automatically for security, abuse prevention and understanding overall usage trends — never for advertising.

Why we process this data

• To provide the service you've signed up for — necessary to perform our contract with you.
• To keep the platform secure — OTP verification and rate-limiting prevent abuse and unauthorised access (legitimate interest).
• To understand and improve usage of the platform (legitimate interest).
• To email you verification codes, weekly progress digests, and responses to feedback (necessary for the service, or with your consent).
• Where you are a child, our lawful basis is your parent or guardian's consent, given at signup (UK GDPR Article 8 for under-13s; Singapore PDPA guidance on minors; India's Digital Personal Data Protection Act 2023 for under-18s). Our signup flow currently gates consent by school year/grade rather than exact age — see "Children's privacy" below.

Who we share data with

We use a small number of third-party processors to run the service. We don't sell personal data to anyone.

• A cloud hosting & storage provider — hosts the KindraIQ application and stores account and learning data. This data is currently stored and processed in the United States.
• An AI provider — processes the text of AI Teacher conversations and quiz/lesson generation requests in order to generate responses.
• A text-to-speech provider — converts AI Teacher text responses into spoken audio.
• An email provider — sends verification, registration, login-details and weekly digest emails on our behalf.
• An IP-geolocation provider — provides approximate location (country/region/city) for visitor IP addresses, used only for our internal analytics dashboard.

Some of these providers process data outside the UK, Singapore, or India — including in the United States, where KindraIQ is hosted. Each provider publishes its own data-protection terms and relies on Standard Contractual Clauses or equivalent safeguards for international transfers. If you would like to know the specific providers we currently use, email support@kindraiq.com and we will tell you.

Children's privacy

KindraIQ is built for school-age students. Where a student's selected year group indicates they are likely under 13 (or the broadly equivalent grade level under our Indian and Singaporean curricula), we require a parent or guardian consent confirmation before an account can be created. Parents can link to their child's account, review their child's progress and Character Journal entries, and request access to or deletion of their child's data at any time.

India's Digital Personal Data Protection Act 2023 defines a "child" as anyone under 18 and requires verifiable parental consent for all of their data — a broader threshold than the under-13 trigger described above. We are working to align our consent flow with this. If you are the parent of an Indian student aged 13–17, please use the in-app Feedback option to ask us to treat their account as requiring parental consent.

How long we keep data

• Account data is kept until you delete your account or ask us to delete it.
• Site visit/analytics logs are automatically capped at the most recent 500 visits.
• Pending registrations and verification codes automatically expire after 10 minutes.

How we protect your data

PINs are never stored in plain text — only a one-way cryptographic hash. Access to the analytics dashboard is restricted by a separate admin password. We apply rate limiting to prevent automated abuse of the signup and login flows.

Cookies & local storage

We do not use advertising or third-party tracking cookies. The app uses your browser's local storage for two strictly functional purposes only: remembering when a guest session started, and caching your lesson progress on this device. Because these are essential to the feature working and aren't used for tracking or advertising, no cookie consent banner is shown.

Your rights

Under UK GDPR and Singapore's PDPA, you (or, for a child's account, their parent/guardian) have the right to:

• Access a copy of your data — use "Download my data" in your account, or ask via the in-app Feedback option.
• Correct inaccurate data.
• Delete your account and associated data — use "Delete my account" in your account, or ask via the in-app Feedback option.
• Withdraw consent at any time.
• Object to or restrict certain processing.
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office; in Singapore, the Personal Data Protection Commission; in India, the Data Protection Board of India.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions, requests, or complaints about your data: email support@kindraiq.com, or use the Feedback option inside the app (available from your Parent, School, or Student dashboard). We aim to respond to data requests within 30 days.