Privacy Policy

Last updated: 31 May 2026

What we collect

When you sign up:

Email address (used for login and notifications)
Optional: full name, phone number, city

When you book a class:

Booking history (which teacher, when, status)
Payment metadata (amount, transaction ID — NOT card details)

If you become a teacher:

Profile information: bio, qualifications, photo URL, demo video URL
Bank account details for payouts (encrypted, accessed only for payments)

Automatically:

Pages visited (for understanding usage, no advertising trackers)
Browser type, device info (for technical compatibility)
IP address (for fraud prevention)

What we don't collect

We do NOT store your credit card numbers or CVV. Razorpay handles all card processing.
We do NOT sell your data to third parties.
We do NOT track you across other websites (no Facebook pixel, no remarketing pixels).
We do NOT show ads on the Platform.

How we use your data

To run the platform — match students with teachers, process bookings, handle payments
To send essential communications (booking confirmations, reminders, review requests)
To improve the Platform (anonymous, aggregated usage analysis)
To prevent fraud, abuse, and platform violations
To comply with legal obligations (tax records, GST, court orders)

Who can access your data

Your teacher / your students: sees only the minimum needed for the class — your name and class details. Email/phone are not shared.
Razorpay (payment processor): for processing payments. Their privacy policy is at razorpay.com/privacy
Resend (email service): only the destination email address, used to deliver notifications
Supabase (database hosting): stores all your data on AWS Mumbai (ap-south-1). They are GDPR compliant and SOC 2 certified.
Vercel (web hosting): serves the website. Stores no personal data permanently.

Where your data lives

Your data is stored on cloud servers physically located in Mumbai, India. We do not transfer data outside India unless required for technical operations (e.g. emails routing through Resend).

Your rights

Access: view your profile and bookings anytime in your dashboard
Correction: update your details at /dashboard/profile
Deletion: request account deletion by emailing us. We delete personal data within 30 days, except where required by law (e.g. payment records for tax)
Portability: request a copy of your data in JSON format via email
Opt-out of emails: reply to any email with "unsubscribe", or contact us

Cookies

We use cookies for:

Essential: keeping you logged in (Supabase auth session)
Functional: remembering filter preferences on the teachers directory

We do not use cookies for advertising or cross-site tracking.

Children

Kala Kalpataruvu is intended for users aged 18 and older. If you are a parent registering on behalf of a minor, you assume responsibility for their use. We do not knowingly collect data from children under 18 without parental consent.

Security

We use industry-standard practices:

HTTPS encryption on all pages
Bcrypt-hashed passwords (we never see your password)
Database access controlled by row-level security policies
Razorpay's PCI-DSS Level 1 compliance for card data
Cryptographic signature verification on all payment confirmations

No system is 100% secure. In case of a data breach, we will notify affected users within 72 hours.

Changes to this policy

We may update this Privacy Policy. Material changes will be emailed to all users.

Contact

For privacy questions or data requests: support@projectk.in (or padmaraju.devops@gmail.com until the custom domain is live).