Privacy Policy

The relevant data controller / Data Fiduciary is:

Where required by applicable law, KA Preps may appoint a Data Protection Officer, representative or other privacy contact.

Depending on how you use our Services, we may process information relating to:

• parents and guardians;
• students and learners;
• educators and tutors;
• prospective customers;
• existing customers;
• counselling participants;
• university applicants;
• school-selection users;
• website visitors;
• application users;
• authorised representatives;

A. Parent / Guardian Information

This may include:

• name;
• email address;
• mobile number;
• country and city;
• relationship to student;
• communication preferences;
• billing information;
• account information;
• enquiries and communications;

B. Student Information

Depending on the Services used, this may include:

• name;
• age or date of birth;
• grade/year;
• curriculum;
• school;
• subjects;
• academic goals;
• examination board;
• examination dates;
• academic performance;
• grades and marks;
• assignments;
• answer scripts;
• reports;
• learning preferences;
• academic strengths and challenges;
• tutoring history;
• progress information;
• profile-building interests;
• school preferences;
• university interests;
• extracurricular information;
• other information voluntarily provided for educational services;

C. Educator Information

For educators, we may collect:

• name;
• contact information;
• qualifications;
• teaching experience;
• school experience;
• curriculum experience;
• certifications;
• professional profile;
• availability;
• documents supplied for verification;
• payment information;
• performance and service-related information;

D. Transaction Information

We may receive:

• package purchased;
• invoice details;
• transaction reference;
• payment status;
• refund information;
• billing information;

Complete payment-card information may be processed directly by authorised payment providers rather than stored by KA Preps.

E. Technical Information

When you use our website or application, we may collect information such as:

• IP address;
• device type;
• operating system;
• browser;
• application version;
• device identifiers where permitted;
• log information;
• approximate location derived from technical information where permitted;
• crash reports;
• usage information;
• cookies and similar technologies;

F. Communication Information

We may process information contained in:

• emails;
• support requests;
• WhatsApp or other messaging interactions;
• counselling conversations;
• customer-service communications;
• voice calls;
• appointment records;
• other communications with KA Preps;

Where calls are recorded, we will provide an appropriate notice where required by applicable law.

Unless specifically requested for a legitimate purpose, users should not submit:

• passwords;
• payment-card PINs;
• banking passwords;
• government identification numbers;
• highly sensitive medical information;
• biometric information;
• information about another person without appropriate authority;
• other sensitive information unnecessary for the Services;

Where sensitive information is genuinely necessary for a particular service, KA Preps will handle it in accordance with applicable law and appropriate safeguards.

We may collect information:

• directly from you;
• from a parent or legal guardian;
• from a student;
• from an authorised representative;
• from educators;
• from schools or institutions where appropriately authorised;
• through our website;
• through our application;
• through forms;
• through customer-support interactions;
• through bookings and transactions;
• automatically through technical technologies such as cookies;
• from authorised third-party service providers;

Where information about a student is provided by a parent or guardian, the parent/guardian represents that they have appropriate authority to provide that information.

We may use personal information to:

• create and manage accounts;
• provide tutoring;
• arrange trial classes;
• match students with suitable educators;
• conduct academic counselling;
• understand academic requirements;
• monitor academic progress;
• provide personalised educational recommendations;
• provide profile-building recommendations;
• provide school-selection guidance;
• provide university and study-abroad guidance;
• process payments;
• provide customer support;
• communicate with users;
• schedule classes and appointments;
• send service notifications;
• prevent fraud and misuse;
• maintain security;
• improve our website and application;
• improve educational services;
• analyse service performance;
• comply with legal obligations;
• enforce our agreements;
• protect our legal rights;
• perform other purposes disclosed to you at or before collection;

We will not use personal information for materially incompatible purposes without an appropriate legal basis or notice where required by law.

KA Preps may use information supplied by a user to personalise educational recommendations.

For example, the system may use information such as:

• curriculum;
• grade;
• subjects;
• academic goals;
• performance;
• interests;
• school preferences;
• university preferences;
• previous interactions;

These recommendations are intended to assist users and should not be treated as guaranteed academic or admissions outcomes.

KA Preps may use AI-assisted technologies for:

• lead qualification;
• conversational assistance;
• scheduling;
• administrative workflows;
• recommendations;
• personalisation;
• customer support;
• analysis;
• communication;
• service improvement;

Where AI systems process personal information, we seek to use appropriate contractual, technical and organisational safeguards.

We do not intend to use student information to make decisions that have legal or similarly significant effects without appropriate human oversight where required by applicable law.

AI-generated information may contain errors. Users should verify important academic, admissions, financial or other consequential information independently.

KA Preps provides services that may be used for the education of minors.

We therefore apply additional safeguards to information relating to children.

Where required:

• a parent or legal guardian will provide consent or authorisation;
• we will limit collection to information reasonably necessary for the relevant service;
• we will not knowingly sell children's personal information;
• we will not knowingly use children's information for unrelated commercial purposes;
• we will provide appropriate mechanisms for parents/guardians to exercise applicable rights;
• we will take reasonable steps to protect children's information;

For users in jurisdictions where additional children's privacy laws apply, KA Preps will comply with applicable requirements.

For example, where the US COPPA framework applies, covered services may need to provide parental notice and obtain verifiable parental consent before collecting personal information from children under 13.

For UK users, children have data-protection rights and online services likely to be accessed by children are expected to provide clear, age-appropriate privacy information and appropriate safeguards.

Depending on the applicable jurisdiction and circumstances, KA Preps may process personal information based on one or more of the following:

• consent;
• performance of a contract;
• taking steps at the user's request before entering into a contract;
• compliance with legal obligations;
• legitimate interests, where legally available;
• protection of vital interests where legally applicable;
• establishment, exercise or defence of legal claims;
• other lawful grounds recognised under applicable law;

Where processing is based on consent, you may withdraw consent subject to legal limitations.

Under GDPR, consent must be freely given, specific, informed and unambiguous, and withdrawal must be as easy as giving consent.

We may send promotional communications where permitted by law and where an appropriate legal basis exists. You may opt out of promotional communications at any time.

You will continue to receive essential service communications where necessary, such as:

• account security notices;
• class confirmations;
• payment notifications;
• appointment notifications;
• important service changes;
• other transactional communications;

Our website and application may use cookies, pixels, SDKs, local storage and similar technologies for purposes such as:

• authentication;
• security;
• preferences;
• analytics;
• performance;
• functionality;
• advertising, where applicable;
• understanding how users interact with our Services;

Where legally required, we will request consent for non-essential cookies or similar technologies.

Users may control cookies through browser or device settings, subject to functionality limitations.

We may disclose personal information to trusted third parties where necessary for legitimate business or service purposes, including:

• educators and tutors;
• technology providers;
• CRM providers;
• cloud hosting providers;
• payment processors;
• communication providers;
• scheduling providers;
• AI technology providers;
• analytics providers;
• customer-support providers;
• professional advisers;
• legal and compliance advisers;
• auditors;
• insurers;
• regulators;
• government authorities where legally required;
• other service providers necessary to operate the Services;

We require service providers handling personal information on our behalf to implement appropriate confidentiality and security measures.

We do not sell personal information as a business model.

Where applicable law gives you a right to opt out of “sale” or “sharing” of personal information, we will provide the required mechanism.

Where a student is assigned to an educator, relevant information may be shared with that educator to provide the educational service. This may include:

• student's name;
• curriculum;
• grade;
• subject;
• academic goals;
• relevant performance information;
• learning requirements;
• information necessary to conduct classes effectively;

Educators are expected to use student information only for authorised educational purposes and to maintain confidentiality.

Because KA Preps may use international technology, cloud, communication, payment and AI providers, personal information may be processed in countries other than the country in which the user resides.

Where applicable law requires safeguards for international transfers, KA Preps will implement appropriate safeguards. These may include contractual protections, approved transfer mechanisms, adequacy decisions or other lawful mechanisms recognised by the relevant jurisdiction.

KA Preps uses reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure;
• destruction;
• other unlawful processing;

Depending on the system and nature of the data, safeguards may include:

• access controls;
• authentication;
• encryption where appropriate;
• role-based access;
• logging;
• backups;
• secure infrastructure;
• vendor controls;
• employee confidentiality obligations;
• security monitoring;

No internet-based system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for:

• providing Services;
• maintaining accounts;
• fulfilling contractual obligations;
• complying with legal requirements;
• resolving disputes;
• enforcing agreements;
• preventing fraud;
• maintaining business records;
• other legitimate purposes;

When personal information is no longer required, we will delete, anonymise or securely dispose of it in accordance with applicable law and our retention procedures.

Specific retention periods may vary depending on the type of information and legal requirements.

Depending on your jurisdiction, you may have rights including:

• right to access personal information;
• right to correction;
• right to deletion/erasure;
• right to withdraw consent;
• right to restrict processing;
• right to object to certain processing;
• right to data portability;
• right to obtain information about processing;
• right to complain to a relevant supervisory or regulatory authority;
• right to request review of certain automated decisions;
• other rights provided by applicable law;

Rights may be subject to lawful exceptions.

For example, GDPR provides rights concerning access and transparency and requires controllers to provide specified information about purposes, legal bases, recipients and international transfers.

For users to whom India's Digital Personal Data Protection Act, 2023 and applicable rules apply, KA Preps will provide the rights and mechanisms required by applicable law.

These may include mechanisms for:

• access to information about personal data processing;
• correction;
• updating;
• erasure where applicable;
• withdrawal of consent;
• grievance redressal;
• nomination or other rights where applicable;

The DPDP Rules, 2025 require notices to be clear, standalone and understandable and to identify the personal data collected and purposes of processing.

Privacy / Data Protection Contact: support@astrykx.com

Where GDPR applies, KA Preps will provide the rights and protections required under GDPR.

These may include rights relating to:

• access;
• rectification;
• erasure;
• restriction;
• objection;
• portability;
• withdrawal of consent;
• rights relating to certain automated decision-making;

Where required, KA Preps will identify an EU representative and/or Data Protection Officer through an appropriate privacy notice.

Where UK GDPR or other UK data-protection laws apply, KA Preps will provide the rights and protections required by applicable UK law.

Where the Services are likely to be accessed by children, we will take appropriate steps toward age-appropriate transparency and protection of children's information.

Where US privacy laws apply, KA Preps will comply with applicable requirements.

For users in California, where the California Consumer Privacy Act (“CCPA”) applies, additional privacy disclosures and rights may apply, including rights relating to access, deletion, correction and certain uses or disclosures of personal information.

The California Privacy Protection Agency notes that covered privacy policies must describe categories of personal information, sources, purposes and applicable disclosures/sales/sharing, together with relevant consumer rights.

Where COPPA applies to a child under 13, additional parental-consent and children's privacy obligations apply.

Our website or application may contain links to third-party websites, services, universities, schools, educational resources or other platforms.

KA Preps is not responsible for the privacy practices of third-party websites.

Users should review the privacy policies of those third parties before submitting information.

If users voluntarily post or submit content to an area intended to be publicly accessible, that information may become visible to other users.

Students and parents should not post sensitive personal information publicly.

KA Preps will not knowingly publish identifiable student information for promotional purposes without appropriate authorisation where required.

If KA Preps becomes aware of a personal-data breach, we will assess and respond to it in accordance with applicable law.

Where notification to users, regulators, parents, authorities or other parties is legally required, KA Preps will provide such notification within the applicable timeframes.

If you believe that a child has:

• been contacted inappropriately;
• experienced harassment;
• been exposed to unsafe conduct;
• had information misused;
• experienced another child-safety concern;

Please contact us immediately at support@astrykx.com.

We will assess reports and take appropriate action.

When you stop using KA Preps, certain information may continue to be retained where necessary for:

• legal compliance;
• financial/accounting records;
• dispute resolution;
• fraud prevention;
• legitimate business records;
• other lawful purposes;

Where information is no longer required, it will be deleted, anonymised or securely disposed of in accordance with applicable retention requirements.

We may update this Privacy Policy periodically.

Where changes materially affect how we process personal information, we will provide appropriate notice where required by law.

The updated version will be published on our website and/or application with a revised “Last Updated” date.

Data Protection / Privacy Requests

Please include:

• your name;
• registered email/mobile number;
• nature of the request;
• relevant account/student information necessary to identify the request;
• any other information reasonably necessary to process the request;

We may need to verify identity or authority before fulfilling certain requests, particularly requests involving a child or another person's information.

We will respond within the period required by applicable law.

Last Updated: 30 June 2026