Legal
Kite & Key Privacy Policy
Version 1.0 · effective 29 October 2026
In short
- Kite & Key is an interactive learning platform that schools use to reinforce classroom teaching, give students practice that adapts to them, and run co-curricular events such as debates and quizzes.
- Your school decides how student information is used, and we act on the school’s instructions.
- We hold only a student’s name, grade, section and house, and the learning records the platform creates.
- We never sell personal data, never show advertising, and never use information that identifies a student to train AI.
- We do not contact parents or students by SMS or email.
1. Who we are
Kite & Key is operated by Kite and Key Technologies Private Limited (CIN U85499KA2026PTC221043), C.M. No. 561, WeWork Prestige Cube, Site 26, Laskar Hosur Road, Adugodi, Bangalore South 560030, Karnataka, India (“Kite & Key”, “we”, “us”).
2. Who is responsible for your information
Each school that uses Kite & Key owns the information about its students and decides how it is used. We run the platform for the school and process student information only on the school’s instructions. We are directly responsible for the principal’s and administrators’ own account details, and for keeping the platform secure.
3. Who this policy covers
Students, principals and school administrators who use Kite & Key through a participating school, and visitors to our website. We do not offer accounts to children directly: every student account is created by a school.
4. What we hold
| Who | What we hold | Where it comes from |
|---|---|---|
| Students | Name, grade, section, house | The school |
| Students | Answers, scores, attempts, time spent per question, practice activity, progress and mastery levels, suggested learning gaps, event entries, judges’ feedback and results | Created as the student uses the platform |
| Principals and administrators | Name, designation, work email, mobile number | The school |
| Everyone who logs in | Login records, device and browser type, IP address, actions taken on the platform | Created as you use the platform |
We do not collect students’ or parents’ phone numbers, email or home addresses, photographs, dates of birth, ID numbers, or health, financial, biometric, caste or religious information, or precise location. We do not use advertising or tracking cookies.
5. How we use it
- To create accounts and organise students by grade, section and house.
- To give students practice and assessments that adapt to how they are doing, and to show teachers and the school where students need support.
- To run co-curricular events, including sharing a student’s name, house and entry with our judges.
- To contact the principal and administrators about the programme and their accounts.
- To keep the platform secure and prevent misuse.
- To meet our legal obligations.
We do not use student information for advertising, marketing or profiling unrelated to the student’s own learning.
6. Students’ information
Most of our users are under 18. We:
- hold only what is listed above;
- use learning information only for the student’s education at their school;
- never show students advertising;
- never use information that identifies a student to train AI;
- never publish a student’s name, photograph or work outside the school, including on public leaderboards, unless the school has the parent’s written permission; and
- give students a short, child-friendly version of this policy.
The school is responsible for informing parents and guardians about the programme and for obtaining any permissions needed. Parents with questions can contact the school or write to us.
7. Suggestions made by the platform
The platform suggests where a student may have a gap in understanding and what to practise next. These suggestions support teachers’ judgement; they do not replace it. No important decision about a student should be made on a suggestion alone, and teachers can review and change them.
8. Who we share it with
- The student’s own school.
- Our judges and adjudicators at events, who see a student’s name, house and entry and are bound to confidentiality.
- Our secure hosting provider, which stores the data in India.
- Authorities, only when the law requires it.
At inter-school events, other schools see only a student’s house and school, not their name, unless the school has the parent’s written permission. We do not sell, rent or trade personal information.
9. Where it is stored and how it is protected
Data is stored in India. It is encrypted in transit and at rest. Each person sees only what their role needs. We keep access logs and regular backups, and our team is bound by confidentiality.
10. How long we keep it
| Information | How long |
|---|---|
| Student information and learning records | For the school’s programme. At the end, the school receives a copy and we permanently delete the data within 90 days, unless the school has agreed otherwise in writing. |
| A student who leaves the programme, or whose family asks for deletion | Account deactivated within 3 working days; personal information deleted within 15 working days of the school telling us |
| Principal and administrator accounts | While you hold the role, then 90 days |
| Records of terms accepted and confirmations given | The programme period plus one year |
| Security and access logs | One year |
11. Your rights
Principals and administrators can ask to see, correct or delete their own information, and parents can do the same for their child. Anyone can complain about how their information is handled. For students, requests usually go through the school. Parents may also write to us directly, and we will let the school know. We acknowledge requests promptly and answer questions within 7 working days.
12. If something goes wrong
If a security incident affects personal information, we will tell the school without delay so it can inform those affected. We will also report to the authorities as the law requires.
13. Contact
Email team@kiteandkey.in. Grievance Officer at the address in section 1. If you are not satisfied with our response, you may approach the Data Protection Board of India once its complaints process is available.
14. Changes
We will show a notice on the platform before any significant change takes effect, and ask for acceptance again where needed.
Questions about this policy?
Write to us and we will acknowledge promptly and answer within 7 working days. If you are a parent, your school can usually answer faster — and we will let them know when you come to us directly.
Email team@kiteandkey.in