Privacy Policy

1. Who we are

K-Academia is an online learning platform where teachers run classes and students join them with an invite code. "We" means the K-Academia team, which operates the service and is the data controller for the information described here.

Questions or requests about your data: use the contact form. We answer privacy requests within 30 days.

2. What we collect

• Account data: your name, email address, account type (teacher or student), a password hash if you sign up with email (we never store the password itself), and the Google or Facebook account ID if you sign in with those.
• Profile data you choose to add: bio and profile picture.
• Class content: material teachers upload (PDFs, videos, images, documents), quizzes, assignments and their attachments.
• Learning activity: which resources you opened and completed, quiz answers and scores, assignment submissions, grades and teacher feedback, your study streak.
• Messages: class discussion posts, private teacher–student messages and attached files.
• AI tutor use: the questions you ask the tutor and its answers.
• Technical data: IP address, browser type and time of requests, kept in security logs to protect accounts (for example to limit repeated login attempts) and to investigate problems.

3. How we use it

• To run the service: accounts, classes, content delivery, quizzes, grading, discussions and messages.
• To show teachers their students' progress, scores and submissions in the classes they teach.
• To protect the service: rate limits, security logs, preventing abuse and investigating incidents.
• To send service emails: email confirmation, password resets, and notifications you can turn off in Settings.
• We do not sell your data, and we do not use it for advertising.

4. Watermarked documents

When a student opens a teacher's PDF or image, we deliver a copy with the student's name, email address and the date printed on it. This discourages sharing course material outside the class. Only that student (and anyone they share the copy with) can see the watermark.

5. AI features

The AI tutor and question generator use third-party AI models. To answer questions from course material, text extracted from teachers' PDFs is sent to Google (Gemini) and, as a fallback, Groq, and stored as question–answer pairs with embeddings in our database. Students' tutor questions are sent to the same providers to generate answers.

We send only what the feature needs — the question and the relevant course passages — never your email address or password. Teachers can switch the AI tutor and document indexing off for any class in its settings, and nothing from that class is sent to AI providers afterwards.

AI answers can be wrong. They are grounded in the class material and cite pages, but they are not a substitute for your teacher.

6. Service providers (processors)

We use these providers to run K-Academia. Each processes data only to provide its service to us:

• Vercel — application hosting (USA/EU).
• Prisma Data Platform (Prisma Postgres) — database.
• Cloudflare R2 — file storage for uploads and watermarked copies.
• Pusher — real-time notifications that a new message or submission exists (no message content).
• Google (Gemini API) and Groq — AI tutor, question generation and document indexing (see section 5).
• Mux — video hosting and streaming for lecture videos.
• Our email provider — confirmation, password-reset and notification emails.
• Sentry — error reports, configured not to include personal data.
• Stripe — payments for teacher plans. Card details go directly to Stripe; we never see them.
• Google and Facebook — only if you choose to sign in with them.

7. Who can see your information

• Teachers see the name, email, progress, scores, submissions and messages of students enrolled in their classes.
• Students see their teachers' names, their classmates' names and profile pictures in the class discussion, and a leaderboard of ranks (not scores).
• We share data with the providers above, and with authorities only when the law requires it.

8. How long we keep it

• Account and learning data: while your account exists. When you delete your account it is erased immediately from the live system and from backups within 30 days.
• A teacher deleting a class erases its content, quizzes, attempts, submissions and discussion.
• Security logs: up to 12 months.
• Contact-form messages: up to 24 months.

9. Your rights

You can see and correct your profile in Settings, download a copy of your data (Settings → Account → Download my data), and delete your account (Settings → Account → Delete account). You can also ask us to restrict or stop processing, or object to it, through the contact form. Depending on where you live you may also complain to your data protection authority.

10. Children

K-Academia is for users aged 13 and over. Students under 16 may use it only with the consent of a parent or guardian, which the school or teacher who invites them is responsible for obtaining. If you believe a child under 13 has an account, contact us and we will delete it.

11. Cookies

We use only cookies that the service needs to work: a session cookie that keeps you signed in, a security token for sign-in forms, and your language choice. We use no advertising or tracking cookies, so there is no cookie banner.

12. Security

Passwords are hashed with bcrypt, all traffic is encrypted, files are private and delivered through short-lived signed links, and access to every class is checked on each request. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.

13. Changes

If we change this policy materially we will say so in the app and ask you to accept the new version. The version date is at the top of this page.