Privacy Policy

1. Information We Collect

We collect only the minimum necessary data required to deliver safe, effective educational and testing services.

• School Administrators & Teachers: Name, institutional email address, school affiliation, job title, and billing details.
• Students: Username, student ID (assigned by the school), grade level, exam responses, performance metrics, and learning analytics. Note: We do not collect student phone numbers or personal emails unless explicitly provided through a school-approved account.
• Parents: Name, email address, and linked student accounts (for tracking performance or managing consent).
• Automatically Collected Information: IP address, device type, browser settings, and platform usage data (via functional cookies) strictly to maintain security and prevent cheating during examinations.

2. How We Use the Information

We use the collected data strictly for educational, administrative, and security purposes. We never sell user data or use student data for targeted behavioral advertising.

• To host, grade, and analyze private examination performance.
• To allow teachers and administrators to track student learning progress.
• To send administrative alerts, platform updates, or student reports to parents and educators.
• To detect, prevent, and investigate technical issues, unauthorized access, or academic dishonesty.

3. Data Sharing and Internal Security Protocols

We restrict data access to maintain student and institutional privacy. We share your information only under the following strict conditions:

• Internal Personnel Restrictions: All Company personnel, including full-time and part-time internal staff, who access or process system data are legally bound by strict, comprehensive, lifelong Non-Disclosure Agreements (NDAs) protecting user identity and platform test integrity.
• With Your School: Student exam results, progress trackers, and activity metrics are fully accessible to authorized school administrators and teachers.
• With Parents: Student data is shared with parents or legal guardians who possess linked parental accounts.
• With Trusted Service Providers: We share necessary operational data with cloud hosting providers (e.g., AWS, Google Cloud) and payment processors who are legally bound by strict confidentiality agreements.
• For Legal Compliance: We may disclose data if required by law, court order, or to protect the safety and security of our users.

4. Children's Privacy & Parental Consent

Protecting minors is our absolute priority. The Platform complies with global digital safety standards for children.

• School-Verified Consent: When schools utilize TestPapr.com, the school administration acts as the agent for parents to provide initial consent for student data collection, as agreed upon during checkout.
• Parental Rights: Parents have the absolute right to review their child's collected personal data, request its deletion, and refuse to permit further collection or use. To exercise these rights, parents can contact their school administration or reach out to us directly at privacy@kinfrax.com.

5. Data Security and Retention

• Security Measures: We implement industry-standard encryption (AES-256 for data at rest and TLS for data in transit) to safeguard user records, exam answers, and school profiles against unauthorized breaches.
• Retention Limits: We retain student exam and performance data only for as long as required by the educational institution or as legally required for academic verification. School profiles can request permanent data purging at the termination of their platform subscription.

6. International Compliance & User Rights

Depending on your location, you hold distinct legal rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your data.

• India (DPDP Act Compliance): We process data lawfully based on clear institutional consent. Users may request information deletion or register grievances with our Data Protection Officer.
• United States (COPPA/FERPA Compliance): We protect student education records and act as a safe "school official" under institutional control.

7. Changes to This Policy

We may periodically update this Privacy Policy to reflect evolving legal standards. If we make material updates affecting student data, we will prominently notify school administrators and parents via email or explicit platform banners before the changes take effect.

8. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this policy, please contact us at: