1 Introduction
KosClass ("we", "us", "our") is committed to protecting the privacy of our users — teachers, students, parents, and school administrators. This Privacy Policy explains what personal information we collect, how we use it, and your rights in relation to it.
This policy applies to all users of the KosClass platform, available at kosclass.com, including our web application, games, and related services. It does not apply to third-party websites linked from our Platform.
By using KosClass, you consent to the collection and use of information as described in this Privacy Policy.
2 Information We Collect
Information you provide to us
- Account registration: email address, username, password (encrypted), role (teacher/student/parent), country, and grade level (for teachers)
- Profile information: name, school name (optional)
- Payment information: billing details processed securely by our payment providers — we do not store full card numbers or crypto wallet keys
- Communications: messages you send to our support team
- User-generated content: games and educational materials you create on the Platform
Information collected automatically
- Log data: IP address, browser type, device information, pages visited, time and date of access
- Usage data: features used, games played, game scores (anonymised where possible)
- Cookies: see our Cookie Policy for full details
Information we do NOT collect
KosClass does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or biometric data. We do not collect personal information from students who participate in games without accounts.
3 How We Use Your Data
We use the personal information we collect for the following purposes:
- To provide, operate, and improve the KosClass platform
- To create and manage your account
- To process payments and send billing communications
- To send service-related notifications (e.g. password resets, account updates)
- To send marketing emails, with your consent (you can unsubscribe at any time)
- To analyse usage patterns and improve platform performance
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
- To provide customer support
5 Children's Privacy (COPPA)
The protection of children's privacy is one of our highest priorities. KosClass is designed so that students can participate in games without creating accounts or providing any personal information — they simply join via the teacher's screen using a class code.
KosClass complies with the Children's Online Privacy Protection Act (COPPA) for users in the United States. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent or appropriate school consent.
If a teacher wishes to create student accounts, the teacher or school is responsible for ensuring that appropriate parental consent has been obtained under applicable local laws before student accounts are created.
If you believe we have inadvertently collected personal information from a child under 13 without proper consent, please contact us immediately at privacy@kosclass.com and we will delete the information promptly.
We extend these protections to children in all jurisdictions worldwide, even where not legally required to do so.
6 Student Data
KosClass is committed to the responsible handling of student data. Our commitments include:
- We collect only the minimum student data necessary to provide the service
- Student data is never used for advertising or marketing purposes
- Student data is never sold or shared with data brokers
- Student data is used only to provide educational services
- Schools and teachers retain control over student data in their classes
- We provide Data Processing Agreements (DPAs) for school customers upon request
KosClass acts as a data processor for student data collected at the direction of schools and teachers, who remain the data controllers.
7 Data Retention
We retain personal information for as long as necessary to provide our services and comply with legal obligations:
- Active accounts: data retained while your account is active
- Deleted accounts: personal data deleted within 30 days of account deletion, except where required by law
- Deleted classes: kept in recycle bin for 30 days then permanently deleted
- Payment records: retained for 7 years for tax and legal compliance
- Log files: retained for up to 12 months then anonymised
You may request deletion of your data at any time by contacting privacy@kosclass.com.
8 Data Security
KosClass implements appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction. Our security measures include:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of passwords (bcrypt hashing)
- Regular security audits and vulnerability assessments
- Access controls — only authorised staff can access user data
- Secure data centres with physical access controls
While we take security seriously, no method of electronic transmission is 100% secure. If you believe your account has been compromised, please contact us immediately.
9 Your Rights Under GDPR (EU/UK Users)
If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:
To exercise any of these rights, contact us at privacy@kosclass.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
Our legal basis for processing personal data is: contract (to provide our services), consent (for marketing), and legitimate interests (for security and platform improvement).
10 Your Rights Under CCPA (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:
- Right to Know: request disclosure of the categories and specific pieces of personal information we collect about you
- Right to Delete: request deletion of your personal information, subject to certain exceptions
- Right to Opt-Out: opt out of the sale of your personal information — KosClass does not sell personal information
- Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at privacy@kosclass.com. We will respond within 45 days.
11 International Data Transfers
KosClass operates globally and your data may be transferred to and stored in countries outside your country of residence. When we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.
12 Third-Party Services
KosClass uses the following categories of trusted third-party service providers:
- Hosting & infrastructure: to store and serve the Platform securely
- Payment processing: to process Premium subscription payments (we do not store full payment details)
- Email delivery: to send transactional and marketing emails
- Analytics: to understand how users interact with the Platform (anonymised where possible)
This Privacy Policy does not cover the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you use.
13 Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users by email and post the updated policy on this page with a new "Last Updated" date.
Your continued use of KosClass after the changes take effect constitutes your acceptance of the updated Privacy Policy.
14 Contact Us
For any privacy-related questions or to exercise your data rights:
📧 Privacy enquiries: privacy@kosclass.com
📧 Data deletion requests: privacy@kosclass.com
📧 General support: support@kosclass.com