Privacy Policy for KrypAcademix

The educational institution that provides your access generally controls school records and decides why they are processed. Krypzon operates KrypAcademix as a service provider and data processor for that institution. Some information, such as support requests, security logs, and direct account administration, may be handled by Krypzon for its own legitimate operational purposes.

Depending on your institution, role, and enabled modules, the Platform may process:

• Account and identity information: name, email address, phone number, school code, role, account status, class or section, student identifiers, and other profile information supplied by you or your institution.
• School and operational records: attendance, assessments, homework, notices, leave requests, approvals, meeting or visit records, transport events, safety reports, gate passes, assets, and other institution-configured workflows.
• Payment references: fee dues, transaction status, and references such as a UPI transaction or UTR supplied for reconciliation. KrypAcademix does not receive or store your UPI PIN or full bank-card credentials.
• Content you submit: form responses, comments, attachments, photographs, imported records, and support messages.
• Technical information: IP address, session and security events, app version, device or operating-system details, crash or diagnostic information, and network requests needed to operate and protect the Platform.

Permissions are requested only when a related feature is used:

• Camera or photos: scanning KrypAcademix QR codes and selecting or capturing an image for a workflow.
• Location: an on-demand location check for a location-enabled workflow, such as institution geofence verification. KrypAcademix does not use this permission to run unrelated continuous background tracking.
• Microphone and speech recognition: converting speech into text when you choose a voice-input action. Recognition may be performed by the speech service configured on your device.
• Notifications: delivering institution communications, reminders, and service or security alerts.
• Device authentication: optional App Protection uses the operating system's PIN, pattern, password, fingerprint, or face-authentication interface. KrypAcademix receives only the authentication result, not your biometric data or device credential.

If you choose Google or Facebook sign-in, that provider processes the sign-in request under its own privacy policy and supplies KrypAcademix with authentication information and profile details you have permitted it to share. Email-and-password access is also available where enabled by the institution.

Information is used to:

• authenticate users and enforce school, tenant, and role-based access;
• provide school modules and keep institution records synchronized;
• deliver communications and notifications;
• support fee reconciliation without acting as a bank or payment gateway;
• secure accounts, prevent abuse, investigate faults, and maintain reliability;
• respond to support requests and comply with applicable obligations.

Krypzon does not sell personal information.

Information may be shared:

• with authorized users at your institution according to their roles;
• with infrastructure, messaging, authentication, storage, and support providers that help operate the Platform;
• when you direct a feature to open another application or share content;
• when required by law, a valid legal process, or to protect users, the institution, Krypzon, or the Platform.

Public or broadly visible school content should be submitted only when the relevant workflow is intended for that audience.

School records are retained according to the institution's instructions, operational needs, and applicable obligations. Account, security, financial-reconciliation, safeguarding, and dispute records may need to be retained for a limited period even after access ends.

You can request account deletion in the app where that option is available or at https://krypacademix.krypzon.co.in/delete-account. Requests involving institution-controlled records may require verification or action by your school. Deletion or anonymization does not override records that must legally or operationally be retained.

KrypAcademix is intended for institution-managed education workflows. Schools and guardians are responsible for providing any notices and permissions required for student use. Student access and records should be provisioned and supervised by the institution according to applicable law and school policy.

KrypAcademix uses safeguards such as encrypted network transport, access controls, secure session storage, role-based authorization, and optional device authentication. No system is completely secure, so users must protect their credentials and report suspected unauthorized access promptly.

Contact your institution first to access or correct school-controlled information. You may also use the in-app Contact & Support area for technical privacy questions. Rights vary by location and may include access, correction, deletion, restriction, or objection.

We may update this policy as the Platform or legal requirements change. Material changes will be communicated through an appropriate channel.

For technical privacy questions, contact krypacademixteam@gmail.com or visit https://krypacademix.krypzon.co.in/contact.