Privacy Policy
Effective Date: July 12, 2026

1. Introduction

​

At Krunch It, we believe that trust is the foundation of every successful learning community. Whether you are an educator, school leader, ministry official, NGO, development partner, or individual learner, you trust us with information that helps improve teaching, learning, school management, and educational outcomes. We take that responsibility seriously.
 

This Privacy Policy explains how Krunch It, LLC ("Krunch It," "we," "our," or "us") collects, uses, stores, protects, and shares personal information and educational data when you use our websites, mobile applications, web platform, professional learning services, APIs, and other products and services (collectively, the "Platform").
 

Our Platform has been designed using Privacy by Design and Security by Design principles. This means privacy and security are considered throughout the development, operation, and continuous improvement of our technology—not added as an afterthought.
 

This Policy applies to all users of the Platform worldwide unless a separate written agreement governs the services provided to a specific organization. Where local laws or contractual requirements establish additional privacy or security obligations, Krunch It works with customers to support compliance with those requirements.
 

In many cases, schools, ministries of education, NGOs, employers, or other organizations use Krunch It to manage educational programs and professional learning. In these situations, those organizations determine how educational information is collected and managed, while Krunch It securely processes that information on their behalf.
 

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
 

2. Global & Regional Privacy Commitment

​

Krunch It serves educators, schools, governments, NGOs, development partners, and organizations around the world, with a primary focus on supporting education systems across Africa.

​

Because privacy and data protection laws differ across countries and regions, we maintain a global privacy program designed to support internationally recognized privacy principles while adapting to applicable national laws and regulatory requirements wherever our Platform is used.

​

Our privacy practices are designed to align with internationally recognized privacy principles, regional frameworks, and applicable national laws, including, where relevant:

​

International Principles & Frameworks

​

• United Nations Principles on Personal Data Protection and Privacy

• UNESCO Principles on Personal Data Protection and Privacy

• General Data Protection Regulation (GDPR)

• UK General Data Protection Regulation (UK GDPR)

 

African Regional Frameworks

​

• African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention)

• African Union Data Policy Framework

 

National Privacy & Data Protection Laws

​

Our privacy program is designed to support compliance with applicable national privacy and data protection laws, including, where relevant:

​

• Côte d'Ivoire's Law No. 2013-450 on the Protection of Personal Data

• Ghana's Data Protection Act, 2012 (Act 843)

• Kenya's Data Protection Act, 2019

• Nigeria Data Protection Act, 2023

• Rwanda's Law No. 058/2021 Relating to the Protection of Personal Data and Privacy

• South Africa's Protection of Personal Information Act, 2013 (POPIA)

• Tanzania's Personal Data Protection Act, 2022

• Uganda's Data Protection and Privacy Act, 2019

• United States education privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA), where applicable

• Zambia's Data Protection Act, 2021

• Other applicable national privacy, cybersecurity, education, and information governance laws in the countries where we operate

​

As privacy laws and regulatory requirements continue to evolve, Krunch It regularly reviews and enhances its policies, operational practices, technical safeguards, and governance processes to support responsible information management and maintain alignment with applicable legal and regulatory obligations.

​

3. Our Privacy Principles

​

Everything we do is guided by a simple set of privacy principles.

 

Privacy by Design
 

Privacy is considered throughout the design, development, and operation of our Platform.

 

Security by Design
 

We build security into our technology, infrastructure, and operational processes to help protect information against unauthorized access, loss, or misuse.

 

Data Minimization
 

We collect only the information reasonably necessary to provide our services, improve the Platform, support educational objectives, and meet legal or contractual obligations.

 

Purpose Limitation
 

Information is collected and used only for legitimate educational, operational, security, reporting, and support purposes.

 

Transparency
 

We are committed to explaining what information we collect, why we collect it, and how it is used in clear, straightforward language.

 

Accountability
 

We maintain policies, operational procedures, and technical safeguards designed to protect information and promote responsible data management.

 

User Control
 

Where permitted by applicable law, users can access, update, correct, export, or request deletion of their personal information.

 

Educational Data Stewardship
 

Educational information belongs to the individuals and organizations that create or own it. Krunch It acts as a trusted technology provider responsible for securely managing that information on behalf of our customers.

 

Continuous Improvement
 

Technology and privacy expectations continue to evolve. We regularly review and improve our security, privacy, and governance practices to better protect our users and support changing legal requirements.

​

4. Information We Collect

​

We collect information only when it helps us provide, improve, secure, or support the Platform.

 

Depending on how you use Krunch It, we may collect the following types of information.
 

Personal Information

This may include:
 

• Name

• Email address

• Phone number

• Username

• Professional title

• Organization or school

• Profile photo

• Language preferences

• Other information you choose to provide when creating or updating your profile

Professional Information

For educators and organizations, we may collect information such as:
 

• Job title

• School or organization

• Professional learning participation

• Certifications

• Training records

• Teaching assignments

• Professional achievements

Educational Information

Depending on how your organization uses Krunch It, educational information may include the following:
 

• Lesson plans

• Attendance records

• Assessments

• Gradebook information

• Student progress

• School improvement plans

• Professional learning activities

• Classroom resources

• Reports and implementation data
   

Organization Information
 

For schools, districts, ministries, NGOs, and other organizations, we may collect:
 

• Organization profiles

• School information

• Administrative settings

• Licensing information

• Subscription details

• Organizational reports

• User roles and permissions

​

Technical Information
 

When you use the Platform, certain technical information is collected automatically to help us keep the Platform secure and operating effectively.

This may include:
 

• Device type

• Operating system

• Browser type

• IP address

• Application version

• Device identifiers

• Performance information

• Error reports

• Login activity
   

Usage Information
 

We collect information about how the Platform is used, including:
 

• Features accessed

• Time spent using the Platform

• Professional learning participation

• Content created

• Offline synchronization activity

• User preferences
   

This information helps us improve the Platform and better support our users.
 

Location Information
 

Where enabled by you or your organization, the Platform may collect approximate or GPS location information to support location-based features.
 

Location services are optional unless required for a specific feature.
 

Media and User Content
 

Users may upload or create content such as:
 

• Documents

• Images

• Videos

• Audio recordings

• Assessments

• Lesson plans

• Reports

• Comments

• Support requests

• Other educational resources
   

Users are responsible for ensuring they have the appropriate authorization before uploading information relating to students or other individuals.
 

Information We Do Not Collect
 

We do not intentionally collect information that is unnecessary to provide our services.

 

We do not sell personal information or student data, and we do not use student information for behavioral advertising or unrelated commercial purposes.

 

5. How We Collect Information

​

We collect information in several ways depending on how you and your organization use the Platform.

​

Information You Provide

​

You may provide information when you:

​

• Create an account

• Complete your profile

• Join a school or organization

• Participate in professional learning

• Create lesson plans or assessments

• Record attendance or grades

• Upload documents or educational resources

• Submit surveys or feedback

• Contact our support team

• Register for webinars, events, or training

 

You control much of the information you choose to provide, although some information is required to create and manage your account.

 

Information Provided by Organizations

​

Schools, ministries of education, NGOs, employers, districts, and other authorized organizations may provide information to establish user accounts and administer their implementation of the Platform.

​

This may include educator rosters, school information, organizational structures, licensing information, and other administrative data necessary to provide our services.

​

Organizations are responsible for ensuring they have the legal authority to share this information with Krunch It.

​

Information Collected Automatically

​

Like most online platforms, certain information is collected automatically when you use Krunch It. This helps us keep the Platform secure, improve performance, and troubleshoot technical issues.

​

Examples include:

​

• Login activity

• Device information

• Platform performance

• Error reports

• Synchronization activity

• Security logs

• Usage statistics

​

This information is used to operate and improve the Platform—not to track users for advertising purposes.

​

Information from Third Parties

​

With appropriate authorization, we may receive information from trusted third-party services, including:

​

• Identity providers

• Learning management systems

• School information systems

• Government education systems

• Payment providers

• Communication platforms

• Mobile application stores

​

These integrations are used only to provide approved Platform functionality.

​

Cookies and Similar Technologies

​

Our websites and web applications use cookies and similar technologies to:

​

• Keep you signed in

• Remember your preferences

• Improve website performance

• Understand how the Platform is used

• Maintain security

​

Where required by law, we will obtain your consent before using non-essential cookies.

​

You can manage many cookie preferences through your browser settings, although disabling certain cookies may affect some Platform features.

​

6. How We Use Information

​

We use information to deliver secure, reliable, and effective educational services.

 

Specifically, we use information to:

​

Deliver Our Services

​

• Create and manage user accounts

• Authenticate users

• Deliver professional learning

• Support classroom instruction

• Enable collaboration

• Synchronize information across devices

• Provide offline functionality

• Restore information following synchronization

​

Support Schools and Organizations

​

For organizations using Krunch It, information helps us.

​

• Configure schools and districts

• Manage user access

• Support implementation

• Generate reports and dashboards

• Monitor program progress

• Provide customer support

 

Improve the Platform

​

We continually improve our Platform by using information to:

​

• Enhance user experience

• Develop new features

• Improve accessibility

• Resolve software issues

• Optimize performance

• Strengthen security

• Measure Platform reliability

​

Whenever practical, we use aggregated or de-identified information for product improvement and analytics.

​

Communicate with You

​

We may contact you regarding:

​

• Account management

• Security notifications

• Service updates

• Product announcements

• Training opportunities

• Customer support

• Billing or subscription information

​

You may opt out of non-essential communications where permitted by applicable law.

​

Meet Legal and Security Requirements

​

Information may also be used to:

​

• Detect fraud

• Prevent unauthorized access

• Investigate security incidents

• Enforce our Terms of Service

• Comply with applicable legal obligations

• Protect the rights, safety, and security of our users and Platform

​

We will never use student information for behavioral advertising or unrelated commercial marketing.

 

7. Educational Data, Data Ownership & Privacy

​

Educational information deserves a higher standard of protection.

​

Krunch It is designed to help schools, educators, governments, NGOs, and development partners improve educational outcomes while ensuring that educational information is managed responsibly and securely.

​

Data Ownership

​

Educational information processed through the Platform remains the property of the individual or organization that owns it.

​

Depending on the implementation, this may include:

​

• Ministries of Education

• Government agencies

• School systems

• Schools

• Universities

• NGOs

• Development partners

• Employers

• Individual users

​

Krunch It does not claim ownership of customer data, educational records, or user-created educational content.

​

Our Role

​

In most implementations, Krunch It acts as a technology provider and data processor.

Our customers determine:

​

• What information is collected

• Who can access it

• How long is it retained

• Whom may it be shared with

• Which reports are generated

• How their educational information is governed

​

We process information only as authorized by our customers, our agreements with them, and applicable law.

 

Student Privacy

​

Protecting student information is one of our highest priorities.

​

Student information is processed only for legitimate educational purposes and is never:

​

• Sold

• Used for behavioral advertising

• Shared for unrelated commercial purposes

• Used to create marketing profiles

​

Educational Data Stewardship

​

We believe educational information should be used to improve learning—not to exploit it.

​

Our Platform is designed to support responsible collaboration while ensuring that users access only the information necessary to perform their approved responsibilities.

​

Parents and Guardians

​

Where required by applicable law or institutional policy, parents or legal guardians may request access to student information through the educational institution or organization responsible for that information.

​

Krunch It will work with authorized organizations to support these requests where appropriate.

​

Research and Reporting

​

Schools and organizations may use aggregated or de-identified information for educational research, program evaluation, implementation monitoring, quality improvement, and statistical reporting, provided individuals cannot reasonably be identified unless otherwise authorized by law.

​

8. How We Protect Information

​

Protecting personal and educational information is fundamental to everything we do.

​

Krunch It has been designed using a Security by Design approach, meaning security considerations are integrated throughout the Platform's architecture, software development, infrastructure, and operational practices.

​

We maintain administrative, technical, and organizational safeguards that are designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

​

Our security program includes measures such as:

​

• Secure user authentication

• Role-Based Access Control (RBAC)

• Support for Multi-Factor Authentication (MFA), where available

• Encryption of information during transmission and while stored

• Secure cloud infrastructure

• Network security controls

• Secure application development practices

• Continuous system monitoring

• Audit logging of security-related activities

• Automated backups and recovery procedures

• Security testing and vulnerability management

• Incident response procedures to identify, assess, and respond to potential security events

 

Access to customer information is limited to authorized users based on their roles and responsibilities. Administrative access is restricted and follows the principle of least privilege.

 

We regularly review and improve our security controls to address evolving technologies, cybersecurity threats, customer requirements, and applicable legal obligations.

​

While no technology can guarantee absolute security, Krunch It is committed to maintaining security practices that align with recognized industry standards and responsible information governance.

​

Organizations requiring additional information regarding our security program may request our Security & Information Protection Overview, which provides a more detailed description of our technical, operational, and governance controls.

​

9. How We Share Information

​

Krunch It does not sell personal information or educational data.

​

We share information only when necessary to provide our services, fulfill contractual obligations, comply with legal requirements, or support authorized educational activities.

​

Authorized Organizations

​

Where the Platform is provided through a school, ministry, NGO, employer, or other organization, authorized administrators may access information necessary to manage their users, educational programs, and Platform implementation.

​

Access is governed by organizational permissions and user roles.

 

Service Providers

​

We work with trusted third-party service providers that help us operate the Platform, including providers of:

​

• Cloud infrastructure

• Authentication services

• Secure data storage

• Customer communications

• Payment processing

• Email delivery

• Technical support

• Analytics

• System monitoring

​

These providers process information only as necessary to deliver their services and are required to maintain appropriate confidentiality and security safeguards.

 

Platform Integrations

​

Where approved by customers or users, information may be exchanged with third-party platforms to support integrations, interoperability, authentication, reporting, or other Platform functionality.

​

Only the information necessary for the approved integration is shared.

​

Legal Requirements

​

We may disclose information when required to:

​

• Comply with applicable laws or regulations

• Respond to lawful requests from courts or government authorities

• Protect the safety, rights, or property of our users or others

• Prevent fraud or unlawful activity

• Enforce our Terms of Service or other agreements

​

Business Transactions

​

If Krunch It is involved in a merger, acquisition, financing, reorganization, or sale of assets, customer information may be transferred as part of that transaction.

​

Any successor organization will be expected to continue protecting information in a manner consistent with this Privacy Policy or provide notice of any material changes.

 

Aggregated and De-Identified Information

​

We may use or share aggregated or de-identified information for research, reporting, product improvement, educational insights, or statistical analysis.

​

This information does not identify individual users or organizations.

​

10. International Data Transfers & Data Residency

​

Krunch It supports organizations operating across multiple countries and regions.

​

As a result, information may be processed in countries other than where it was originally collected.

​

Whenever information is transferred internationally, we implement appropriate safeguards designed to protect personal and educational information in accordance with applicable legal and contractual requirements.

​

Hosting

​

Our production Platform is currently hosted within secure cloud infrastructure located in Cape Town, South Africa.

​

As our Platform continues to expand, services may also be deployed within other approved cloud environments, sovereign cloud infrastructures, national data centers, or customer-designated hosting environments where required by contractual obligations or local regulations.

​

Data Residency and Sovereignty

​

We recognize that some governments, ministries, and organizations require educational information to remain within a particular country or region.

​

Our Platform has been designed to support flexible deployment options that can accommodate approved data residency and sovereignty requirements as our infrastructure evolves.

​

Cross-Border Safeguards

​

To help protect information transferred across national borders, Krunch It may implement safeguards such as the following:

​

• Contractual data protection commitments

• Secure encrypted communications

• Access controls

• Organizational security policies

• Technical security measures

• Other lawful transfer mechanisms recognized by applicable law

​

We regularly review our international data handling practices as privacy laws and regulatory requirements continue to evolve.

​

11. Data Retention & Your Privacy Rights

 

Data Retention

​

Krunch It retains personal and educational information only for as long as necessary to provide our services, support educational objectives, fulfill contractual commitments, comply with applicable legal requirements, and protect the security and integrity of the Platform.

​

In general:

​

• Account information is retained while your account is active and for a reasonable period after it is closed to support account recovery, legal obligations, and customer support.

• Educational records and learning content are retained according to the policies of the school, ministry, organization, or institution that owns the information.

• Technical, operational, and security logs are retained only as long as necessary to maintain the reliability, security, and performance of the Platform.

• Customer support records may be retained to help resolve future support requests, improve our services, and maintain a record of previous interactions.

​

In certain circumstances, we may retain information for longer periods when required to comply with applicable laws, respond to legal proceedings, investigate security incidents, prevent fraud, resolve disputes, or enforce our legal rights.

​

When information is no longer required, we securely delete, anonymize, or otherwise dispose of it using appropriate administrative and technical safeguards.

​

Your Privacy Rights

​

Krunch It believes you should have meaningful control over your personal information.

​

Depending on where you live and the laws that apply to you, you may have the right to:

​

• Access the personal information we maintain about you.

• Correct or update inaccurate or incomplete information.

• Request deletion of your personal information where permitted by law.

• Request a copy of your personal information in a portable format where applicable.

• Object to or restrict certain types of processing.

• Withdraw your consent where processing is based on consent.

• Submit a complaint to the appropriate privacy or data protection authority.

​

If your account is provided through a school, ministry, employer, NGO, or another organization, requests relating to educational records may need to be submitted directly to that organization, as it determines how those records are managed. Krunch It will work with authorized organizations to support lawful requests where appropriate.

​

To exercise your privacy rights or ask questions about how your information is handled, please contact us using the details provided at the end of this policy. To help protect your privacy, we may ask you to verify your identity before processing certain requests.

​

We will respond to requests within the timeframes required by applicable law or, where no legal timeframe applies, within a reasonable period.

​

12. Mobile Permissions & Offline Functionality

​

Krunch It is designed to support educators and organizations working in environments with reliable, limited, or intermittent internet connectivity.

​

To provide certain features, the Platform may request permission to access capabilities on your device, such as your camera, microphone, photos and media, device storage, location services, push notifications, or contacts when collaboration features are enabled.

​

These permissions are requested only when necessary to provide specific functionality. You can grant, deny, or revoke permissions at any time through your device settings. Please note that disabling certain permissions may limit the availability of related features but will not prevent access to the core functionality of the Platform.

​

Many features are designed to work offline, allowing educators to continue working even when internet access is unavailable. Depending on your organization's implementation, offline capabilities may include recording attendance, creating lesson plans and assessments, completing classroom observations, documenting school improvement activities, participating in professional learning, and collecting implementation data.

​

Information created while offline is securely stored on your device and automatically synchronized with the Platform once an internet connection becomes available.

Synchronization processes include validation and conflict-resolution measures designed to preserve data accuracy and reduce the risk of data loss.

​

13. Contact Us

​

If you have questions about this Privacy Policy or how Krunch It collects, uses, or protects your personal information, we're here to help.

 

Privacy & Data Protection

​

For questions about privacy, data protection, or your privacy rights, please contact us at:

​

Email: privacy@krunchit.io

 

Customer Support

 

For technical support, account assistance, or general questions about the Platform, please contact us at:

​

Email: support@krunchit.io

​

Organizations with enterprise agreements, government partnerships, or institutional implementations may also contact their designated Customer Success representative for assistance with privacy, data governance, or information security matters.

​

We will make reasonable efforts to respond to privacy-related inquiries as quickly as possible and within any timeframes required by applicable law.

​

14. Changes to This Privacy Policy

​

As our Platform continues to evolve, we may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or privacy practices.

​

Platform Requirements

​

Our mobile applications are designed to comply with the privacy and data protection requirements of the Apple App Store and Google Play. We may update this Privacy Policy as needed to reflect changes to those platform requirements, applicable laws, industry standards, or our services.

​

When we make material changes, we will provide notice through one or more appropriate communication channels, which may include:

​

• Notifications within the Platform

• Email communications

• Updates on our website

• Notices provided to organizational administrators

​

The "Effective Date" at the beginning of this Policy indicates when the current version became effective.

​

We encourage users to review this Privacy Policy periodically to stay informed about how we protect personal and educational information.

​

Your continued use of the Platform after an updated Privacy Policy becomes effective constitutes acceptance of the revised Policy, unless applicable law requires additional notice or consent.

​

Our Commitment

​

At Krunch It, we believe privacy, security, and trust are essential to improving education.

​

Whether we are supporting a single classroom, a private school, a ministry of education, or a nationwide education initiative, we are committed to protecting the information entrusted to us and using it responsibly.

​

We will continue to strengthen our privacy practices, security safeguards, and information governance as our Platform evolves to meet the needs of educators and organizations around the world.

​

Thank you for placing your trust in Krunch It.

 

Krunch It, LLC

​

Effective Date: July 12, 2026

Last Updated: July 12, 2026

​