Privacy Policy

1. What we collect

You give us

• Account & profile: name, email, password (stored hashed — we never see it), profile photo, bio, handle and interests.
• Content: the Tracks you run, join and follow; your posts (“artifacts”), comments, reactions and direct messages; uploaded images, audio and video.
• Host & payout details (hosts only): legal name and, where required for tax, PAN; bank/UPI details are collected by our payment processor for payouts, not stored by us.
• Support & grievances: anything you send us when you contact support or raise a complaint.

We collect automatically

• Usage and device data: pages and Tracks viewed, actions taken, app version, device type, IP address, and approximate region derived from it.
• Cookies and similar technologies — see the Cookie Policy.
• A device push token, only if you enable notifications.

From others

• Payment metadata from Razorpay (payment and order identifiers, status) — we never receive or store your full card or bank details.

2. Why we use it & our legal basis

• To run the service — accounts, feeds, Tracks, bookings, memberships, messaging and payouts (performance of our contract with you / your consent).
• To process payments and meet tax and accounting obligations such as GST and TDS (legal obligation).
• To keep the community safe — moderation, anti-abuse, fraud and security (our legitimate interests / legal obligation).
• To send service messages and the notifications you have enabled (consent, which you can withdraw).
• To improve Kriloop using aggregated, non-identifying analytics (legitimate interests).

3. Who we share it with

We use vetted service providers (processors), each receiving only what it needs to do its job:

• Infrastructure & hosting — cloud database, authentication, storage, content delivery and media streaming.
• Payments — our payment processor, for checkout and host payouts (we never receive or store your full card or bank details).
• Communications — transactional email and, for live sessions, video-classroom infrastructure.
• AI — an AI gateway used to generate some of Kriloop’s own content (such as house Tracks), not to process or train on your personal data.

We also share information when the law requires it (valid legal process), to protect rights and safety, or as part of a business transfer (we would tell you first). When you post publicly or to a Track, that content is visible to others according to the Track’s visibility settings — that is the point of a social network, not a disclosure governed by this policy.

4. Your rights

You can, at any time:

• access and edit your profile and most of your data in-app;
• request a copy of your personal data, or its correction or erasure;
• withdraw consent (e.g. turn off notifications) as easily as you gave it;
• nominate someone to exercise your rights if you are incapacitated or deceased (DPDP);
• depending on where you live, you may have further rights — such as objecting to or restricting certain processing, or asking for a portable copy — and we’ll honour reasonable requests like these.

Delete your account from Settings → Account (see Account & Data Deletion) — this removes your personal data, cancels active Channel memberships and refunds eligible enrolments, keeping only what tax and accounting law requires. To make any other request, write to privacy@kriloop.com. We respond within the timelines the law sets, and otherwise as quickly as we reasonably can.

5. Children

Kriloop is for adults — you must be 18 or older to use it. We do not knowingly collect data from anyone under 18, and we do not profile children or show them targeted content. If you believe a minor has given us personal data, contact privacy@kriloop.com and we will delete it.

6. Retention & security

We keep your data while your account is active, plus the period that tax and accounting law requires for payment records, and only as long as needed for the purposes above. Data is encrypted in transit, access is role-restricted on a need-to-know basis, and sessions stored on your device are encrypted. No system is perfectly secure, but we work to protect your information and to detect and respond to incidents.

7. International transfers

Kriloop is operated from India and uses global infrastructure, so your data may be processed in countries other than your own. When we move data across borders we use reputable service providers and appropriate contractual safeguards (such as standard contractual clauses) to keep it protected.

8. Data breaches

If a personal-data breach affects your information, we will tell you without undue delay — in plain language: what happened, the likely impact on you, what we are doing about it, steps you can take to protect yourself, and who to contact. We will also report the breach to the Data Protection Board of India, and to any other authority, within the time and in the manner the law requires.

9. Grievances & how to complain

For privacy questions, data requests or complaints, contact our Data-protection / Grievance Officer at privacy@kriloop.com — full details on the Grievance Redressal page. If you are not satisfied, you may complain to the Data Protection Board of India, or, depending on where you live, to your local data-protection authority.

10. Changes

We may update this policy; we will post the new version here with a fresh date and flag material changes in-product.