This Privacy Policy explains what personal information Karizma Class collects through the Karizma Class app and the systems behind it, why we collect it, and what control you have over it. "Karizma Class," "we," "us," and "our" refer to the institution operating the platform in Sulaymaniyah, Kurdistan Region, Iraq. By registering for an account or continuing to use the app, you agree to the practices described below.
01 Overview
This policy applies to every student registered on the Karizma Class platform and, where relevant, to the parents or guardians associated with a student's account. It's written to describe what our systems actually do, section by section, rather than as generic template language. If anything below is unclear, the fastest way to get an answer is to contact us directly (details at the bottom of this page).
02 Information we collect
Registration and profile information
When a student registers, we collect: full name; phone number (used both as a login identifier and as an OTP-verified contact number); a parent or guardian's phone number; school name; the curriculum system you study under (English or Kurdish); and, optionally, a profile picture. Registration also creates an email address on your account; our authentication provider, Firebase, uses it solely to send password-reset links, never for anything else.
Enrollment and access records
Enrollment is arranged with the institute directly, outside the app. A staff member then activates your access. We keep a record of each enrollment — what it covers, and its start and expiry date — so we know which courses you can watch and until when. Your card number, bank login, or other payment credentials never pass through our systems at all.
Content you create
Comments you post under a lecture, any report you file against another user's comment, and your own profile picture are all stored against your account. Answers you submit inside a quiz or question bank are graded entirely on your own device and are never sent to us or stored anywhere; not even we can see how you answered.
Device and session information
To keep an account from being shared beyond a single student, we record a device identifier for each device you sign in on, up to two at a time. Signing in on a third device requires signing out of one of the first two.
Automatically collected information
We use Firebase Analytics and Firebase Crashlytics to understand how the app is used and to catch crashes and bugs. This covers things like which screens are opened and whether the app crashed, never the content of your comments or your quiz answers. We also store a push-notification token so we can deliver notifications, and your in-app notification history.
03 How we use your information
- Create and operate your account, and let you sign in with either your phone number or email.
- Verify your identity with the one-time code sent to your phone at registration.
- Grant or extend your access to the courses your enrollment covers.
- Enforce the two-device limit, keeping an account from being shared beyond your own use.
- Apply a visible, account-linked watermark to lecture video as an anti-piracy measure (see below).
- Deliver notifications about new lectures, quizzes, announcements, comment replies, and your access status.
- Review comment reports and take moderation action where needed.
- Diagnose crashes and improve the app's reliability.
- Meet legal obligations and keep financial records for as long as reasonably necessary.
We don't use your information to build an advertising profile, and we don't sell, rent, or trade it to anyone.
04 The anti-piracy watermark
Every lecture video you watch inside the app displays a visible watermark containing your own phone number, overlaid on the video for its full duration. This is a deliberate anti-piracy measure: course content is licensed to the institution's teachers and isn't meant to be redistributed, and a visible, traceable watermark is how we discourage that. We're telling you about it plainly here, rather than leaving it as a surprise, because it's an unusual practice worth knowing about upfront.
06 Minors and guardian involvement
Karizma Class's course catalog serves grade 10, 11, and 12 students, most of whom are minors. Accounts aren't created through open self-service sign-up. A student registers after enrolling in person at the institution, where a parent or guardian is typically involved in that enrollment. That's also why we collect a guardian's phone number alongside the student's own: it gives the institution a second point of contact tied to the account, and reflects that enrollment, not the app in isolation, is where a minor's use of Karizma Class is actually consented to.
If you're a parent or guardian with a question about your child's account or data, contact us directly using the details at the bottom of this page; we're glad to help.
07 Data retention and account deletion
You can request deletion of your account at any time from Settings inside the app. When your account is deleted:
- Deleted entirely: your comments and your full comment history.
- Retained: your enrollment and access history, kept for record-keeping.
- Anonymized, not deleted: your student profile itself. Your name, phone number, and guardian's phone number are replaced with anonymized placeholders, so the enrollment records above stay internally consistent without still identifying you.
We retain data only as long as reasonably necessary for the purposes above, and delete or anonymize it sooner wherever we're able to.
08 Comments and content moderation
Comments you post under a lecture are visible to other students in that course and, where relevant, its teacher. If you see a comment that's abusive, off-topic, or otherwise inappropriate, you can report it directly: our admins review every report and can dismiss it, delete the comment, or suspend the student who posted it, temporarily or permanently, depending on severity. You can also block another user yourself at any time, which hides their comments from you immediately, independent of any report.
To report a broader concern about content in the app (anything a per-comment report doesn't cover), email us at the address below.
09 Data security
Lecture video, profile pictures, and quiz images are stored in a private cloud bucket that's never directly reachable; every access goes through a link our servers generate, scoped to one file and valid for a few minutes only. Sensitive account fields (your phone number, email, and guardian's phone) can only ever be written by our own verified server logic, never edited directly from a client app, which protects them from tampering. No system is perfectly secure, but the platform's data access was built this way deliberately, not as an afterthought.
10 Your rights and choices
- Access and update: your name, school, curriculum system, and profile picture can be viewed and updated from your profile inside the app at any time. Your phone number is shown but can't be self-edited, since it's tied to your account's OTP verification and to the anti-piracy watermark; contact us if it needs to change.
- Delete your account: from Settings, at any time; see "Data retention and account deletion" above for exactly what that does.
- Notifications: you can turn push notifications off from Settings.
- Anything else: for a request not covered by an in-app control, including one from a parent or guardian, contact us directly.
11 Changes to this policy
We may update this policy as the app changes. We'll update the date at the top of this page whenever we do, and if a change is significant, we'll do our best to flag it inside the app as well. Continuing to use Karizma Class after a change takes effect means you accept the updated policy.
Contact us
Questions about your data, or a concern to report? Reach us directly; we read every message ourselves.
- karismaclassdev@gmail.com
- +964 750 779 7078 (Korek)
- +964 770 200 2676 (Asiacell)
- Salim Street (Sahawla), Farhad Tower, 3rd floor, Sulaymaniyah