CYBERPACK Platform Privacy Policy
Last Updated: June 17, 2024
1. Introduction
Welcome to CYBERPACK! This Privacy Policy describes how "CYBERPACK" LLP ("we," "us," or "our") collects, uses, stores, and protects information received from users of our educational ecosystem, which includes the CYBERPACK App mobile application, the web platform for teachers and administrators, and related services (hereinafter referred to as the "Platform").
Our mission is to provide an engaging and safe educational environment for students, effective tools for teachers, and a transparent monitoring system for parents. We take the privacy of your data, especially children's data, seriously and are committed to being fully transparent in our practices.
By using our Platform, you acknowledge your agreement with the terms described in this Policy. If a user is a child under the legal age to provide consent independently, their use of the Platform signifies that their parent or legal guardian has reviewed and consented to this Policy.
2. What Information We Collect
We collect information in several ways: directly from users during registration and use of the Platform, and automatically during interaction with our services.
2.1. Information Provided Directly by Users
  • For Students (to create an account in the mobile application):
  • First and Last Name: For personalization, identification by the teacher, display in profiles, and certificate generation.
  • Age (or Date of Birth): To adapt content, verify age restrictions, and obtain parental consent.
  • Grade and School: To group students, assign tasks, and track progress.
  • Email of the Student or Parent/Guardian: For account recovery and system notifications. For children under the legally established age (e.g., 13 years old, depending on the jurisdiction), we request and use the parent's/guardian's email.
  • Access Code: For initial registration and linking to a subscription.
  • For Teachers and School Administrators:
  • Full Name, School Name, Position: For identification and providing relevant access.
  • Email: Used as a login and for communication.
  • Contact Phone (optional): For urgent communication.
  • For Parents/Guardians:
  • Full Name: For identification.
  • Email: Used as a login and for notifications.
  • Child's Full Name: To link to the student's account.
Upon registration, all users also create a login and password, which we store securely to authenticate account access.
2.2. Information Collected Automatically
  • Educational Progress and Usage Data: Status of project completion, task results, activity time, achievements and gamification, and use of the AI assistant. The history of queries to the AI assistant is analyzed in a pseudonymized form to improve its performance.
  • Technical Information: Device type and OS, application version, IP address, and crash data. We use an internal unique user/installation identifier, which is not linked to device advertising identifiers, to ensure the application's functionality and for analytics.
3. How We Use Collected Information
We use the collected information exclusively for the purpose of providing and improving our educational services:
  • Operating the Platform, personalizing content, and tracking progress.
  • Improving the product, analyzing popular features, and fixing bugs.
  • Communicating with users, providing technical support, and sending system notifications.
  • Ensuring security and preventing fraud.
We do not and will never use children's personal data for targeted advertising.
4. Who We Share Information With
We do not sell your personal data. We may share information only in strictly limited cases:
  • Teachers, School Administration, and Parents: To perform their educational and monitoring functions within the Platform.
  • Third-Party Service Providers: We engage trusted partners (e.g., for data hosting or analytics). They receive only the minimum amount of data necessary and are required to adhere to strict confidentiality requirements. When using third-party APIs, including for the AI assistant, we select providers who guarantee a high level of data protection and do not use the data for their own purposes.
  • Law Enforcement Agencies: Only upon an official, legally substantiated request.
  • In the Event of a Business Reorganization: In case of a merger or acquisition, with the obligation to comply with this Policy.
5. Special Attention: Data Collection from Children
Protecting children's privacy is our top priority.
  • Verifiable Parental Consent (VPC): We collect personal information from children only with the verifiable consent of their parents or guardians. One of the primary mechanisms for obtaining such consent is through the educational institution, which confirms it has received the necessary permissions from parents as part of the Platform's implementation. We reserve the right to use other verification methods if required by law.
  • Parental Rights: Parents have the right to review the information collected about their child, request its deletion, and prohibit its further collection.
6. Data Storage and Protection
  • Security Measures: We implement a set of technical and organizational measures to protect data, including encryption (SSL/HTTPS), access control, and the use of secure servers.
  • Data Retention Periods: We store your data as long as your account is active. Upon a deletion request, we will erase the data within a reasonable timeframe. Backups are stored for a limited period (up to 90 days) and are then deleted.
  • Cross-Border Data Transfer: Our servers may be located outside your country. By using the Platform, you consent to such transfer with our guarantee that the data will remain protected.
7. Your Rights and Data Management
You (as well as parents regarding their children's data) have the right to access, rectify, and erase your data.
You can request the deletion of your account and all associated data. To exercise these rights, please contact us by email or use the account deletion feature in the application settings. This feature will be easily accessible and will ensure data deletion in accordance with platform rules (e.g., Google Play and App Store).
8. Changes to This Policy
We may update this Policy from time to time. We will notify you of significant changes via email or through an in-app notification.
9. Contact Information
If you have any questions, please contact us:
  • Company Name: "CYBERPACK" LLP
  • BIN (Business Identification Number): 240840000909
  • Address: 160 Mukanov Street, Almaty, Kazakhstan
  • Contact Email: support@cyberpack.kz (with the subject line "Privacy Policy Question")
Made on
Tilda