Privacy Policy

Last updated : September 8, 2026

1. Introduction

Kadha ("we", "our") is committed to protecting the personal information of students, parents, and tutors who use the platform. This policy explains what information we collect, why, and how it's protected, in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25).

2. Information we collect

Depending on your role on the platform, we collect:

  • Account: name, email, password (encrypted), role (student, parent, tutor).
  • Students: grade level, diagnostic results, competency progress, session history, completed homework and challenges.
  • Parents: name, email, phone (optional), link to their child(ren).
  • Tutors: name, email, subjects taught, availability, Google Calendar connection (if enabled).
  • Payment: once a payment system is in place, card information will never pass through our servers — it will be handled directly by our payment provider.

3. Use of information

We use this information only to:

  • Provide the service (sessions, progress tracking, diagnostics, challenges, learning content);
  • Let tutors and parents linked to a student follow their progress;
  • Send session reminders and important updates;
  • Improve the platform (aggregated usage statistics, never sold to third parties).

We never sell your personal information to third parties, and we never use it for external advertising purposes.

4. Minor students

Most of our students are minors. Creating a student account goes through a parent, who consents to the collection of information necessary to provide the service. A parent can access, correct, or request deletion of their child's information at any time by contacting us (see section 8).

5. Sharing of information

A student's information is visible only to: the student themself, their linked parent(s), and their assigned tutor. We share certain information with service providers necessary for the platform to operate (cloud hosting, email delivery, Google Meet video conferencing) — these providers are contractually required to protect this information and cannot use it for other purposes.

6. Retention and security

Information is kept as long as the account is active, then for a reasonable period after account closure for legal compliance purposes. Passwords are encrypted; sensitive access (such as Google login tokens) is encrypted at rest.

7. Your rights

In accordance with Law 25, you have the right to:

  • Access the personal information we hold about you;
  • Have inaccurate information corrected;
  • Request deletion of your account and associated information;
  • Withdraw your consent at any time, subject to legal retention obligations.

8. Contact us

For any question about this policy or to exercise your rights, contact us via the About page or the contact form.