Privacy Policy & Notice
Version 2026-11-05.2 · Effective 5 November 2026
In short: we collect only what we need to run your account and personalise your learning (name, email, password hash or Google profile, and your answers to Kanak). We never sell your data or use it for ads. You can download or delete your data at any time from the Account page.
This notice is given under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, and is the privacy policy required by Section 43A of the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
1. Who we are
KK 15 AI Technology Pvt. Ltd., Nagpur, Maharashtra, India ("we", "us") runs the Trading AI platform at tradingai.kk15aitechnologypvt.com, including the Kanak AI guide ("the Service"). For the personal data described here we are the Data Fiduciary (the body that decides why and how the data is processed).
2. Personal data we process, and why
| Data | Why we need it | How long we keep it |
|---|---|---|
| Name and email address | Create and identify your account, send OTP and account emails | Until you delete your account |
| Password (stored only as a one-way hash) | Let you sign in with email and password | Until you delete your account or change it |
| Google account name, email, profile photo and account ID (only if you choose "Sign in with Google") | Sign you in with Google and show your photo in the app | Until you delete your account |
| One-time passwords (stored only as a hash) and the IP address that asked for them | Verify sign-up, sign-in and password reset; stop abuse | OTP valid 10 minutes; record deleted within 30 days |
| Failed sign-in attempts (email, IP address, time) | Block password-guessing attacks | Deleted within 30 days |
| Your answers to Kanak (experience, practice budget, goal, risk comfort) and lessons completed | Personalise lessons and practice plans | Until you delete your account |
| Record of your consent (version, date, method) | Prove that you agreed to this notice, as the law requires | As long as we process your data, and as needed to meet legal obligations |
| Sentences Kanak speaks to you (may include your first name) | Turn text into speech | Cached as audio for up to 7 days; no account details attached |
We process this data on the basis of your consent, which you give when you create an account (or when the app asks you after sign-in). We do not collect financial details, bank or card numbers, Aadhaar or PAN, biometric data, health data, or your trading or broker account details.
Stored only in your browser (not sent to us): the homepage paper-trading account, trades and journal, a copy of your Kanak settings, and voice on/off choices. Clearing your browser data removes them.
Trading Simulator and reports: the simulator keeps a copy of your virtual trades, positions and account value (all virtual money) on our server, so we can build your Learning & Practice Report (PDF). When you ask, we email that report to your registered address. When a payment is confirmed we email you an invoice (PDF). Report and invoice emails are sent through our own WordPress website's mail service. Invoices and payment records are kept as required for tax and accounting, even after an account is deleted.
3. Who we share data with
We share personal data only with service providers that help us run the Service, only as much as they need, and never sell it:
- Hostinger — website hosting and database.
- Our WordPress site (kk15aitechnologypvt.com) — sends OTP emails from our own domain.
- Google — Google Sign-In, if you choose it.
- ElevenLabs — text-to-speech for Kanak's voice. Only the sentence being spoken is sent.
- Your browser's speech service — when you speak to Kanak with the microphone, your browser (for example Google Chrome or Microsoft Edge) converts speech to text using its maker's servers under its own privacy policy. We receive only the text, never audio.
- Yahoo Finance — public market prices. No personal data is sent.
We may disclose data if required by law, court order or a government authority, or to protect the rights and safety of our users or the public.
4. Transfers outside India
Some of these providers may store or process data on servers outside India. We transfer data only as allowed under the DPDP Act and any restrictions notified by the Government of India.
5. Your rights
Under the DPDP Act you have the right to:
- Access a summary of your personal data and how we process it — use "Download my data" on the Account page.
- Correct, complete or update your data — email us (section 9).
- Erase your data — use "Delete account" on the Account page; your account data is deleted immediately and short-lived security logs within 30 days.
- Withdraw consent at any time, as easily as you gave it — deleting your account withdraws it. Processing done before withdrawal stays lawful.
- Nominate another person to exercise these rights if you die or become unable to — email us.
- Grievance redressal — see section 9.
You must not give false information, impersonate anyone, or file frivolous complaints (Section 15 of the DPDP Act).
6. Cookies and similar storage
We use one essential, first-party session cookie (KK15SID) to keep you signed in and protect forms. We use browser local storage only for the features in section 2. We do not use advertising, analytics or tracking cookies.
7. Security
We follow reasonable security practices, including: HTTPS for all traffic; passwords and OTPs stored only as one-way hashes; limits on wrong password and OTP attempts; protection against cross-site request forgery; server configuration and session files not publicly accessible; and access to production systems limited to authorised staff. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the law requires.
8. Children
The Service is only for people aged 18 or above. We do not knowingly process children's personal data. If you believe a child has created an account, email us and we will delete it.
9. Grievance Officer and contact
For questions, requests to exercise your rights, or complaints, contact our Grievance Officer:
Grievance Officer, KK 15 AI Technology Pvt. Ltd.
Nagpur, Maharashtra, India
Email: trading@kk15aitechnologypvt.com
We will acknowledge your request and resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act once the Board's complaint process applies.
10. Changes to this notice
If we make important changes, we will update the version above and ask for your agreement again inside the app before you continue.