A careful posture, not a checkbox.

Data minimisation

We only collect what is needed to provide the platform. We do not gather information for analytics products or advertising networks.

Role-based access

• Educators see the children and rooms they are responsible for.
• Directors see their centre.
• Owners see their group of centres, where applicable.
• Parents see their own child only.
• Kairos staff access is limited to what support and operations need.

Encryption

• Encryption in transit (HTTPS) for all platform traffic.
• Encryption at rest where supported by our infrastructure providers.

Retention

• Pilot application data is retained for the lifetime of the pilot relationship and a reasonable period after, in line with applicable record-keeping practice.
• Centres can request deletion of records they own (controls in active development).

Sub-processors

Kairos relies on a small set of trusted infrastructure providers (for example, hosting, email delivery, anti-abuse). A list will be published before public launch.

Incident response

If a security incident is identified, we will investigate, contain, and notify affected centres in line with reasonable industry practice and applicable law.

Contact

For data protection questions, write to hello@kairos.edu.lk.

Note on legal review

This page is a plain-language summary. A full data protection statement reviewed by legal counsel will be published before public launch.