Privacy Policy
What we collect, why we collect it, who can see it, and how to get rid of it.
Version 2026-09-14 · This is the version you agree to when you sign up.
The short version
- We keep your email, a display name, and the energy actions you log.
- Bills and appliances are optional — the app works fine without them.
- No ads, no tracking, no location, no photos, and nothing sold to anyone.
- Your classmates see your display name, points and streak. Nobody outside your class sees you at all.
- You can download everything we hold, or delete the account outright, from Settings.
1. Who is responsible for your data
KiloWatt Club is run by Mohammed Affan Khan. Under India’s Digital Personal Data Protection Act 2023 that makes us the Data Fiduciary — the people answerable for what happens to your information — and you the Data Principal.
If your school gave you a code to sign up with, your school also has a role: they decided to use the app, they hold the consent your parent or guardian signed, and they are usually the fastest people to ask about your account.
2. What we collect, and why
This is the complete list. If something is not here, we do not hold it.
| What | Why |
|---|---|
| Your email address and password | To sign you in and let you recover the account. The password is stored only as a one-way hash — nobody, including us, can read it. |
| A display name and an avatar colour | So your class can see who is who on the leaderboard. A first name and an initial is plenty; your full name is not needed and we ask you not to use it. |
| The actions you log — which action, how many, and on what date | This is the app. It is what your points, kWh, CO₂, litres and streak are calculated from. |
| Your totals: points, energy saved, CO₂ avoided, water saved, distance not driven, current streak | To show your progress and to rank your class. Calculated by the server from the actions above, never sent by your device. |
| Your class or group, and your school if you joined with a school code | To put you on the right leaderboard, and to keep school accounts separate from public ones. |
| Electricity and water bill figures you choose to enter — the month, the units, and the amountoptional | To show month-on-month comparisons and what a saved unit is worth. Entirely optional: the app works without ever entering a bill. |
| Appliances you choose to add, and their wattage and hours of useoptional | To estimate where your electricity goes. Also entirely optional. |
| Your electricity tariff settings — sanctioned load, free units, whether the connection is rural | To calculate your bill correctly under the Karnataka tariff. Optional; there are sensible defaults. |
| Whether you have completed the quiz, and your score | So the quiz bonus is awarded once, and to show the badge. |
| Stories you choose to write — a title, the text, and when you wrote it | So other members can read about what you tried. Entirely optional. A story is shown to nobody until a reviewer at your school (or, for public accounts, from KiloWatt Club) has read and approved it, and you can remove it at any time. |
| Which agreements you accepted, which version, and when | Because the law requires us to be able to show that consent was actually given. |
We also keep ordinary technical records that any website keeps — that a page was requested, roughly when, and by what kind of browser — for a short time, to keep the service working and to spot abuse.
3. A note about bills and appliances
Bill figures and appliance details describe a household, not just you. They can hint at how big a home is and when people are in it. That is why they are optional, why we ask for three numbers rather than a photograph of the bill, and why we do not ask for your address, your consumer number, or your meter number — a photographed bill carries all three, so the app has no way to send us one.
If you are under 18, ask whoever pays the bill before entering it. If you would rather not, skip it: nothing else in the app stops working.
4. What we never do
- No advertising, and no ad networks.
- No analytics or tracking pixels, and no third-party trackers of any kind.
- No location data. The app never asks for it.
- No photographs or uploads. There is no camera feature and no way to send us an image.
- No contacts, no microphone, no files from your device.
- No selling, renting or sharing of personal data with anyone for their own purposes.
- No profiling, and no automated decisions that affect you.
- No messaging between users. There is no chat, no comments and no way for one user to send another anything.
The Act specifically forbids tracking or behavioural monitoring of children and advertising aimed at them. We do none of those things to anybody, at any age.
5. Who can see your information
Your classmates. Anyone in the same class or group sees your display name, avatar colour, points and streak on the leaderboard. Nothing else — not your email, not your bills, not your appliances, not your age.
People outside your class see nothing about you. A school-wide board exists, but it ranks whole classes against each other and shows only a class name, how many people are in it, and its total. No student appears on it. Classes with fewer than five members are left off entirely, so nobody can work out one person’s score from a group total.
Your teacher, if you joined with a school code, can see the list of members of the classes they run, and their points, and can correct a display name that is not suitable. They cannot see your email, your bills or your appliances.
If you write a story, it is first read by a reviewer — a teacher or school admin at your school, or for public accounts someone from KiloWatt Club. Only once they approve it can other members read it, and only members in the same place as you: your school if you joined with a school code, otherwise other public accounts. It appears under your display name and avatar colour, the same two things the leaderboard shows. Stories cannot contain images, and the app refuses email addresses, phone numbers and web links before a reviewer ever sees them. You can remove a story you wrote at any time, published or not.
Public accounts and school accounts are kept apart at the database level. Someone with an ordinary personal account cannot see a school account, even if they get hold of a class code. This is not a setting that can be switched off by mistake; it is how the data is stored.
Nobody else. We do not sell, rent or share personal data for anyone else’s purposes. We would disclose information if a law or a court required it, and we would tell you unless we were forbidden from doing so.
6. The companies that help us run it
These process data on our instructions only, and cannot use it for their own purposes:
- Supabase — Runs the database and the sign-in system. Holds everything in the table above.
- Vercel — Serves the website. Sees the ordinary technical information any web server sees — the page requested, a browser type, an IP address — and keeps short-lived operational logs.
Both are international services, so data may be stored or processed outside India. The Act permits this except to countries the Government has restricted.
7. If you are under 18
Most people using this app are school students, so this section matters more than any other on the page.
Under the DPDP Act, a child’s data may only be processed with the verifiable consent of a parent or legal guardian. Ticking a box yourself is not enough, and we do not pretend otherwise.
If you joined with a school code: your school is responsible for obtaining that consent from your parent or guardian before giving you the code, and for keeping the record of it. If your parent or guardian has not agreed, tell your teacher and the account should be removed.
If you signed up on your own: we ask you to confirm your age band, and if you are under 18 we ask for a parent or guardian to give consent. Please do not sign up without them.
A parent or guardian can, at any time, ask for the account and everything in it to be deleted. Write to the address at the bottom of this page and it will be done.
8. How long we keep it
For as long as you use the account. Delete it and the profile, every logged action, every bill, every appliance, every archived season and the consent records go with it, immediately and permanently. There is no hidden copy and no recycle bin; deletion cannot be undone.
We also delete accounts nobody has used for two years. If you don’t sign in or log anything for 24 months, the account is marked for deletion and removed 30 days later. Signing in at any point during those 30 days cancels it completely — you will see a message saying so — and nothing is removed.
This is deliberate. Keeping a child’s data indefinitely because they forgot an app existed is not a good reason to keep it.
A sign-up that never reaches the point of creating a profile is deleted after 30 days. At that stage all it holds is the email address and password you entered.
Backups taken before a deletion may hold the data a little longer before they age out.
9. Your rights
Under the DPDP Act you can:
- Get a copy of everything we hold about you — Settings has a button that produces the lot as a file, no request needed.
- Correct anything that is wrong. Your display name and settings are editable directly; ask us about anything else.
- Have it all erased — Settings again, and it is immediate.
- Withdraw your consent. For this app there is nothing left to keep once you do, so withdrawing consent means deleting the account.
- Nominate someone to exercise these rights for you if you die or become incapable of doing so. Write to us and we will record it.
- Complain, and get an answer. See below.
10. Keeping it safe
Passwords are stored only as one-way hashes — they cannot be read back, by us or by anyone who obtained the database. Every piece of data is protected at the database level by rules that check who is asking before any row is returned, rather than by the app remembering to hide things.
No system is perfectly secure. If a breach happens that affects you, we will tell you and the Data Protection Board, as the Act requires.
11. Complaints and contact
Grievance Officer / Data Protection contact: Mohammed Affan Khan — kilowattclub.help@gmail.com
Ask us first — we would rather fix it. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.
12. Changes to this policy
If we change something that matters, the version at the top changes and you will be asked to read and agree to the new one before carrying on. Small corrections that do not change the meaning will not trigger that.
See also the Terms of Use and the pledge.