// legal

Privacy Policy

The rules and policies for using KaliRange.

Last updated: 2 November 2026

KaliRange is a product of KometX AI Applications & Services ("KaliRange", "we", "us", or "our"), which operates the website at kalirange.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Who we are

The Service is operated by Uzair Varsaji (KaliRange), based in Dubai, United Arab Emirates. For any privacy question or request, contact support@kalirange.com.

2. Information we collect

  • Account information — when you create an account we collect your email address, and any display name, username, bio and profile picture you choose to add.
  • Authentication data — if you sign in with Google, we receive your email address and basic profile information from Google to create or match your account. We never store email-account passwords in readable form; authentication is handled by our provider, Supabase.
  • Learning activity — your progress (labs and workbooks started or completed), bookmarks, practice-exam attempts and scores, and any notes you save in My Notebook.
  • Feedback you submit — ratings and messages you send us.
  • Cancellation details — if you cancel a subscription, the reason you choose, any comment you add, whether you asked for a refund, and the dates involved.
  • Technical and usage data — IP address, browser type, device information and server logs, collected automatically for security, abuse-prevention and to operate downloads.
  • Local storage and cookies — we store your session token and a theme preference in your browser, and use a strictly-necessary cookie to authorise file downloads. We do not use advertising or cross-site tracking cookies.

3. How we use your information

  • To provide and maintain the Service, including your account, progress tracking and personalised features.
  • To authenticate you and keep your account secure.
  • To process cancellations and refund requests, confirm when a subscription ended, and understand why people leave.
  • To respond to your feedback and support requests.
  • To monitor, protect and improve the Service and prevent abuse or illegal activity.
  • To comply with legal obligations.

4. Legal bases

Where the EU/UK GDPR, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) or similar laws apply, we process your data to perform our contract with you (providing the Service), on the basis of your consent (which you may withdraw at any time), to comply with legal obligations, and for our legitimate interests in operating, securing and improving the Service.

5. Service providers

We share data only with providers that help us run the Service, under appropriate safeguards:

  • Supabase — database hosting and authentication.
  • Google — optional "Sign in with Google" authentication.
  • Our hosting provider — serves the website and stores server logs.
  • Stripe — processes payments for paid course books and subscriptions. Card details go directly to Stripe; we never see or store them. We receive your purchase details and subscription status.
  • Content delivery networks (jsDelivr and Cloudflare cdnjs) — deliver the open-source scripts the site runs on; like any website you load, they receive your IP address and basic browser information.

We do not sell your personal data, and we do not share it for advertising.

6. International transfers

Our providers may process data on servers located outside your country, including in the EU and the United States. Where required, we rely on appropriate safeguards for such transfers.

7. Data retention

We keep your account data for as long as your account is active and as needed to provide the Service. Server logs and security records are kept for a limited period (typically up to 12 months) for security and abuse-prevention. Cancellation records are kept while your account exists, so we can confirm when a subscription ended and resolve billing questions, and are deleted with your account. We delete or anonymise data when it is no longer needed, and you can ask us to delete your account at any time.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit most information in your account settings, or contact support@kalirange.com to exercise any right. You may also complain to your local data-protection authority.

9. Security

We protect your data with encryption in transit, row-level access controls and access restrictions. No method of transmission or storage is completely secure, but we work to protect your information and to notify you of any material breach as required by law.

10. Children

Students under 16 may use KaliRange only with the permission of a parent or guardian, or through a school or educational programme that has authorised it. Most labs can be used without an account, so no personal data is collected from those visits. If an under-16 user signs in, we collect only what is described in this Policy (the Google account email and basic profile, plus learning progress and notes), use it solely to provide the Service, never sell it or use it for advertising, and delete it on request. A parent, guardian or school can ask us to review or delete a child's data at any time by emailing support@kalirange.com.

11. Your regional privacy rights

European Economic Area / UK (GDPR): you have the rights described in section 8, and the right to lodge a complaint with your supervisory authority.

United Arab Emirates (PDPL): you may exercise your rights of access, correction, deletion, restriction, portability and objection, and may complain to the UAE Data Office.

California (CCPA/CPRA): you have the right to know what personal information we collect and how we use it, to request access to, deletion of, or correction of it, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

12. Automated decisions & "Do Not Track"

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Because there is no industry-standard "Do Not Track" signal, we do not respond to such signals; we do not track you across third-party sites regardless.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date. Continued use after changes means you accept the updated Policy.

14. Contact

Questions? Email support@kalirange.com.