Privacy Policy

1. Who we are

KINSOU Martial Arts Academy (“Kinsou Academy”, “we”, “us”, “our”), operated by Saurabh Kinholkar (Proprietor), located at Near Malhar Misal, Jagtap Dairy Chowk, Aundh–Ravet Road, Pimple Saudagar, Pune, Maharashtra 411017, is the Data Fiduciary responsible for your personal data collected through https://kinsou.in (the “Site”). Questions? Contact us at kinsou.martial.arts.academy@gmail.com / +91 9834660619.

This policy explains what personal data we collect, why, how we protect it, who we share it with, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

2. What data we collect

When you create an account, complete your member profile, or make a payment, we collect:

Account & identity

• Name, email address, phone number
• Password (stored only as a secure one-way hash — see §6)
• Google account identifier and profile photo (only if you sign in with Google)

Member profile

• Date of birth, age category, gender, occupation
• Address, city, state, PIN code
• Emergency contact name, phone, and relationship

Health information (sensitive personal data)

• Blood group, medical conditions, allergies, injuries, current medications

Training & membership

• Fitness goals, previous experience, programs enrolled, membership type/status
• How you heard about us

Payments

• Membership package and amount, payment method, transaction/reference ID
• A payment screenshot you upload as proof of a UPI payment

We do not collect or store your card numbers, bank account numbers, UPI PIN, or CVV. Payments are made through UPI directly; we only receive the reference details and the screenshot you provide.

3. Why we collect it (purpose)

We collect and use this data on the basis of your consent, which you give when you register and complete your profile.

4. Children’s data (under 18)

Some of our programs are for children. If the member is under 18, the account and profile must be created and consented to by a parent or legal guardian, and we process the child’s data only with verifiable parental consent. We do not use children’s data for tracking or targeted advertising. A parent/guardian may review, correct, or request deletion of their child’s data at any time by contacting us.

5. Who we share it with

We do not sell your personal data. We share it only with trusted service providers (“Data Processors”) who help us run the Site, under agreements that require them to protect it:

• Neon – managed database hosting (account, profile, and payment records)
• Cloudinary – secure image storage (payment screenshots)
• Render – backend application hosting
• Vercel – website hosting
• Google – “Sign in with Google” authentication (only if you use it)

Some of these providers process or store data on servers outside India (for example, in the United States). By using the Site you consent to this transfer, which is carried out in line with applicable law.

6. How we protect your data

We apply reasonable security safeguards, including:

• Encryption in transit — the Site and all data exchanged with our servers use HTTPS/TLS.
• Encryption at rest — your data is stored in an encrypted managed database (Neon), and uploaded files are stored on Cloudinary.
• Password protection — passwords are never stored in plain text; they are secured with industry-standard bcrypt hashing.
• Access controls — you can access only your own profile, payments, and receipts; administrative access is restricted to authorized staff.
• Reputable infrastructure — we build on established providers that maintain recognized security standards (e.g., SOC 2).

No online service can guarantee absolute security, but we take reasonable steps to protect your information and to notify you and the Data Protection Board of India of a personal-data breach as required by law.

7. How long we keep it

We keep your personal data for as long as your membership is active and for up to 1 year after it ends. Payment and financial records may be kept longer where tax, accounting, or other laws require it. After that, we delete or anonymize your data unless we are legally required to retain it. You may ask us to delete your data earlier (see §8).

8. Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it
• Correct, complete, or update your data
• Erase your data where it is no longer needed
• Grievance redressal — raise a complaint with us and have it addressed
• Nominate another person to exercise your rights if you die or become incapacitated
• Withdraw consent at any time (this will not affect processing already carried out)

To exercise any of these, contact our Grievance Officer (§9). We may need to verify your identity before acting.

9. Grievance Officer & complaints

Grievance Officer: Saurabh KinholkarEmail: kinsou.martial.arts.academy@gmail.comPhone: +91 9834660619Address: Near Malhar Misal, Jagtap Dairy Chowk, Aundh–Ravet Road, Pimple Saudagar, Pune, Maharashtra 411017

We will acknowledge and respond within the timelines required by law. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

10. Cookies

We use a small number of essential cookies required to keep you securely signed in. We do not use them for advertising.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new “Last updated” date and, where required, ask for your consent again.