Privacy Policy

1. Scope

This Policy applies to the Superteam KZ public website and account area, including learning, events, hackathons, teams, messaging, achievements, and certificates.

The platform is operated by the Superteam KZ administration. By using it, you confirm that you have read this Policy.

2. Data we collect

The data depends on the features you use.

• account data: name, email, protected password hash, profile image, and preferred language;
• optional profile data: country, city, Telegram, GitHub, X, and other details you provide;
• learning data: enrolments, progress, quiz attempts, assignments, comments, and engagement with materials;
• event and hackathon data: registrations, teams, roles, projects, submissions, files, scores, feedback, and messages;
• technical data: IP address, browser, device, pages, interface events, referral source, cookies, and localStorage.

3. Data sources

We receive data from you, automatically through platform use, and from connected services. When you sign in with GitHub or Google, that service shares profile data you authorised. We do not receive the password for that external account.

4. Why we use data

• to create and protect accounts, verify email, and restore access;
• to deliver learning, save progress, and review assignments;
• to run events and hackathons, form teams, and evaluate projects;
• to issue achievements, certificates, and verifiable credentials;
• to provide support, secure the platform, prevent abuse, and diagnose errors;
• to understand platform use and improve the product and communications.

5. Processing grounds

We process data to perform the user agreement, provide requested features, comply with applicable law, protect legitimate interests of the platform and its users, and on the basis of consent where required.

6. Service providers and disclosure

We share only what is needed with hosting and storage providers, email delivery services, GitHub and Google authentication, Google Tag Manager, Google Analytics, Meta Pixel, and connected review or automation tools.

Some providers may process data outside Kazakhstan under their own terms. We may also disclose data in response to a lawful authority request or to protect users and the platform.

7. Retention

We keep data while an account exists or while needed to provide features, resolve disputes, maintain security, and meet reporting duties. After deletion, records may remain temporarily in backups or longer where required by law or legitimate protection needs.

8. Security

We use access controls, server-side authorisation, encrypted transport, administrative audit trails, backups, and other reasonable measures. No method of transmission or storage can guarantee absolute security.

9. Your rights

You may request access, correction, or deletion, withdraw consent where processing relies on consent, and ask questions about processing. We may need to verify your identity to protect the account.

Telegram @MaxNutrition

10. Minors, changes, and contact

Where a user cannot legally provide the required consent, the platform should be used with a parent or legal guardian.

We may update this Policy when the platform or legal requirements change. The current version and date will be published here. Contact the administrator with privacy questions.

Telegram @MaxNutrition