Privacy Policy

1. Data we collect

• Admission details — student name, email, phone, WhatsApp number, age, gender, country, timezone, chosen course, preferred timing and days, and for applicants under 18 the guardian's name and phone number.
• Account data — a securely hashed password, role, account status, profile photo if you upload one, and sign-in timestamps.
• Learning data — class schedule, attendance status and notes, progress notes written by your teacher.
• Payment data — method, amount, billing month, payment date, transaction reference and the proof image you upload, plus verification notes and the receipt number issued.
• Messages — portal messages between students and teachers, and enquiries submitted through the public contact form.
• Technical data — the IP address used for sign-in attempts, kept only to rate-limit abuse.

We do not collect card numbers or bank credentials. Fee transfers happen in your own banking or wallet application; the academy only receives the proof you choose to upload.

2. Why we use it

To deliver and schedule lessons, mark and report attendance, calculate and reconcile monthly fees, issue receipts, contact you about your classes, and keep the safeguarding and audit records a teaching institution needs.

We do not sell personal data, and we do not use it for advertising.

3. Payment proof images

Proof screenshots are stored so the administration can verify a transfer and so you have evidence of the payment attached to your receipt. Please crop out any part of a screenshot that is not needed to prove the transfer, such as your full account balance or unrelated transactions.

4. Who can see your data

• You can see your own records at any time in your portal.
• Your assigned teacher can see your name, contact details, schedule, attendance and progress — not your payment proofs.
• The administration can see all records, and every administrative action is written to an audit log.

Live classes are hosted on Jitsi Meet, which processes the audio and video stream for the duration of the class. No other third party receives your data.

5. How long we keep it

Academic and financial records are retained while your account exists and for as long as tax and audit obligations require. Suspending an account does not delete its history. Sign-in rate-limit records are discarded within hours.

6. Children's privacy

Many of our students are children. A guardian's name and phone number are required for applicants under 18, and a guardian may request access to, correction of, or deletion of their child's record at any time.

7. Your rights

You may ask us to show you the data we hold about you, correct anything inaccurate, or delete data we are not legally required to keep. Most details can be corrected yourself from the profile page in your portal. For anything else, email samadulquran@gmail.com and we will respond within 30 days.

8. Security

Passwords are stored only as salted scrypt hashes and are never recoverable in plain text. Sessions use short-lived signed tokens. Every page is served with a strict content security policy, and all administrative changes are logged. No system is perfectly secure, so please use a unique password and tell us at once if something looks wrong.