Privacy Policy (GDPR / UK / US)

Last updated: August 2026

Data we collect

Account details, lesson schedules, SafeguardTrust recordings (with consent), progress data, and billing information.

Your rights (EU/UK)

• Right to access — export your data via Settings or GET /api/gdpr
• Right to erasure — delete your account via DELETE /api/gdpr
• Right to withdraw consent for recordings and marketing

COPPA (US)

Parents must provide consent for students under 13. We do not collect more data than necessary for Quran instruction.

Data retention

Session recordings retained for 90 days unless longer retention is required by safeguarding policy or law.

EU data hosting

EU family recordings may be stored in EU regions when production infrastructure is configured.