Privacy Policy

Last updated: 16 August 2026 · Drafted per the Saudi Personal Data Protection Law (PDPL) · pending legal review

1. What we collect

• Account data: name, email, and — optionally — mobile number and bio.
• Learning records: enrollments, lesson progress, exam attempts and scores, certificates, and community posts.
• Billing records: orders and tax invoices. Card details are processed by the licensed payment gateway and never stored by the Platform.

2. Why we process it

• Delivering the service: your learning, certificates, and their public verification.
• Legal obligations: tax invoicing and — where applicable — sharing training records with the national e-learning platform per Saudi regulations.
• Service notifications in-app, and by email/WhatsApp only with your explicit opt-in, which you can withdraw from your profile at any time.

3. Your rights

You may request access to, correction of, or deletion of your personal data, and withdraw consents, via Support. We respond within the statutory periods. Note that issued certificates and tax records are retained as required by law.

4. Sharing

We do not sell personal data. Processors we use (hosting, payment gateway, messaging providers) act under agreements limited to service delivery. Certificate verification pages expose only: holder name, course, trainer, date, and serial.

5. Security and retention

Data is encrypted in transit, access is role-restricted and audit-logged, and daily backups are kept on a rolling window. We notify the competent authority and affected users of any qualifying breach within the statutory 72 hours.