Privacy

The short version

A parent holds the account. A child gets a profile inside it, with a first name, a date of birth and their learning progress — nothing more. We do not ask children for an email address, we do not advertise to anyone, and we do not sell or share information about your family.

Who we are

Aniyat RUH Academy is a learning platform for Muslim families. If you have a question about anything here, or want a copy of what we hold, write to privacy@aniyatruh.com.

What we collect from a parent

• Your name and email address, so you can sign in and we can reach you.
• Your date of birth, if you give it.
• Payment details, which we never see. Card information goes straight to Stripe, our payment processor. We store only whether a subscription is active and when it renews.
• Your notification and appearance preferences.

What we collect about a child

• The first name (and optionally surname) you give them, and an avatar you pick.
• Their date of birth. This is not decoration: it decides which age band their learning path is built from.
• What they do in the app — lessons opened and finished, quiz answers and scores, which skills they have mastered, streaks and achievements.

A child never gives us an email address or a password. When you add a child, the system creates an internal placeholder address that cannot receive mail, and the child reaches their learning through your account.

What we do with it

We use it to run the thing you signed up for: to build and adapt each child's learning path, to show you their progress, to keep your subscription working, and to tell you about your account. We do not profile children for advertising, and there is no advertising in the app.

Artificial intelligence

We use AI to help draft lessons, which an adult then reviews before any child can see them. Children's work is not sent to AI providers — the endpoints that carry typed text to a model are closed to child accounts, and a child's learning path is calculated from their own progress by our own code, not by a model.

Who else touches your data

• Clerk — sign-in. They hold your email address and password; we never see your password.
• Stripe — payments and card details.
• OpenAI — lesson drafting, from a topic an adult types. No child data.
• Our hosting and database providers — they store the data described above on our behalf and do nothing else with it.

That is the whole list. We do not sell data, and we have no advertising partners.

Where it is stored

Your family's records are held in the United Kingdom or the European Economic Area. Clerk, Stripe and OpenAI are US companies and process the data described above under their own transfer safeguards.

How long we keep it

While your account is open, and while a subscription is active. If you close your account we deactivate it immediately, which stops all access, and we erase the records on request — write to the address above and we will confirm when it is done. Payment records are kept as long as tax law requires.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, for yourself and for each of your children. You can also complain to the Information Commissioner's Office at ico.org.uk. You do not have to go through us first.

Children and consent

Accounts are held by adults. A child does not sign up, agree to terms, or make a payment. A parent adds a child, decides what they are called in the app, and can remove them at any time.

Changes

If we change how any of this works, we will change this page and say so on it, with the date. See also our safeguarding statement.