Privacy

The short version

A parent holds the account. A child gets a profile inside it, with a first name, a date of birth and their learning progress. Nothing more. We do not ask children for an email address, we do not advertise to anyone, and we do not sell or share information about your family.

Who we are

Aniyat RUH Academy is a learning platform for Muslim families. If you have a question about anything here, or want a copy of what we hold, write to ruhprojects@outlook.com.

What we collect from a parent

• Your name and email address, so you can sign in and we can reach you.
• Your date of birth, if you give it.
• Payment details, which we never see. Card information goes straight to Stripe, our payment processor. We store your subscription: the plan, whether it is active, when it started and when it renews or ends. For each payment we store the amount, the currency, the date and whether it went through. We also store the reference numbers Stripe gives your account, your subscription and each payment, so we can match them up.
• Your notification preferences. Whether the app looks light or dark is saved on your device only. We do not store it.

What we collect about a child

• The first name (and optionally surname) you give them, and an avatar you pick.
• Their date of birth. This is not decoration: it decides which age band their learning path is built from.
• What they do in the app: lessons opened and finished, how long they spent on them, quiz answers and scores, which skills they have mastered, and the achievements they earn.

A child never gives us an email address or a password. When you add a child, the system creates an internal placeholder address that cannot receive mail, and the child reaches their learning through your account.

What we do with it

We use it to run the thing you signed up for: to build and adapt each child's learning path, to show you their progress, to keep your subscription working, and to tell you about your account. We do not profile children for advertising, and there is no advertising in the app.

Artificial intelligence

We use AI to help draft lessons, which an adult then reviews before any child can see them. Children's work is not sent to AI providers. The endpoints that carry typed text to a model are closed to child accounts, and a child's learning path is calculated from their own progress by our own code, not by a model.

Who else touches your data

• Clerk: sign-in. They hold your email address and password; we never see your password.
• Stripe: payments and card details.
• OpenAI: lesson drafting, from a topic an adult types. No child data.
• Sentry: error reports from our server, held in the EU. A report carries an account ID and the address of the request that failed. It leaves out what was sent in the request.
• Resend: sends account and service email, from Ireland.
• Vercel hosts this website. Railway runs our server and databases in the Netherlands. Supabase holds our main database in London. They store the data described above on our behalf and do nothing else with it.

That is the whole list. We do not sell data, and we have no advertising partners.

Where it is stored

Your family's records are held in the United Kingdom or the European Economic Area: our main database is in London and our server is in the Netherlands. Clerk, Stripe, OpenAI, Sentry, Resend, Vercel, Railway and Supabase are US companies. Where they process the data described above outside the UK and the EEA, they do so under their own transfer safeguards.

How long we keep it

While your account is open. When you delete your account in Settings, it goes straight away: your account, your sign-in, and each child's profile and learning records (a child who also has another parent stays with them). Any subscription is cancelled at the same time. If you cannot sign in, write to the address above from your account's email address and we will delete it within 30 days. Our own payment records go with your account. Stripe keeps its record of your payments for as long as tax law requires: six years from the end of the financial year the payment falls in.

Our server's logs record each request's address, the IP address it came from and the browser, so we can keep the service safe and fix faults. They do not record what you typed or sent. They are deleted after 30 days. Error reports (Sentry) are deleted after at most 90 days.

Backups of our databases are kept for up to 27 days, so anything you delete is gone from every backup within 27 days. If we ever restore a backup, we check it against our sign-in provider and delete again any account that had already been deleted, so a deleted account never comes back.

If you join the waiting list, we keep your email address, your first name if you give it, and which page or site you joined from, until you unsubscribe. Every email we send has a link to unsubscribe in one click. After that we keep the entry marked as unsubscribed, so that we never email you again and can show you asked us not to. Write to us if you want it deleted completely.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, for yourself and for each of your children. You can delete your account yourself: in Settings, choose Delete your account. That deletes your account, your sign-in and the records of each child who has no other parent, straight away. If you cannot sign in, see how to delete your account. You can also complain to the Information Commissioner's Office at ico.org.uk. You do not have to go through us first.

Children and consent

Accounts are held by adults. A child does not sign up, agree to terms, or make a payment. A parent adds a child, decides what they are called in the app, and can remove them at any time.

Changes

If we change how any of this works, we will change this page and say so on it, with the date. See also our safeguarding statement.