Privacy Policy

We collect the following categories of information to provide and improve our services:

• Account Information: Name, email address, avatar, and phone number (optional) when you create an account.
• Profile Information: Bio, interests, education background, and other details you choose to add to your profile.
• Content: Posts, messages, course progress, quiz results, and any other content you submit or create on the platform.
• Preferences: Learning preferences, notification settings, and other customization choices.
• Usage Data: Information about how you interact with the platform, including pages visited, features used, and time spent.
• Cookies: We use cookies and similar tracking technologies. Please see our Cookie Policy for detailed information.

We use the information we collect for the following purposes:

• Provide, maintain, and improve our educational services and platform features.
• Personalize your learning experience, including course recommendations and content.
• Communicate with you about updates, new features, and relevant educational content.
• Analyze usage patterns to understand how our platform is used and to improve it.
• Ensure platform security, prevent fraud, and protect user data.
• Comply with legal obligations and enforce our Terms of Service.

We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption at Rest: All stored data is encrypted using AES-256 encryption standards.
• Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.3 protocols.
• Authentication: We implement multi-factor authentication options and secure password hashing (bcrypt).
• Security Audits: We conduct regular security assessments, penetration testing, and code reviews to identify and address vulnerabilities.
• Access Controls: Strict access controls ensure that only authorized personnel can access user data on a need-to-know basis.

We work with trusted third-party service providers to deliver our platform. These providers process your data solely on our behalf and under our instructions:

• Cloudinary— Image and file hosting and optimization.
• Google Analytics— Usage analytics and behavior tracking.
• Stripe— Payment processing for premium features and courses.
• Vercel— Platform hosting and deployment infrastructure.
• SendGrid / Resend— Email delivery for notifications and communications.
• OpenAI— AI-powered features such as personalized recommendations and content generation.

Each third-party provider is contractually bound to adhere to data protection standards consistent with this policy and applicable laws.

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your data for direct marketing or legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email: alikamal0675@gmail.com