Privacy Policy
Last updated 13 October 2026
This describes what we hold about you, why, and what you can ask us to do with it. It is written to be read, not to be survived.
What we hold
For a student:
- Your name, email address and country.
- Your phone number, and a parent or guardian's phone number.
- Which courses you are enrolled on and which lessons you have finished.
- Work you hand in, and the marks and feedback on it.
- A record that your guardian confirmed your enrolment: when, to which number, and the exact wording they were sent.
Why we hold the two phone numbers
Yours, so we can confirm it is really you when you enrol and reach you about your classes.
Your guardian's, because a student under 18 needs their confirmation to enrol. We send that number a message asking them to confirm, and we keep the record of their answer. That record is the reason the account is allowed to exist, which is why it is kept for as long as the account is. Once they have confirmed, we may also send that number WhatsApp messages about your homework, live classes, attendance and results.
Who can see it
Your teacher and their assistants, and nobody else's. Every table in the database is scoped to one teacher and enforced by the database itself, not by the screens — a query from another teacher's account returns nothing at all.
Assistants can see your work and message you. They cannot see payments.
We do not sell anything about you, and we do not share it with anyone for advertising.
Where it is stored
In Frankfurt, Germany, on Supabase. Payments are processed by Stripe, who hold the card details we never see. Messages to your phone and your guardian's go through WhatsApp.
How long we keep it
Your account and your work stay while you are enrolled and after, so that you can go back to a course you have finished. If you leave a course, your work in it is deleted and you cannot go back to it. You can delete your account yourself on My profile. It is then frozen for 14 days, during which you can sign in and restore it, and then deleted. Records of your payments are kept, and Stripe, who processes them, keeps its own. Some copies are not removed by this: our database backups until they expire, technical logs we keep for security and to deliver messages (which can include your email address, phone number and IP address), and what WhatsApp, Zoom and our email provider keep of messages already sent.
Asking for a copy, or asking us to delete it
To delete your account, use Delete account on My profile. To ask for a copy of your data, or for help deleting it, email Loay.mkhalil@gmail.com. We will answer within a month.
Cookies
Our cookies do these jobs and nothing else: keep you signed in; remember the language you chose; on a student account, remember for a year that this browser is one of the devices your account is set up on; for staff, remember whether the admin menu was folded away; and, while you sign in with Google, remember on this site that a sign-in is under way, and your device code (below), until Google sends you back. When you sign in, your browser also works out a short code from a few of your device's settings: its screen size, whether it has a touch screen, its time zone and how many processor cores it has. That code lets two browsers on the same phone or computer count as one device. We store it combined with your account and use it only to count your devices, never to decide who may sign in. Many devices share the same settings, so the code is not a secret and does not identify you on its own. When you pay by card, Stripe's payment form may set its own cookies on this site to help prevent fraud. There is no advertising tracker and no analytics profile built about you.
Getting in touch
Loay.mkhalil@gmail.com, for anything on this page.