The wording below describes how the platform actually works. Flagged clauses still need sign-off from legal counsel before commercial launch.
01What we collect
Clause flagged for legal review before launchAccount data (name, email, phone), the student details a parent adds (name, stage, grade, optionally year of birth), booking and payment records, and a tutor's professional details and verification documents.
02Minor students' data
Clause flagged for legal review before launchStudent details are used only to deliver the lesson and are shown to the tutor only as far as needed (first name, stage, teaching notes). They are never published on a public page, never used for marketing, and a parent can delete them at any time.
03Tutor documents
Clause flagged for legal review before launchDocuments are stored privately and can only be opened by an authorised admin through a short-lived signed link. Every access is written to the audit log.
04Sharing
Clause flagged for legal review before launchWe do not sell data. The minimum necessary is shared between parent and tutor to deliver a lesson, and with service providers (hosting, storage, communications) as needed to operate.
05Security
Clause flagged for legal review before launchPasswords are stored hashed (scrypt), sessions are bound to signed secure cookies, admin access requires two-factor authentication, and every sensitive action is logged.
06Retention
Clause flagged for legal review before launchBooking and payment records are kept for 7 years for financial review. Student details are deleted on the parent's request. Tutor documents are deleted 90 days after the relationship ends.
07Your rights
Clause flagged for legal review before launchYou can access, correct, export your data and delete your account from your account settings, and we will respond to privacy requests within a reasonable period.
08Cookies and tracking
Clause flagged for legal review before launchWe use one necessary cookie for signing in (a signed, HttpOnly session) and one language-preference cookie. We use no advertising trackers and do not sell visitor data. Any measurement we add later will be local and minimal, and will be declared here before it is switched on.
09Legal basis and legal review
Clause flagged for legal review before launchThis policy aims to align with the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018). The final wording and the legal-basis clauses need review by a Bahrain-licensed legal advisor before commercial publication, and we make no compliance claim ahead of that review.