Privacy Policy

WASL is a live, interactive Qur’an learning platform. This notice explains what personal data we process, why, and your rights. Company identity, legal bases, retention periods and controller/processor roles are pending finalisation and appear as bracketed placeholders below.

Who we are

Operator: [LEGAL ENTITY REQUIRED]. Privacy contact: [PRIVACY CONTACT EMAIL REQUIRED].

Personal data we process

• Account: display name, locale, and (in Supabase Auth) email.
• Students: display name; optionally birth year (not a full date of birth).
• Parents/guardians: identity, relationship, contact email.
• Learning: tracks, Qaida/Qur’an position, Tajweed, Hifz/revision, corrections, teacher notes, homework (incl. optional voice recordings), attendance.
• Classroom: participant identifiers and presence (no recording).
• Operational: redacted logs and rate-limit counters. We do not store IP addresses or user-agents in our application database.
• Invitations: invitee email, hashed token, role, tenant, expiry.

Find a Teacher

• Listed teachers: the profile a teacher chooses to publish (name, optional photo, bio, country, time zone, languages, courses and fees, availability, qualifications) is public while listed and hidden as soon as it is paused or removed. Email and phone are never public. We record verification outcomes, not documents.
• Inquiries: the course, your child’s age, preferred times, time zone and your message go to the teacher you contact. Your child’s first name is shown only after the teacher accepts. If the teacher onboards your child, the child joins that teacher’s WASL workspace.
• Reports and feedback are used to keep the directory safe; the reported person is not told who reported them.
• Lesson fees are agreed and paid directly between parents and teachers. WASL does not process payments for lessons.

Cookies & analytics

Essential cookies keep you signed in and remember your language, time zone and workspace. Anonymous page-visit analytics (Vercel Web Analytics, no cookies) runs only if you accept it, and never in a child’s session. Change your choice any time in Cookie settings.

Live classroom & recording

Live audio/video/screen-share is provided via a media vendor which receives a pseudonymous participant identifier and your display name for the participant list. WASL does not record lessons.

Legal bases

To be confirmed per purpose (contract, legitimate interests, legal obligation, or consent for optional features). We do not rely on a single blanket consent box.

Your rights

Access, rectification, erasure, restriction, objection, portability, and withdrawing consent at any time. In Account → Privacy you can download your account data immediately (and each linked child’s learning record), see your consent history, and send other requests; we answer within one month. You can also contact [PRIVACY CONTACT EMAIL REQUIRED]. A linked guardian may exercise a child’s rights.

Retention, security & transfers

Retention periods are being finalised; nothing is auto-deleted until approved (proposed: Find a Teacher inquiries anonymised 12 months after closing). We use row-level security and tenant isolation, hashed invitation tokens, redacted logging, and private storage for homework audio. Some vendors may process data outside the EU/EEA; transfer mechanisms are being confirmed.

Complaints & contact

You may complain to your supervisory authority [SUPERVISORY AUTHORITY REQUIRED], or contact us at [PRIVACY CONTACT EMAIL REQUIRED].