How we protect your family's data

When a student account is created, we collect a username, password (hashed), age, display name, preferred language (English or Arabic), and — for students under 13 — a parent's email address for consent purposes.

When a student uses the platform, we collect lesson attempts, scores, time-on-task, AI tutor conversations, and per-skill mastery scores. This data is what makes the personalized learning work.

• Username + password hash (login)
• Age (placement into the right track)
• Display name + avatar (in-app identity)
• Preferred language (interface)
• For students under 13: parent email (consent + safety)
• Lesson activity: attempts, scores, time, mastery per skill
• AI tutor conversations (used to give context-aware help)
• School + class membership (if joined via school code)

• No real names beyond what kids choose as a display name
• No physical address
• No phone number
• No social media accounts
• No biometric data
• No location tracking
• No third-party advertising IDs (we have no ads)

For users under 13, we require verifiable parental consent before account activation. The flow: the child enters their information, we send a confirmation email to the parent, and the account stays inactive until the parent clicks the confirmation link.

Parents can at any time: (a) review what data we have collected about their child, (b) request that we delete it, (c) refuse further collection by deleting the account.

• Place each child in the right learning track
• Track their progress and adapt the difficulty
• Show them their own dashboard, badges, leaderboard standing
• Show their parent / teacher / school admin their progress (only authorized roles)
• Improve the platform (aggregated, de-identified statistics only)
• Send transactional emails (consent confirmations, parent invites, optional cert badges)

• We do not sell child data to anyone, ever
• We do not share child data with third-party advertisers
• We do not use child data to train AI models we don't operate
• We do not show ads to children
• We do not retain data after a parent requests deletion

When a student writes an open-ended answer, project, or talks to the AI tutor, the text is sent to Anthropic's Claude API to be evaluated or answered. Anthropic processes the data per their commercial terms (Anthropic does not retain customer data for training by default).

We do not send personally identifying info (real names, usernames, emails, school, age) to Anthropic — only the answer text, the lesson context and the conversation itself. Personal details a student types are filtered before sending, and the AI is instructed to ignore them. In school deployments, project photos are not sent to the AI unless the school switches that on.

Every AI interaction is screened for unsafe content and for signs of distress; a student can delete their AI chat history at any time from their profile, and a parent from the parent settings.

All data lives in databases hosted in commercial cloud regions, encrypted at rest and in transit. Access is restricted to platform engineers under audit. Our sub-processors, each bound by a data-processing agreement and certified to SOC 2 and/or ISO 27001:

• Railway (application servers and database) — European Union (Amsterdam, Netherlands)
• Vercel (website hosting) — global edge network
• Anthropic (AI model API) — United States; no identifiers sent, no training on our data
• Microsoft Azure Speech (read-aloud voices) — West Europe; receives lesson text only
• Resend (email delivery) — United States; parent and staff email addresses
• GitHub (source code and CI) — no user data

We never record or store audio or video. One learning game ("Teach a real AI") uses the camera inside the browser only — no picture leaves the device. Two voice games use the browser's built-in speech recognition; in Google Chrome that service is provided by Google and the spoken words are sent to Google to be turned into text. Students can always play these games without a camera or microphone (sample pictures and tap mode). In school deployments the camera and microphone are off by default and photo capture is disabled; a school can only turn them on after the Ministry of Education's recording approval.

For schools in Israel, the platform follows the Ministry of Education information-security and privacy standards: no personal information is shared with the AI, generative-AI features are available to students only from the grade the school sets (the Ministry default is grade 7) and only with recorded parental consent, staff use two-step verification, staff sessions end after 8 hours, administrator actions are logged for 24 months, and any security incident involving school data is reported to the Ministry within 8 hours. Schools own their data and can export or delete a student account at any time.

When you pay, a licensed payment provider processes the card. We never see or store the full card number or the security code.

We keep: the payer’s name and email, the last 4 digits, card type and expiry, a token used to renew, and the payment history (amounts, dates, receipts, refunds). The country you browse from (as our hosting provider reports it) decides which currency we show, and is kept with the account after the first payment.

Payment records are kept for 7 years, as tax law requires — also after the account is deleted. They hold the payer’s details only, never the child’s learning data.

We keep account data as long as the account is active, plus 30 days after last login (so accidental deletions can be recovered). Parents can request immediate full deletion at any time from their parent dashboard.

After deletion, we may retain anonymized aggregate stats (e.g., "20,000 lessons completed last month") but no data that can identify the deleted account.

To exercise any of these rights, log in as the parent and use the buttons on your dashboard. For complex requests, email privacy@albiruni.academy.

• Access: download the data we hold about your child
• Correction: fix anything that is wrong
• Deletion: full removal of the account and its data
• Portability: export progress in a standard format
• Withdraw consent: cancel further collection at any time

Questions, requests, or concerns: privacy@albiruni.academy. We respond within 7 business days.