Privacy Policy · سياسة الخصوصية

1. Who this is for

Accounts are intended for adults — parents, caregivers, and educators. The app is not directed to, and not intended to be used directly by, children. Adults create the account and decide what limited information to enter about a child.

2. Information we collect

We do not use advertising trackers, third-party analytics, or behavioral profiling.

• Account information: your email address and a securely hashed password (we never store your password in plain text).
• Child profile: a first name or nickname you choose, an age range, a preferred language, and optional focus areas. We encourage using a nickname rather than a full legal name.
• Learning records: observation notes and progress levels you record for a child.
• Notifications: if you opt in, a push-notification subscription so we can send reminders. You can turn this off at any time.
• Technical essentials: a secure, http-only session cookie to keep you signed in, and limited browser local storage to hold a plan on your device when you are not signed in.

3. How we use information

We do not sell your information, and we do not share it for anyone else’s advertising.

• To provide the service: show the curriculum, build a personalized plan, and save your child’s progress.
• To secure your account: sign-in codes, email verification, and password reset.
• To send reminders you have opted into.
• To keep the service safe and working (for example, rate-limiting abuse).

4. Service providers

We rely on a small number of trusted service providers to run the app: Vercel (hosting), Upstash (database/Redis for accounts and saved data), and Resend (transactional email such as sign-in codes). These providers process data only to provide their service to us.

5. Where data is stored

Data is hosted on servers located in the United States (US-East region). By using the service you understand your information may be processed there.

6. Data retention and your choices

• You can remove a child profile at any time from your family plan.
• You can request deletion of your account and associated data by contacting us.
• Anonymous (not-signed-in) data lives only in your own browser and is removed when you clear your browser storage.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your information, and to withdraw consent. To exercise any of these, contact us and we will respond within a reasonable time.

8. Security

We protect data with industry-standard measures: passwords are hashed with scrypt, data is encrypted in transit (HTTPS) and at rest, sessions use http-only cookies and can be revoked, and sensitive endpoints are rate-limited. No method is perfectly secure, but we work to safeguard your information.

9. Children’s information

Because this app concerns children, we are deliberate about minimizing what we collect about them. See our separate Children’s Privacy notice for details, including parental responsibility and how to remove a child’s information.

10. Changes to this policy

We may update this policy as the product evolves. We will revise the “last updated” date and, for material changes, take reasonable steps to notify you.

11. Contact

Questions or requests: support@qubtan.space.