1. Introduction

IhsanAcademy ("we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website and platform (collectively, our "Services") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• On our website and platform.
• In email, text, and other electronic messages between you and our Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this privacy policy.

For information about how we use cookies and similar technologies, including your choices, please see our Cookie Policy.

2. Information We Collect

We collect several types of information from and about users of our Services, including information:

• By which you may be personally identified, such as name, email address, telephone number, or any other identifier by which you may be contacted online or offline ("personal information").
• That is about you but individually does not identify you, such as your age, gender, or education level.
• About your internet connection, the equipment you use to access our Services, and usage details.

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.
• From third parties, for example, our business partners.

3. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Services and its contents to you.
• To provide you with information, products, or services that you request from us.
• To fulfill any other purpose for which you provide it.
• To provide you with notices about your account, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Services or any products or services we offer or provide through it.
• To improve our Services and to deliver a better and more personalized experience.
• For any other purpose with your consent.

4. Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of IhsanAcademy's assets.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of IhsanAcademy, our customers, or others.

5. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. We use safeguards such as TLS encryption in transit, role-based access controls, and regular monitoring to help protect your information.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

6. Children's Privacy

Our Services may be used by children with appropriate consent and oversight. If you are under the age required by your jurisdiction to provide consent (for example, under 13 in the United States or under 13–16 in the EEA/UK, depending on local law), you must have verifiable consent from a parent/guardian, or access must be provided and managed by your school or educational institution acting as your data controller. Where required, we rely on schools to obtain and manage any necessary consents.

We do not knowingly collect personal information from children without the requisite consent. If we learn that we have collected personal information from a child without the necessary consent, we will take steps to delete the information. Parents, guardians, and schools may contact us to review, request deletion of, or limit the processing of a child’s information.

7. Your Rights and Choices

You can review and change your personal information by logging into the Services and visiting your account profile page.

You may also send us an email to request access to, correct, or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

8. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the website home page and/or by sending an email to the primary email address associated with your account. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this privacy policy to check for any changes.

9. Contact Information

To ask questions about this privacy policy, contact us at academy@ihsanhub.io

10. Legal Bases for Processing (EEA/UK)

Where the GDPR/UK GDPR applies, we process personal information on the following legal bases: (a) to perform a contract with you (for example, to provide the Services), (b) our legitimate interests (for example, to secure and improve the Services), (c) your consent (for example, for certain cookies or marketing), and (d) compliance with legal obligations.

11. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes we collected it for, including to provide the Services, comply with legal, tax, or accounting requirements, resolve disputes, and enforce agreements. Retention periods may vary by data category and purpose.

12. International Data Transfers

We may transfer your personal information to countries other than your own. Where we transfer personal information from the EEA/UK to countries that have not been deemed to provide an adequate level of data protection, we use appropriate safeguards, such as Standard Contractual Clauses, and implement additional technical and organizational measures as appropriate.

13. Service Providers and Partners

We use third-party service providers to operate and improve the Services (for example: authentication and hosting providers, cloud infrastructure, analytics, content delivery, payments, and video streaming). These include, for example, Supabase (auth/database), Stripe (payments), Mux (video), and CDN providers such as Bunny/Cloudflare. We require such providers to process personal information only on our instructions and to protect it appropriately.

14. California and Other U.S. State Privacy Rights

If you are a resident of California or certain other U.S. states, you may have rights to access, correct, or delete personal information, and to limit certain uses. We do not sell personal information. We also do not share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide the required opt-out mechanisms, including a"Do Not Sell or Share My Personal Information" link.