Legal
Privacy Policy
Last updated: July 2026
Ayatinah (“we”, “us”, “our”) operates an online Quran learning platform at ayatinah.com and portal.ayatinah.com. This policy explains what data we collect, why we collect it, and how we keep it safe.
What we collect
- Account data: name, email, username, WhatsApp number, timezone.
- Booking data: trial requests, course selections, preferred class times.
- Class data: attendance records, class notes, progress tracking, Zoom meeting links.
- Payment data: billing details and transaction records processed via Stripe. We do not store full card numbers.
- Technical data: IP address, browser type, and approximate region (via Cloudflare headers) for pricing detection and security.
How we use it
- To schedule and conduct one-on-one Quran classes.
- To send class reminders and booking confirmations via WhatsApp.
- To process payments and issue invoices.
- To track student progress and share it with parents (for minor students).
- To detect and prevent fraud or abuse.
What we don’t do
- We do not sell your data to third parties.
- We do not use your data for advertising.
- We do not share class recordings outside your enrolled household without consent.
Class recordings
Zoom classes are automatically recorded for revision and quality purposes. Recordings are visible to the student, their parent (if applicable), and authorised staff. Recordings are retained for the duration of enrolment and deleted thereafter unless required for safeguarding.
Zoom integration
Teachers on our platform may connect their personal Zoom account to enable automatic meeting creation for scheduled classes. This integration uses Zoom’s official OAuth 2.0 framework.
- What we receive:when a teacher connects Zoom, we receive their Zoom user ID and email address to identify the connected account. We store encrypted OAuth tokens to create and manage meetings on the teacher’s behalf.
- What we do:we create, update, and delete Zoom meetings for the teacher’s scheduled classes automatically. We receive webhook notifications from Zoom when meetings start and end, and when participants join or leave, for live class monitoring purposes.
- Recordings: for teachers on Zoom Pro plans, cloud recordings of classes may be downloaded and stored for quality review by authorised academy managers. For teachers on free Zoom plans, local recordings may be uploaded manually by the teacher.
- What we don’t do: we do not access your Zoom contacts, chat messages, or any Zoom data unrelated to meetings created by our platform. We do not share your Zoom data with any third parties.
- Disconnection:teachers can disconnect their Zoom account at any time from their portal settings. This immediately deletes all stored OAuth tokens. Meetings already created remain on the teacher’s Zoom account.
WhatsApp messaging
We use WhatsApp to send booking confirmations, class reminders, meeting links, and payment notifications. You can opt out of non-essential messages at any time by replying STOP or contacting us at [email protected].
Data storage
Data is stored on secure servers in the EU and US. Payment data is processed by Stripe and stored under their PCI-DSS compliance. Files (PDFs, recordings) are stored on Cloudflare R2 with token-based access.
Your rights
- Access: request a copy of your data.
- Correction: ask us to fix inaccurate data.
- Deletion: ask us to delete your data (subject to legal retention requirements).
- Portability: receive your data in a machine-readable format.
- Withdrawal: withdraw consent for WhatsApp messaging at any time.
To exercise any of these rights, email [email protected].
Children’s data
We accept students of all ages. For students under 16, account data is managed by a parent or guardian. Parents can access, correct, or delete their child’s data at any time.
Cookies
We use only essential cookies for authentication and session management. We do not use tracking or advertising cookies.
Contact
Questions about this policy? Email [email protected] or WhatsApp +1 786 807 8678.