سياسة الخصوصية

This policy describes how SINI Learning ("we") collects and uses your data when you use SINI. We follow practices aligned with Saudi Arabia's Personal Data Protection Law (PDPL) and with GDPR standards for international users.

1. Data We Collect

Account: name, email, avatar (via Google when you sign in).
Learning: lesson progress, daily streaks, quiz results, XP.
AI tutor chats: stored to improve your experience; not used to train third-party models.
Subscription & payment: plan, renewal dates, invoice IDs — payments are handled entirely by Paddle; we never store card numbers.
Content you submit: sentences, notes, manually added vocabulary.
Technical: browser, device, IP address (stored as a salted SHA-256 hash, not in clear text).
Analytics (only after consent): usage events, page views, via GA4 and Microsoft Clarity.

2. Legal Basis for Processing

Contract: running your account and delivering lessons.
Consent: analytics and marketing cookies, optional communications.
Legitimate interest: security, fraud prevention, product improvement.
Legal obligation: keeping billing records as required by applicable law.

3. How We Use It

Run the platform and remember your progress.
Personalise lessons by HSK level.
Send optional streak reminders.
Aggregate analytics to improve the product — we never sell your data.
Fraud detection and monitoring for AI abuse.

4. Who We Share With

Cloud infrastructure provider: database hosting and auth.
Azure Speech: text-to-speech — text only, no user identity sent.
Paddle: payment processing and tax invoicing.
Google: sign-in only when you choose it.
Google Analytics & Microsoft Clarity: only after you accept analytics cookies.

We do not sell your data to any third party. Ever.

5. International Transfers

Some data may be processed outside Kingdom of Saudi Arabia by the providers listed above. We apply appropriate contractual safeguards aligned with PDPL and GDPR requirements.

6. Your Rights

Request a copy of your data.
Correct inaccurate data.
Delete your account and associated data.
Object to or restrict processing.
Withdraw marketing or analytics consent at any time.
File a complaint with the competent authority (SDAIA in Saudi Arabia).

Email privacy@siniedu.com (Data Protection Officer). We aim to respond within 48 business hours.

7. Retention

Account data: kept while your account is active.
After a deletion request: erased within 30 days, except records we must keep by law (billing: up to 10 years).
AI tutor chats: deleted with your account or on request.
Security session logs: IPs stored as salted hashes only, rotated within 180 days.

8. Security

All traffic is HTTPS-encrypted. Passwords are hashed. IP addresses are stored as salted hashes to reduce risk. Admin access is restricted to the minimum required staff, and every admin action is written to an audit log.

9. Children

The platform is not intended for children under 13. We do not knowingly collect their data; if we discover such an account we delete it promptly.

10. Cookies

Full details in the Cookie Policy.

11. Changes

We may update this policy; we will email you before any material change and update the version number and effective date above.

12. Contact

Privacy questions: privacy@siniedu.com · Contact page.