Privacy Policy

Easy Arabic Reading is operated by Easy Arabic Reading, United Kingdom. For any data-protection question, contact privacy@easyarabicreading.com.

• Account data: email address, display name, country, hashed password (never stored in plaintext).
• Subscription data: the plan you selected and its status. Payment card details are handled by our PCI-DSS-compliant payment provider — we never see or store them.
• Learning data: lessons started, lessons completed, quiz scores, practice streaks and dictation submissions.
• Technical data: IP address, browser type, and session information used strictly for security and fraud prevention.

• Contract: to deliver the lessons and account features you subscribed to.
• Legitimate interest: to keep the platform secure and to improve teaching quality.
• Consent: only for optional messages (product updates). You can withdraw consent at any time.
• Legal obligation: for tax, accounting, and lawful requests from authorities.

All personal data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Passwords are hashed using industry-standard algorithms. Database access is protected by row-level security policies — a user can only ever read their own data. Administrative access is restricted, audited, and multi-factor-authenticated.

We do not sell your data. We share it only with essential processors:

• Payment provider (for subscription billing).
• Cloud infrastructure provider (for hosting and backups).
• Email provider (for account & receipt emails).

Each processor is bound by a Data Processing Agreement.

Account data is retained while your account is active and for up to 6 months after deletion to satisfy legal obligations. Billing records are retained for 7 years as required by UK tax law.

You may at any time request to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your account and personal data (“right to be forgotten”).
• Restrict or object to processing.
• Receive an export of your data (data portability).

To exercise any right, email privacy@easyarabicreading.com. We respond within 30 days. You also have the right to lodge a complaint with the UK ICO (ico.org.uk).

Data may be processed outside the UK/EEA by our infrastructure providers. When it is, we rely on Standard Contractual Clauses to ensure equivalent protection.

Easy Arabic Reading is not directed at children under 13. Parents may create accounts on behalf of minor learners and remain the data controller for that account.

We will notify you by email of any material change to this policy at least 14 days before it takes effect.