1. Who is responsible for your data

The controller of your personal data is Innohand Solutions, Cairo Investment Commercial Register no. 289532, Cairo, Egypt. For any question or request about your data: support@etkalemzayohom.com (put "my personal data" in the subject so it reaches the data-protection officer). Official contact with the company: contact@innohandsolutions.com.

2. The data we collect

Account data: name, email address, password (encrypted), and your profile picture if you sign up with Google.
Learning data: the language you learn, your level, your age group, your gender (male/female), your nationality, how you heard about us, your progress, your answers and results. Gender and nationality are used to tailor the teaching — the languages we teach change the form of a word according to the speaker's gender, and the content differs by country — and are never used for advertising or shared with third parties.
Usage and device data: pages visited, video plays (lesson and time), browser type and operating system, a technical browser identifier (a hash of general characteristics that does not track you across other sites), IP address and the approximate location inferred from it (country and city), and the last use of each device.
Content you submit: your voice in conversation exercises (with your consent).
Payment data: order number, plan, amount, payment method, receipt and refund requests. We do not store card numbers; they are processed by Paymob.
Communication: support messages and reports, and a log of the messages we sent you.
Source: the link or campaign you arrived from.
Consents: what you agreed to, when, and from which device.

3. Why we use your data, and on what basis

Creating your account, delivering lessons, saving your progress and processing your subscription — performance of our contract.
Tailoring your path to your language and level — performance of the contract.
Generating exercises and answers with AI — performance of the contract.
Pronunciation exercises using the microphone — your consent (withdrawable at any time).
Protecting content and preventing account sharing and fraud: the device limit, the watermark, playback limits, recording devices and addresses — our legitimate interest in protecting the Service.
Securing our systems, detecting intrusions and proving consents — legitimate interest / legal obligation.
Service messages (welcome, receipts, subscription expiry, replies to your reports) — performance of the contract.
Marketing emails — your consent (withdrawable from your profile or the unsubscribe link).
Usage analysis to improve lessons (analytics cookies) — your consent via the cookie banner.
Keeping payment records and invoices — legal obligation (tax and accounting).
Responding to requests from public authorities — legal obligation.

4. Who we share your data with

We do not sell your data. We share it only with service providers working for us and on our instructions: Supabase (database and authentication), Vercel (hosting and approximate location), Bunny.net (video delivery; sees your IP address), Paymob (payments), Resend (email delivery), OpenRouter and the model providers it routes to, and Google (AI and search), and Google Analytics (if you accept analytics cookies). We may also disclose data where required by law or a court order, or to protect our rights or users' safety.

5. Transfers outside Egypt and the European Union

Our service providers operate on servers outside Egypt (in the European Union and the United States). By creating an account you consent to the transfer and processing of your data by these providers to the extent needed to provide the Service; you can view and manage this consent on your profile page. For EU residents, transfers outside the European Economic Area are made under the European Commission's standard contractual clauses or adequacy decisions.

6. How long we keep your data

We keep your data as long as it is needed for the purposes described, then delete or anonymise it:

Account and learning data: for the life of the account, deleted within 30 days of a deletion request.
Device and video-play logs: 12 months.
Payment records and invoices: the period required by tax and accounting law.
Consents and sign-in log: for the life of the account and up to 3 years after it, as evidence.
Support messages: 2 years.
An account inactive for more than 3 years is deleted after notice to you.

7. Your rights

You have the right to: access your data and obtain a copy; correct it; delete it (delete the account from the account settings or by contacting us); restrict or object to its processing, especially for marketing; port it to another provider in a machine-readable format; and withdraw your consent at any time without affecting what was done before withdrawal. Write to support@etkalemzayohom.com; we reply within 30 days and may ask you to verify your identity. You also have the right to complain to the supervisory authority: in Egypt the Personal Data Protection Centre, and in the European Union the data-protection authority of your country of residence — we ask you to contact us first.

8. Children

The Service is for people aged 18 and over only. We do not ask children for data, do not knowingly collect it, and do not direct the Service at them. Onboarding asks for your age group, and the youngest band offered is 18–24. If we learn that an account belongs to someone under 18 we close it and delete their data within 30 days. If you are a parent or guardian and believe your child has created an account, write to support@etkalemzayohom.com.

9. Cookies and similar technologies

We use two categories of cookies. Necessary (no consent needed): sign-in and session refresh, language preference, the device identifier for the device limit, and remembering your choice in the cookie banner — lasting up to one year. Analytics (with your consent, off by default): Google Analytics (_ga, _gid) to understand how the site is used, lasting up to two years. We use no advertising cookies. You can change your choice at any time from "Cookie preferences" at the bottom of the page or in your browser settings; disabling necessary cookies prevents signing in.

10. Security

We protect your data with appropriate technical and organisational measures: encryption in transit, encrypted passwords, restricted access rights, signed and time-limited video links, and an audit log of support-team actions. Absolute security on the internet cannot be guaranteed; if a breach affecting your data occurs, we notify the supervisory authority and you within 72 hours of becoming aware of it, as the law requires.

11. Changes to this policy

We may update this policy. For a material change we notify you by email or within the platform before it takes effect, and ask for your agreement again where required. The effective date and version number are at the top of the page.

Privacy Policy