Last Updated: March 2026

1. Introduction and Our Commitment to Amanah (Trust)

Welcome to Rayhaan School Academy. We provide specialized online Islamic education, offering one-on-one instruction in Tajweed, Quran, and Tafseer. At Rayhaan School Academy, we view the protection of your privacy and personal data not just as a legal requirement, but as a fundamental Islamic trust (Amanah).

This Privacy Policy explains how we collect, use, protect, and handle your personal information and the information of your children. We are strictly committed to complying with global data protection standards, including the General Data Protection Regulation (GDPR) and the Children’s Online Privacy Protection Act (COPPA).

2. Information We Collect

We collect information categorized into three distinct streams to ensure that our staff and tutors only have access to the information necessary for instruction:

A. Direct Identity and Administrative Information

  • Parent/Guardian Information: Name, email address, phone number, and billing details.
  • Learner Profile (Student) Information: Name, age, gender, and username.
  • Financial Data: We utilize secure third-party payment processors (such as PayPal or Stripe). Rayhaan School Academy does not collect or store full credit card numbers or bank details on our servers.

B. Pedagogical Data and Intellectual Progress

To provide a bespoke educational experience, we track the student’s learning journey. This includes:

  • Tajweed evaluation notes and Hifz (memorization) tracking.
  • Pace of learning and areas of struggle/improvement.
  • Session recordings (audio and video).

C. Automated Technical Data

Like most digital platforms, we automatically collect certain technical data to ensure our platform functions securely, including:

  • IP addresses (for security and fraud prevention).
  • Browser type and device information.
  • Cookies (for session management and user preferences).

3. Protecting Minors: The “Parent-First” Model (COPPA Compliance)

Protecting the privacy of children under 13 is our highest priority. We operate on a strict “Parent-First” enrollment model:

  • Verifiable Parental Consent (VPC): Parents must create the primary account and provide explicit, verifiable consent before a subordinate “Learner Profile” is created and before any data is collected from a child.
  • Data Minimization: We never require a child to disclose more information than is reasonably necessary to participate in their courses.
  • Zero Targeted Advertising: We strictly prohibit behavioral advertising, profiling, or the tracking of minors for marketing purposes.

4. How We Use and Share Your Data

Rayhaan School Academy does not, and will never, rent, sell, or monetize your personal data to third parties.

Data is only used to fulfill educational services, ensure safety, and improve our platform. We share data only under strict conditions:

  • Total Isolation of Contact Data (Tutor Access): For safety reasons, assigned tutors are only provided with the student’s name, age, gender, and educational progress. Tutors are strictly prohibited from accessing a student’s email, phone number, or billing information to prevent unauthorized off-platform communication.
  • Trusted Sub-Processors: We share necessary data with secure third-party vendors (e.g., cloud hosting providers, secure video communication tools) solely to facilitate our services. All sub-processors are vetted for GDPR and COPPA compliance.

5. Virtual Classroom Privacy and Session Governance

Live video and audio sessions are the core of our academy. To protect these interactions, we enforce robust security protocols:

  • Classroom Controls: We utilize Waiting Rooms, unique meeting IDs, and restrict screen-sharing and recording capabilities exclusively to authorized staff/tutors to prevent unauthorized access (“Zoombombing”).
  • Session Recordings: Live sessions may be recorded exclusively for Internal Operations, which include:
    • Quality Assurance: Senior instructors reviewing sessions to ensure pedagogical standards.
    • Student Review: Allowing students to review their recitations.
    • Safety Monitoring: Protecting both the student and the tutor by maintaining an objective record.
  • Access to recordings is strictly limited to authorized personnel and the respective parents. Recordings are stored in encrypted environments.

6. Data Security and Infrastructure

We utilize industry-standard security measures to protect your data from unauthorized access, alteration, or destruction:

  • Encryption: All data in transit is protected by Transport Layer Security (TLS/SSL). Sensitive data at rest is encrypted using AES-256 standards, and passwords are comprehensively hashed.
  • Role-Based Access Control (RBAC): Staff and instructors only have access to the specific data required to perform their direct duties.

7. International Data Transfers

Because we serve a global Muslim community, student data may be securely transferred to, or accessed by, tutors located outside your home country. We ensure that all international data transfers are protected by legal mechanisms, such as Standard Contractual Clauses (SCCs), and we require all international staff to sign strict Non-Disclosure Agreements (NDAs).

8. Data Retention Lifecycle

We only retain personal data for as long as necessary to fulfill its original purpose:

  • Active Students: Retained for the duration of the educational relationship.
  • Post-Cancellation: Data is retained for 12 months after account cancellation to allow for easy resumption of studies. After 12 months, the data undergoes a secure “soft delete” and is permanently erased from all backup archives within 30 days.

9. Your Privacy Rights

Depending on your jurisdiction (such as under the GDPR), parents and adult learners have specific rights regarding their personal data, including:

  • The Right to Access: You can request a copy of the data we hold about you or your child.
  • The Right to Correction: You can update or correct inaccuracies in your profile.
  • The Right to Deletion (Right to be Forgotten): You can request the permanent closure of your account and the erasure of your data.
  • The Right to Portability: You can request an export of your student’s Tajweed and educational progress records.
  • The Right to Restriction: You can opt-out of certain processing activities, such as promotional newsletters or specific recording uses.

10. Contact Us

If you have any questions, concerns, or wish to exercise your data privacy rights, please contact our Privacy Team at:

  • Email: contact@rayhaanschool.com
  • Phone: +201002602019

By enrolling in Rayhaan School Academy, you acknowledge that you have read and agree to this Privacy Policy.

Let's chat