WASL

DRAFT — requires legal review before production use. WASL does not claim to be “fully GDPR compliant”. Some details are pending controller/legal input.

Privacy Policy

Last updated: 2026-09-10

WASL is a live, interactive Qur’an learning platform. This notice explains what personal data we process, why, and your rights. Company identity, legal bases, retention periods and controller/processor roles are pending finalisation and appear as bracketed placeholders below.

Who we are

Operator: [LEGAL ENTITY REQUIRED]. Privacy contact: [PRIVACY CONTACT EMAIL REQUIRED].

Personal data we process

  • Account: display name, locale, and (in Supabase Auth) email.
  • Students: display name; optionally birth year (not a full date of birth).
  • Parents/guardians: identity, relationship, contact email.
  • Learning: tracks, Qaida/Qur’an position, Tajweed, Hifz/revision, corrections, teacher notes, homework (incl. optional voice recordings), attendance.
  • Classroom: participant identifiers and presence (no recording).
  • Operational: redacted logs and rate-limit counters. We do not store IP addresses or user-agents in our application database.
  • Invitations: invitee email, hashed token, role, tenant, expiry.

Live classroom & recording

Live audio/video/screen-share is provided via a media vendor which receives a pseudonymous participant identifier and your display name for the participant list. WASL does not record lessons.

Legal bases

To be confirmed per purpose (contract, legitimate interests, legal obligation, or consent for optional features). We do not rely on a single blanket consent box.

Your rights

Access, rectification, erasure, restriction, objection, and portability. Manage these in Account → Privacy or contact [PRIVACY CONTACT EMAIL REQUIRED]. A linked guardian may exercise a child’s rights.

Retention, security & transfers

Retention periods are being finalised; nothing is auto-deleted until approved. We use row-level security and tenant isolation, hashed invitation tokens, redacted logging, and private storage for homework audio. Some vendors may process data outside the EU/EEA; transfer mechanisms are being confirmed.

Complaints & contact

You may complain to your supervisory authority [SUPERVISORY AUTHORITY REQUIRED], or contact us at [PRIVACY CONTACT EMAIL REQUIRED].