Privacy Policy

Idraak is an English-learning app and online class service for Arabic speakers. This policy explains what we collect, why, and what you can do about it.

Who we are. Idraak Academy, commercial registration Pending, Muscat, Sultanate of Oman, Sultanate of Oman. Questions: hello@idraak.om.

What we collect

When you create an account: your email address, a password (we never store the password itself — only a one-way encrypted version we cannot reverse), optionally your name, and your date of birth.

If you are under 18: we also collect a parent or guardian's name, their WhatsApp number if provided, and a record that we obtained their consent.

If a parent adds a student to their account: the student's name, date of birth and the sign-in name the parent chose. The parent can remove the student at any time.

For live classes: your gender, because our class groups are separate for women and girls and for men and boys. A parent gives it when adding a student; otherwise our staff record it when placing you in a group.

When you buy a plan or classes: what you bought, the amount, how and when you paid, and the invoice.

As you learn: which lessons you have finished, your answers to questions, your scores, your streak and points, the words you save to your Word Bank, and the questions you flag to revisit.

If you use speaking practice: the sentence you practised and the words your browser heard you say. Your browser turns your voice into text, not us: in Google Chrome that means your voice is sent to Google, under Google's privacy policy. We receive only the text, never a recording.

If you use “Your turn” writing tasks: the sentences you write. The app checks most of them itself, with a tick-list and a model answer. When AI feedback is switched on and a task offers it, what you write is sent to our AI provider to be checked, without your name, email or account details attached (we remove email addresses and phone numbers from it first), and it is stored with your account: it is in the file you download from Settings, and it is erased when you delete your account. A “Your turn” task is feedback, never a mark.

When you sign in: the time, your IP address, and which browser and device you used. We keep this so you can see where your account is signed in, and so we can spot someone trying to break into it.

If you join our newsletter: your email address, the language you chose and when you joined. We use it only to email you about Idraak, and we remove it whenever you ask.

If you contact us on WhatsApp to book a class, WhatsApp handles that conversation under its own privacy policy, not ours.

We do not collect payment card details (Payments are made by bank transfer, recorded by our office. We never see or store card numbers.), your location, your contacts, or anything from other apps. We use no advertising or tracking cookies — the only cookie we set is the one that keeps you signed in.

Why we collect it

To give you the service you signed up for: to teach you, to remember where you are, to keep your account secure, and to answer you when you get in touch. If you are learning with us through a school or teacher, we also share your progress with them.

Where your data is kept

Your data is stored on servers operated by To be confirmed at deployment, located in Oman or nearest GCC region.

Oman's Personal Data Protection Law restricts transferring personal data outside the Sultanate. We do not transfer personal data outside Oman without your consent or a lawful basis.

Who else sees it

Very few. We do not sell your data and we never will.

• To be confirmed at deployment — stores the database on our behalf.
• AI feedback on your writing, only when it is switched on: the sentences you write in a “Your turn” task that offers it are sent to our AI provider to be checked, with no name, email or account details attached. We do not use AI tutors in production today.
• Your browser's speech service — only if you use speaking practice: in Google Chrome, Google turns your voice into text for your browser, as described above.
• Our staff — only those who need it to help you, including a parent or guardian's name and consent record if you are under 18, and every account action a staff member takes is recorded in an internal log.

How long we keep it

For as long as you have an account. Delete your account and your learning history, saved words, points, sign-in records and any guardian details on file are erased immediately and permanently.

Two things survive, deliberately: our internal record that a staff member acted on an account, and anything we must keep by law — your orders, payments, invoices and refunds, with the email address they were paid from.

What you can do

You can do the first three yourself, right now, from Settings — no need to ask us:

• See where you are signed in, and sign out of every other device.
• Download everything we hold about you as a file.
• Delete your account permanently. This cannot be undone.
• Correct your name or password at any time.

If you would rather we did any of this for you, email hello@idraak.om and we will respond within 14 days.

Children

If you are under 18, you need a parent or guardian's permission to use Idraak, and they may contact us about your account at any time.

Keeping it safe

Passwords are stored using strong one-way encryption. Sign-in sessions are stored as a hashed token, not as anything readable. Repeated wrong passwords are slowed down automatically. Changing your password signs out every other device.

No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant Omani authority.

Complaints

Email us first at hello@idraak.om. If we do not resolve it, you may complain to the Ministry of Transport, Communications and Information Technology, which oversees data protection in Oman.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect.