Rawdh: Privacy Policy

Last updated: 26 June 2026

1. Introduction

This Privacy Policy explains how Rawdh ("Rawdh", "we", "us", or "our") collects, uses, shares, and protects personal data when you use our website, application, and related services (together, the "Service"). We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation.

For the purposes of UK and EU data protection law, Rawdh acts as the data controller for personal data processed through the Service.

If you have any questions about this Policy or how we handle your data, contact us at team.rawdh@hotmail.com.

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, and password (handled securely via our authentication provider) when you register.
• Profile information: optional details you choose to add to your profile, such as a display name or avatar.
• Payment information: when you subscribe to a paid Plan, our third-party payment processor (such as Stripe) collects your payment card or billing details directly. We do not store full card numbers ourselves; we retain limited billing metadata such as subscription status, plan, and transaction history.
• Communications: information you provide when you contact us for support, feedback, or other enquiries.
• User content: notes, vocabulary entries, recall responses, lesson progress, and any other content you create or submit while using the Service.

2.2 Information collected automatically

• Usage data: pages and lessons viewed, time spent on lessons, quiz and recall performance, streaks, and feature interactions, used to track learning progress and improve the Service.
• Device and log data: IP address, browser type, device type, operating system, and timestamps of access, collected for security, troubleshooting, and analytics purposes.
• Cookies and similar technologies: we use cookies and local storage to keep you signed in, remember preferences (such as light or dark theme), and understand aggregate usage patterns. See Section 8 (Cookies) for more detail.

2.3 Information from third parties

If you sign in using a third-party authentication provider, we receive basic profile information (such as your name and email address) from that provider, in accordance with your settings with that provider.

2.4 Special category data

We do not intentionally collect special category data (such as data about religious beliefs) beyond what is inherent in your voluntary use of an Islamic studies educational platform, for example your enrolment in a fiqh or Quran course. By voluntarily enrolling in such courses, you provide explicit consent for us to process this limited inference for the purpose of delivering and personalising the Service. We do not use this data for any purpose beyond operating, securing, and improving the Service, and we do not sell it or share it with third parties for advertising purposes.

3. How We Use Your Information

We use personal data for the following purposes and on the following legal bases under UK GDPR:

Where we rely on consent, you may withdraw that consent at any time, for example by unsubscribing from marketing emails or adjusting cookie preferences, without affecting the lawfulness of processing carried out before withdrawal.

4. AI Features and Your Data

Certain features of the Service use artificial intelligence, including AI-assisted translation and retrieval over scholarly commentary. In connection with these features:

• we may process the text you interact with (such as lesson responses or translation requests) using third-party large language model providers, under contractual terms that restrict those providers from using your data to train their own general-purpose models, where such terms are available;
• we may use anonymised or aggregated interaction data, such as which translations are flagged for review or which vocabulary words are most frequently studied, to improve our AI models and lesson content;
• human scholar reviewers may review AI-generated translations as part of our quality process; where this involves your submitted content, it is processed solely for the purpose of improving accuracy and is not used to identify you personally beyond what is necessary for that review.

5. How We Share Your Information

We do not sell your personal data. We share personal data only in the following circumstances:

• Service providers: with third parties who perform services on our behalf, including hosting (such as Supabase and our application hosting provider), payment processing (such as Stripe), email delivery, analytics, and AI model providers, under contractual obligations to protect your data and use it only for the purposes we specify;
• Instructors: limited information necessary for instructors to deliver live or recorded classes you are enrolled in, such as your name and enrolment status;
• Legal and safety reasons: where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Rawdh, our users, or the public;
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Policy or a substantially similar policy continuing to apply;
• With your consent: in any other circumstances where you have given us explicit consent to share your data.

6. International Data Transfers

Some of our service providers, including AI model providers and certain hosting infrastructure, may process data outside the United Kingdom or European Economic Area. Where this occurs, we take steps to ensure an adequate level of protection, including relying on adequacy regulations, the UK International Data Transfer Addendum, or Standard Contractual Clauses, as appropriate, and only working with providers who maintain appropriate technical and organisational safeguards.

7. Data Retention

We retain personal data for as long as your account is active and as necessary to provide the Service. After you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for longer to comply with legal, tax, accounting, or dispute resolution obligations, or where data has already been aggregated or anonymised such that it no longer identifies you. Learning progress and vocabulary data tied to your account are deleted along with your account unless you request otherwise.

8. Cookies

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: required for core functionality, such as keeping you logged in and remembering your theme preference. These cannot be disabled without affecting how the Service works.
• Analytics cookies: help us understand how the Service is used, in aggregate, so we can improve it. Where required by law, we will ask for your consent before setting these.
• Functional cookies: remember your preferences to improve your experience.

You can manage cookie preferences through your browser settings, and where applicable, through any cookie consent banner presented on first visit. Disabling certain cookies may affect the functionality of the Service.

9. Your Rights

If you are located in the United Kingdom or the European Economic Area, you have the following rights in relation to your personal data, subject to certain exceptions:

• Access: request a copy of the personal data we hold about you;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your personal data in certain circumstances;
• Restriction: request that we limit how we use your data in certain circumstances;
• Portability: request a machine-readable copy of certain data you have provided to us, to transfer to another service;
• Objection: object to processing based on legitimate interests or for direct marketing purposes;
• Withdraw consent: withdraw any consent you have previously given, at any time.

To exercise any of these rights, contact us at team.rawdh@hotmail.com. We will respond within the timeframes required by applicable law, generally within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local data protection authority if you are located in the EEA, although we encourage you to contact us first so we can try to resolve any concern directly.

10. Children's Privacy

10.1 Users under 13

The Service is not directed at, and must not be used by, children under the age of 13, and we do not knowingly collect personal data from them. If we learn that we have collected personal data from a child under 13 without appropriate parental consent, we will delete that data as soon as reasonably practicable. Parents or guardians who believe their child has provided us with personal data should contact team.rawdh@hotmail.com so we can investigate and take appropriate action.

10.2 Users aged 13 to 17

Where a user aged 13 to 17 uses the Service with parental or guardian consent, we collect and process personal data about that minor only to the extent necessary to provide the Service, such as lesson progress and account information. We do not knowingly use data from minors for targeted advertising. Parents and guardians may contact us at team.rawdh@hotmail.com to review, correct, or request deletion of their child's data at any time.

11. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, access controls, and reliance on reputable infrastructure providers for authentication and data storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and any applicable regulator in accordance with our legal obligations.

12. Third-Party Links and Services

The Service may contain links to or integrations with third-party websites and services, including embedded video content. This Policy does not apply to those third-party services, and we encourage you to review their privacy policies before providing any personal data to them.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify you by email or through an in-app notice before the changes take effect. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us at:

Rawdh Email: team.rawdh@hotmail.com

You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk if you believe your data protection rights have been infringed.

This document is a general template prepared with AI assistance and does not constitute legal advice. We recommend having this Privacy Policy reviewed by a qualified solicitor or data protection professional, and verifying it accurately reflects your actual data practices and third-party processors, before publishing it or relying on it for legal protection.