Privacy policy
Effective from {{EFFECTIVE_DATE}}
Yasmine Center is a trading name of {{LEGAL_ENTITY_NAME}} (company number {{LEGAL_ENTITY_NUMBER}}, registered at {{REGISTERED_ADDRESS}}), which provides live online Arabic lessons for children. The data controller for the personal data described here is {{DATA_CONTROLLER_NAME}}, contactable at {{PRIVACY_CONTACT_EMAIL}}. This policy explains what personal data we collect, why, and the choices you have.
1. Data we collect
Account data: parent name, email, phone (optional), password (stored only as a secure hash), language and timezone. Child data: first name, age, gender, avatar choice, learning track, level and progress (lessons, homework scores, stars, badges, certificates). Lesson data: bookings, the Google Meet link used, and the teacher's written feedback report. Payment data: we never see or store card numbers — Stripe processes payments and we keep only the amount, date and a payment reference. Support data: messages you send via the contact form or WhatsApp. We deliberately collect the minimum needed to run lessons well.
2. Children's data
Children cannot create accounts themselves: every child profile is created and controlled by a parent or legal guardian. We collect only the child data listed above, never request a child's contact details, and never use children's data for advertising or profiling. For children under 13 in the United States, we give parents direct notice and obtain verifiable parental consent before collecting anything, by this method: {{COPPA_CONSENT_METHOD}}. Parents can review, correct or delete their child's data at any time from the dashboard or by emailing {{PRIVACY_CONTACT_EMAIL}}.
3. Lessons are not recorded
Lessons take place live on Google Meet in your teacher's own meeting room. Yasmine Center does not record lessons, does not store recordings, and has no recording review process. {{TEACHER_RECORDING_POLICY}} Google processes the video call itself under its own terms; nothing from the call reaches our systems except the teacher's written report.
4. Why we use data, and on what legal basis
We use data to run lessons (matching teachers, scheduling in your timezone), track learning progress, process payments, send service notifications, provide support, and keep children safe. We do not sell personal data, and we show no third-party advertising. The lawful basis for each purpose under Article 6 UK/EU GDPR is set out here: {{LAWFUL_BASIS_TABLE}}
5. Sharing and international transfers
Teachers see only what they need to teach: the child's first name, age, level, progress and lesson history — never your payment details. Our processors are Supabase (database hosting), Vercel (application hosting), Stripe (payments), Resend (email) and Google (Meet video calls), each under a contract that binds them to this policy. Where data leaves the UK or EEA, the transfer relies on: {{INTERNATIONAL_TRANSFER_MECHANISM}}. We disclose data to authorities only where the law requires it or a child's safety demands it.
6. Security & retention
Passwords are hashed, sessions are encrypted, and access to personal data is role-restricted. We keep each category of data for a defined period and then delete or anonymise it: {{RETENTION_PERIODS}}
7. Cookies
{{COOKIE_NOTICE}}
8. Your rights
You may access, correct, export or delete your family's data, withdraw consent, and object to specific processing. Email {{PRIVACY_CONTACT_EMAIL}} and we will respond within 30 days. Families in the EU or UK may also contact our representative: {{EU_UK_REPRESENTATIVE}}. If you remain unsatisfied you may complain to {{SUPERVISORY_AUTHORITY}} or to your own local data-protection authority.
9. Records of the messages we send you
We keep a record of every service email we send you — welcome messages, trial and lesson confirmations, reminders, lesson reports, receipts, credit-expiry warnings, cancellations and password-reset links — together with the date and whether it was actually delivered. We keep the same record of the notifications shown inside your dashboard, including whether they were opened. This exists so we can answer questions like "nobody told me the lesson was cancelled" with a factual answer rather than a guess. Support messages you send us are read by school staff, and staff can reply to you by email from inside our system; those replies are stored against your message. A school administrator can ask us to send a password reset link to your own registered email address — for example when you tell us you are locked out. No one at the school can see your password, is told it, or chooses it for you; only you set it, using the link. Every such action is recorded with the staff member's name, the time and a written reason. These records are kept for {{RETENTION_PERIODS}} and you can ask for a copy of yours, or ask us to correct it, at {{PRIVACY_CONTACT_EMAIL}}.
10. Messages sent through the platform
Yasmine Center runs a messaging service inside your account so you can write to the school and to your child's teacher. Because these are messages about children, they are not private between two people: every message sent through the platform is stored, and the school's administrator can read any conversation in full at any time — including messages between a parent and a teacher. We do this so we can answer a safeguarding concern, check how a child is being taught, and settle a disagreement from the record rather than from memory. The same statement appears above every box you type into. Messages are kept for {{MESSAGE_RETENTION_PERIOD}} after the last message in a conversation and are then permanently deleted. If the school removes a message, its original text stays visible to the administrator alone, so deleting can never destroy the record. Nothing you send is scanned for advertising or shared outside the school, except where we are legally required to report a child-protection concern. If you would rather not use it, WhatsApp and email are still open to you.
11. Changes & contact
If we change this policy materially, we will notify you by email or dashboard notice before the change takes effect, and the effective date at the top of this page will change. Questions? Email {{PRIVACY_CONTACT_EMAIL}} — a human will answer.