Privacy Policy

1. Data We Collect

We collect information you provide during registration and use:

• Identity: Name, date of birth, gender, ID number (CNIC/B-Form/Passport)
• Contact: Email, phone, WhatsApp
• Location: Country, province, district/city
• Education & Career: Education level, institution, career status, goals
• Learning Data: Exercise progress, assessment results, activity logs
• Guardian Info: Guardian name, phone, email (for minors)
• Accessibility Needs: Private, used only to improve your learning experience

2. How We Use Your Data

• To provide personalized learning experiences and AI tutoring
• To track progress, award achievements, and generate certificates
• To match learners with mentors, teammates, and career opportunities
• To improve content quality and platform features
• To send important notifications about your account and learning
• To ensure platform safety and compliance

3. Data Sharing

We do not sell your personal data. We may share:

• Recruiters/Employers: Only if you enable your public profile
• Guardians: Progress data for users under 18 with guardian accounts
• AI Providers: Your questions/prompts are sent to AI providers (e.g., OpenAI) to generate responses. We minimize PII in AI calls.
• Legal: If required by law or to protect safety

4. Data Security

We use industry-standard security measures: encrypted password hashing, secure sessions, CSRF protection, and role-based access control. Sensitive fields (ID numbers, accessibility needs) are restricted to admin access only.

5. Minors' Privacy

For users under 18, we require guardian consent. Guardian information is collected and verified. Guardians can monitor their child's progress but cannot modify learning data. Public profiles are disabled for minors by default.

6. Your Rights

• Access your data and export it
• Request correction of inaccurate data
• Request deletion of your account and data
• Control your public profile visibility
• Opt out of non-essential communications

7. Data Retention

We retain your data while your account is active. Deleted accounts' data is removed within 30 days, except where retention is required by law (e.g., safety incident records).

8. Contact

Privacy questions? Contact info@maahir.io or use the report button on any page.