SiraajSiraaj

Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Siraaj Institute (“Siraaj,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you use the Siraajlearning management system, including our website and our iOS and Android mobile applications (together, the “Service”).

Siraaj is an education platform provided to students, guardians, teachers, and staff of Siraaj Institute. Accounts are created and administered by the Institute. By using the Service, you agree to the collection and use of information in accordance with this Policy.

1. Information we collect

We collect only the information needed to operate an education platform:

Information you or your institution provide

  • Account & identity: name, email address, password (stored only as a secure hash), role (student, guardian, teacher, staff), profile photo where provided, and campus/program enrollment.
  • Educational records: classes, enrollment, assignments and submissions, grades, attendance, learning materials, and related coursework.
  • Communications: messages you send through in-app chat, announcements, and support requests.
  • Billing information: invoices, payment status, and tuition/fee records. Card and bank details are collected and processed directly by our payment processor (Stripe) — Siraaj never receives or stores full card numbers.

Information collected automatically

  • Device & usage data: app version, device type and operating system, general log and diagnostic data, and interactions needed to keep you signed in and deliver features.
  • Push notification token: if you enable notifications, a device token issued by Apple (APNs) or Google (Firebase Cloud Messaging) so we can deliver alerts you have opted into (e.g. new grades, announcements, messages, assignment reminders).
  • AI companion interactions: the questions and content you submit to the in-app AI study companion, processed to generate a response.

We do not use advertising identifiers, and we do nottrack you across other companies’ apps or websites. The Service does not present a tracking request because no such tracking occurs.

2. How we use your information

  • Provide, maintain, and secure the Service and your account.
  • Deliver core education features: classes, assignments, grades, attendance, materials, and communications.
  • Process tuition and fee payments through our payment processor.
  • Send notifications you have enabled and transactional messages (e.g. password resets).
  • Respond to support requests and communicate about the Service.
  • Detect, prevent, and address security incidents, fraud, and abuse.
  • Comply with legal obligations applicable to educational institutions.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How your information is shared

We share information only as described here:

  • Within your institution: teachers and staff can see the educational records relevant to their role (for example, a teacher sees their students’ submissions and grades), consistent with school administration.
  • Service providers (processors) who process data on our behalf under contract:
    • Supabase — authentication, database, and file storage.
    • Stripe — payment processing.
    • Google Firebase Cloud Messaging and Apple Push Notification service — delivery of push notifications.
    • Anthropic — processing of AI study-companion requests. Content you submit to the companion is sent to Anthropic solely to generate a response and is not used to train their models.
    • Cloud hosting and infrastructure providers that run the Service.
  • Legal & safety: when required by law, or to protect the rights, safety, and security of our users, the Institute, or the public.
  • Business transfers: in connection with a merger, acquisition, or reorganization, subject to this Policy.

4. Children’s privacy

Siraaj is a school platform that may be used by students who are minors. Where a student is below the age of digital consent in their jurisdiction, accounts are created and authorized by Siraaj Institute and/or a parent or guardian, and personal information is collected and used for the legitimate educational purpose of operating the school, consistent with applicable law (such as FERPA and COPPA in the United States, where relevant). We do not direct advertising to children and do not collect more information than is necessary to provide the Service. Parents and guardians may contact us at admin@siraajinstitute.orgto review, correct, or request deletion of a child’s information, subject to the Institute’s records obligations.

5. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as required to meet the Institute’s legal, academic-record, accounting, and regulatory obligations. When information is no longer needed, we delete or anonymize it. See Deleting your account for how to request deletion.

6. Security

We protect your information using industry-standard safeguards, including encryption in transit (HTTPS/TLS), encryption at rest, row-level access controls that restrict data to authorized users, hashed passwords, and least-privilege access for staff. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address any incident.

7. Your rights and choices

  • Access & correction: view and update much of your profile in the app, or contact us for help.
  • Deletion: request deletion of your account and associated personal data — see Deleting your account.
  • Notifications: turn push notifications on or off in your device settings and in the app’s notification preferences.
  • Regional rights: depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your data, and to object to certain processing. Contact us to exercise these rights; we will not discriminate against you for doing so.

8. International data transfers

Your information may be processed in countries other than your own, including the United States, where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date and, where appropriate, communicated in the app. Your continued use of the Service after changes take effect constitutes acceptance.

10. Contact us

If you have questions or requests regarding this Policy or your information, contact:

Siraaj Institute
Email: admin@siraajinstitute.org
[Add the Institute’s full registered legal name and postal address here before publishing.]