Privacy Policy

Last updated: June 5, 2026

1. Introduction

Wadi Al-Quran respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our platform at wadialquran.com.

2. Data We Collect

We collect the following information to provide and improve our services:

Account information: your full name, email address, and assigned role (Student, Parent, Teacher, or Staff).
Authentication data: a securely hashed password (via bcryptjs) and a session token.
Session data: class schedules, meeting links, attendance records, and class summaries.
Communication records: messages sent through the platform's dashboard chat system.
Payment data: billing records and payment history (processed through PayPal; we do not store full financial details).

3. How We Use Your Data

Your data is used exclusively for:

Authenticating your identity and authorizing access to appropriate platform features.
Scheduling and managing Quranic classes between students and teachers.
Processing payments and generating invoices.
Facilitating communication between students, parents, teachers, and staff.
Generating performance and progress reports.
Improving our platform and services.

4. Cookies & Tracking

We use a single httpOnly cookie named wadi-auth-token to maintain your authenticated session. This cookie:

Contains a secure JWT (signed with HS256) that expires after 7 days.
Is inaccessible to client-side JavaScript (httpOnly flag).
Is transmitted only over HTTPS in production.

We do not use tracking cookies, advertising cookies, analytics scripts, or any other form of persistent tracking technology.

5. Data Sharing

We do not sell, trade, or share your personal information with third parties. Data is accessible only to authorized personnel based on their role within the platform. For example, teachers can view their assigned students' schedules, and parents can view their children's progress. All data access is governed by strict role-based access controls.

6. Data Retention

We retain your account data for as long as your account remains active. If you request account closure, we will delete your personal information within a reasonable timeframe, subject to any legal or regulatory obligations that may require us to retain certain records (such as payment history).

7. Security

We implement the following security measures to protect your data:

Passwords are hashed using bcryptjs before storage.
Session tokens are signed with HS256 JWT and stored in httpOnly cookies.
API routes are protected by role-based middleware and permission checks.
All communications are encrypted over HTTPS.
Rate limiting is applied to prevent abuse.

8. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal retention requirements).
Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at support@wadialquran.com.

9. Contact

If you have any questions or concerns about this Privacy Policy, please reach out to us at support@wadialquran.com.

← Back to Legal Information