Last updated: 27 Sep 2026
1. Information we collect
When you register, we collect your mobile number, your name (or, for a family account, the parent’s name and each child’s name), date of birth, gender, city, an optional email address, and your course progress. A parent registering children confirms that they agree to these details being kept. When you pay for the course, we store payment method, amount, and the transaction reference you submit (for QR code / manual payments) or details returned by the payment gateway.
2. How we use your information
We use your information to create and manage your account, unlock course content as you progress, verify payments, issue certificates, and respond to support requests.
3. Login codes
When login codes are switched on, we send a one-time code to your mobile number by WhatsApp or SMS through our messaging provider (Hanu OTP for Indian numbers). The provider receives only your number and the code. We keep a scrambled copy of the code for a few minutes to check it, never the code itself.
4. Website visits
We count visits to the website without cookies and without your name or number: the page, where the visit came from, the device type, how far the page was scrolled, and the country and city of the internet connection. A random visit id is kept in your browser for the visit. Admin staff see these counts as totals.
5. Location
To show prices in the right currency, the site looks up the country of your internet connection with a free lookup service (country.is, or geojs.io as a fallback). Only the country is kept, in your browser, for one week. Your billing country, once you add it, takes its place.
6. Payment information
We do not store your card, UPI PIN, or banking credentials. Card payments, once available, are processed by Razorpay, Cashfree or Stripe. For UPI payments, we store the payment screenshot and the transaction ID / UTR number you submit, only to verify the payment. Scholarship requests are read only by the academy.
7. Data sharing
We do not sell your personal information. Data is shared only with the payment gateways used to process your transaction, and as required by law.
8. Data security
Your data is stored with our database provider (Supabase) on servers in Mumbai, India. Each record can be read only by its owner and by academy staff whose role allows it, and every change staff make is logged.
9. Cookies
We do not use advertising or tracking cookies. Your browser keeps your login and a few preferences (such as the learner chosen on a family account) in its own storage.
10. Your rights
You can delete your account yourself from Me in the student app, or ask us for a copy of your data, a correction or a deletion by contacting us.
11. Contact
For any privacy-related questions, contact us at ask@alfiyaacademy.com.