At Kuttab.com, we are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our platform, whether as a student, tutor, or visitor.
1. Information We Collect
We collect information you provide directly and data collected automatically:
- Personal identifiers: Name, email address, phone number, location, photo.
- Educational data: Credentials, certificates, academic background.
- Payment details: Credit card and billing information for transactions (handled securely via third-party payment processors).
- Login data: IP address, browser type, operating system, device type.
- Communication records: Messages exchanged on our platform, customer service interactions.
- Calendar data: If you connect your Google Calendar, we access scheduling metadata to enable seamless booking.
2. Legal Basis for Processing
Under the GDPR, our lawful bases for processing your personal data include:
- Contractual necessity (e.g., to deliver tutoring services)
- Legitimate interests (e.g., platform security, user support)
- Compliance with legal obligations
- Your consent (e.g., marketing communications or calendar integration)
3. How We Use Your Information
Your data is used to:
- Provide and manage educational services
- Process payments securely
- Match students with tutors
- Send important updates and booking notifications
- Provide customer support and resolve issues
- Analyze usage and improve platform performance
- Conduct marketing and retargeting campaigns via Google and Meta
4. Third-Party Sharing
We may share your data with:
- Payment processors (e.g., Stripe)
- Analytics providers (e.g., Google Analytics, Hotjar)
- Email marketing platforms (e.g., Zoho, Mailchimp)
- Advertising platforms (e.g., Meta, Google Ads for lookalike targeting)
These parties are bound by confidentiality and data processing agreements.
5. Data Retention
We retain your data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. You may request deletion at any time.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion
- Withdraw consent at any time
- Object to processing for direct marketing
- Request data portability
- Lodge a complaint with a data protection authority
7. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure adequate safeguards (e.g., standard contractual clauses) are in place.
8. Security Measures
We use encryption (SSL), access controls, and secure hosting infrastructure to protect your data. In case of a data breach, you will be notified in accordance with applicable law.
9. Use of Cookies
Cookies are used to enhance user experience and track usage patterns. You may configure your browser to refuse cookies, though some functionality may be limited.
10. Children’s Privacy
We do not knowingly collect personal data from children under 13 without parental consent. If we learn we’ve collected such data, it will be promptly deleted.
11. Integrations with Third-Party Services
Features such as Google Calendar sync require your explicit authorization. You can revoke access anytime by visiting your Google settings: Manage Calendar Sharing.
12. Communications & Preferences
You may opt-out of marketing emails via the unsubscribe link included. Service-related notifications are essential and cannot be disabled.
13. Policy Updates
This policy may be updated periodically. Substantial changes will be communicated via email or prominently on our website.
14. Ijazaat (certificates in reciting the Qur'an)
This section covers the ijazah register: sending a certificate to it, and reporting a problem with one.
- What we collect. The file you send (photographs or a PDF), any names or details you type with it, and the internet (IP) address it was sent from, which is stored with the record. If you are signed in, or make an account right after sending, the certificate is added to that account.
- Other people's details. A certificate carries the names of the shaykh, the student and the teachers in its chain, and sometimes a signature, a photograph or an identity number. That is why the picture of the certificate stays private unless the student who received it allows it.
- Why we keep the internet address. To apply the limit of 3 certificates a day to senders without an account, and to stop misuse.
- Who reads it. Kuttab, with the help of an AI assistant (Claude, made by Anthropic) that reads the picture of the certificate. No other outside service is used to read it.
- What becomes public. Once a certificate is registered: the names, the chain, and the details written on it. It may also appear on the page of the shaykh who granted it. Its page opens for anyone with its link, code or QR code, and we ask search engines not to list it. Before it is registered, the page shows no names.
- Names. The name of the student who received the ijazah is published in full, as the certificate writes it, unless they have asked us to show only their first name — through "Report a problem" on the certificate's page or, for the person who sent it, "Ask for a change" in "My ijazaat". The names of the shaykh who granted it and of everyone in its chain are always published as written.
- Reports. A report keeps your message, the phone number or email address if you leave one, and the internet address it came from. Only Kuttab's team reads reports, to check the record and to answer you.
- Your choices. The person who sent a certificate can ask, from "My ijazaat", for it to be removed, hidden or corrected. Anyone named on a certificate can use "Report a problem" or write to [email protected]. A person at Kuttab acts on each request. A removed certificate's code still opens a page, which says it is not public; its picture is never shown.
15. Contact Us
For questions or requests, contact us at:
Kuttab.com Team
3124 S Parker RD
Aurora, CO 80014
Email: [email protected]
Phone: USA: 1 (775) 557-7822