Privacy Policy

iUstaad ("we", "us", "our") is an online education platform connecting students with qualified tutors for Cambridge O & A Level and other curricula. We are operated by Taleem Technologies and are headquartered in the UAE.

• Account data: name, email address, password (hashed), account type (student, instructor, parent).
• Profile data: profile photo, educational level, preferences.
• Session data: session timestamps, Zoom meeting IDs, attendance records.
• Payment data: order history, payment amounts. Card details are handled by Stripe and never stored on our servers.
• Usage data: pages visited, features used, browser type, IP address.
• Communications: support messages, emails you send us.

• To provide and improve our tutoring platform.
• To match students with instructors and schedule sessions.
• To process payments and send receipts.
• To send session reminders and platform updates.
• To comply with legal obligations.
• To detect and prevent fraud or abuse.

Where GDPR applies, we process your data under one or more of:

• Contract: to deliver the services you signed up for.
• Legitimate interests: platform security, analytics, service improvement.
• Consent: marketing emails (you may withdraw at any time).
• Legal obligation: tax records, child safety compliance.

We share data only where necessary:

• Zoom: session links and meeting data for live tutoring sessions.
• Stripe: payment processing. Governed by Stripe's Privacy Policy.
• Email provider: for transactional emails (session reminders, receipts).
• Legal authorities: when required by law.

We do not sell your personal data to third parties.

We retain your account data for as long as your account is active. After account deletion, we retain records needed for legal and tax compliance for up to 7 years. Session recordings (if any) are deleted after 90 days.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise these rights, email us at privacy@iustaad.com.

iUstaad serves students under 18. We take children's privacy seriously and comply with COPPA (US), GDPR Article 8 (EU), and POPIA (South Africa). For full details, see our Children's Privacy Policy.

We use essential cookies for authentication and security. We do not use third-party advertising cookies. You can control cookies through your browser settings.

We use industry-standard security measures including HTTPS, hashed passwords, role-based access control, and regular security reviews. No system is 100% secure — if you discover a vulnerability, please report it to security@iustaad.com.

We will notify you of material changes by email or by posting a notice on the platform. Continued use after changes constitutes acceptance.

Questions? Contact our Privacy Team at privacy@iustaad.com or via our contact page.