Privacy & your data

How student and academy data is handled.

Each academy's data is its own

The platform is multi-tenant: every academy's data — students, grades,
attendance, messages — is isolated from every other academy's. Staff at one
academy can never see another academy's records.

Who can see what

• Academy admins see their academy's full data.
• Instructors see only the cohorts assigned to them.
• Students see only their own enrollments, grades, and certificates.

Analytics are built to minimize exposure

The at-risk list in cohort analytics is deliberately privacy-safe:
it shows a student's initials, not their name, and carries no identifiers.
Sensitive actions across the platform are recorded in an audit log so access can
be reviewed.

Payments

Payments use the Iraq bank-transfer model. A student pays by **bank transfer in
Iraqi dinar (IQD) and uploads a receipt screenshot** in the app's billing
page; an academy admin reviews and confirms it. There is **no card checkout, no
Apple or Google in-app purchase, and no automated refunds** — refunds, if any,
are handled directly between the student and the academy. The platform stores the
receipt and the confirmation, not card or bank-account numbers.

Data requests

If a student asks to see or remove their data, the academy admin can export the
relevant records (gradebook, attendance) and remove the student's enrollment.
Contact platform support for anything you can't resolve from the admin tools.