Privacy Policy

1. Who we are

arab.school is operated by Enterprise Lead (Amman, Jordan). For any privacy question, or to get a copy of your data or have it deleted, write to ed@enterpriselead.com.

2. The account belongs to the parent, not the child

A parent or guardian creates the account, agrees to this policy on behalf of their children, and then adds a profile for each child inside it. Children do not sign themselves up. We never ask a child for an email address, a phone number, or a postal address. A child signs in with a short PIN that the parent sets.

3. What we collect

From the parent

• Email address and password (stored hashed), so you can sign in.

About each child

• A display name (a first name or nickname is fine), school grade, and a sign-in PIN.
• Optionally gender and an avatar emoji — used only to word lessons correctly.
• Learning records: lessons completed, quiz and exam answers, recurring mistakes, and progress over time.

Voice (in pronunciation and conversation practice)

When a child speaks during a pronunciation exercise, the recording goes to our servers to be turned into text and scored. After that:

• The raw audio is discarded as soon as it has been processed — that is the default. We keep it only if the parent and the child both explicitly turn on the "progress clips" feature, which can be switched off again at any time.
• We do keep the text of what the child said and the pronunciation score as part of the learning record, because that is what the parent dashboard and the practice plan are built on.

4. What we never do

• No advertising — we show no ads and build no ad profiles of children.
• No third-party tracking — no Google Analytics, no social media pixels, no external trackers of any kind.
• No selling or sharing data for marketing purposes, now or later.
• No open-ended AI chat — conversation practice runs on pre-written, human-reviewed teaching scenarios, not a free-form chatbot.
• Your child's voice is never sent to third-party AI services — speech recognition runs on models we host ourselves, on our own infrastructure.

5. Where data is stored, and who processes it

Data lives in a database and a file store on servers we rent. The platform isolates each family's data from every other family with a per-family identifier (FamilyId) enforced at the database level.

We rely on these providers only:

• Hosting providers (application, database, file storage, and model servers): they store data on our behalf and do not use it.
• Anthropic Claude models: used to author lessons before they are published. No child data ever passes through them.

We disclose data to anyone else in one case only: when the law requires it.

6. How long we keep it

We keep account data and learning records for as long as the account is open, because the progress record is the service itself. When you delete your account, we delete your family's data and your children's profiles. Raw voice recordings are deleted immediately, as described in section 3.

7. Your rights

At any time, a parent may:

• see their children's data or request a copy of it,
• correct anything that is wrong,
• delete a child's profile or the whole account,
• turn off voice-clip storage or withdraw consent to it.

Write to ed@enterpriselead.com and we will act on the request.

8. Security

Passwords and PINs are stored hashed, traffic to the site is encrypted with HTTPS, and administrative access is limited to the people who need it to run the service. No system is perfectly secure, but the strongest protection is collecting little in the first place — which is how the platform is built.

9. Cookies

We use strictly necessary cookies only: one to keep you signed in, and one to remember your language choice. There are no advertising or analytics cookies, which is why you are not asked to accept a cookie banner.

10. Changes to this policy

If something material changes — for example, if we start collecting a new kind of data — we will update this page and email parents before the change takes effect.