Privacy notice

This is a preliminary notice, not a substitute for a legally reviewed privacy policy. Complete it before opening the service to the public.

What this phase collects

The account foundation stores a parent account name, email address, password hash, email verification status and basic login timestamp. Passwords are not stored in plain text.

Children’s information

This phase does not implement child profiles. Do not enter a child's personal information into account fields. Parental consent, child privacy controls, data minimization, retention and deletion workflows must be completed before child profiles launch.

Security and email

Use HTTPS and a trusted mail provider. Account emails are used for verification and password recovery. Never share passwords or verification links.

Your rights and contact

A real controller identity, contact address, retention schedule, lawful basis and applicable rights process must be added before launch, including assessment against applicable Saudi PDPL and any other relevant privacy laws.