Privacy Notice

Last updated: 5/17/2026

1. Who we are

Baraka Learning ("we") is operated by Baraka Learning Online. We are the data controller for the personal information described in this notice. Contact: Umudrammeh@icloud.com.

2. Information we collect

• Account data: parent name, email, phone (optional), password (hashed).
• Child data: child's first name, age, format preference, optional notes you provide.
• Subscription data: subscription status, billing period, plan — no card data is stored by us.
• Usage and device: IP address, browser, pages visited (essential cookies and standard server logs).

3. How we use it

• To create and manage your account and your child's enrolment (contract performance).
• To deliver classes, send schedule and progress updates (contract performance).
• To process payments and prevent fraud through our payment provider (contract / legitimate interest).
• To respond to support requests (legitimate interest).
• To comply with legal and accounting obligations (legal obligation).

4. Who we share data with

• Paddle.com — our Merchant of Record. Paddle processes payments, manages subscriptions, calculates tax, and issues invoices. See Paddle's privacy notice.
• Hosting and infrastructure providers (Lovable Cloud / Supabase) — to host the website and database under appropriate data-processing agreements.
• Authorities — where required by law.

We do not sell your personal data or your child's data to anyone.

5. How long we keep it

We keep account and child data while you have an active account, and for up to 24 months after cancellation to handle support and tax obligations. After that we delete or anonymise it. Payment records retained by Paddle are governed by Paddle's policies.

6. Your rights

You can ask us to: access your data, correct it, delete it, restrict or object to processing, or export it. Email us and we'll respond within 30 days. If you are in California, you also have rights under the CCPA/CPRA, including the right to opt out of sale/sharing (we do not sell or share).

7. Security

We use encryption in transit (HTTPS), encrypted databases, access controls, and reputable infrastructure providers. No system is perfectly secure — please use a strong, unique password.

8. Children's privacy

Accounts are created by parents/guardians. We only collect the minimum information about each child needed to deliver classes (first name, age, format preference, any notes you choose to share). Children do not create their own accounts.

9. Cookies

We use essential cookies to keep you signed in and protect against fraud. We do not use advertising or cross-site tracking cookies.

10. Changes

If we make material changes, we'll update the "Last updated" date above and notify active subscribers by email.