Privacy policy

1Data we collect

Account data: your email or phone number, your name if you add one, your language and time zone.

Purchases: orders, amounts, tax and the country used to calculate it, receipts and refunds. You enter card details on the payment gateway's page; they never reach us and we don't store them.

Learning and participation: lesson progress, session attendance, bookings, reviews, and what you write in product communities.

For experts: profile and store details, a confirmed phone number, and the verification data the payment gateway requires.

Technical data: IP address, browser type and error logs, for security and fraud prevention. We keep an audit log of sensitive administrative actions.

2How and why we use it

To perform our contract with you: creating your account, completing purchases, giving you access, and sending receipts, account messages and reminders.

To meet legal obligations: keeping financial and tax records, and checking sanctions restrictions.

For legitimate interests: protecting the platform from fraud and abuse, and measuring and improving the service with statistics that don't identify you.

With your consent: marketing emails, sharing your email with an expert, Google Analytics cookies, and advertising cookies on expert pages. You can withdraw any consent at any time from "Privacy and my data" or "Cookie settings".

We don't sell your data or use it for our own advertising. Ad tools experts add to their pages only run with your consent, and never outside their pages.

3What experts see

An expert sees only the first name you choose, never your email or phone. If you turn on "share your email" for an expert you bought from, they see your email and can export it to serve you; turning it off removes it from their list at once.

4Cookies and analytics

We use essential cookies for sign-in and security; they don't need consent.

Google Analytics cookies are only switched on after you consent. Some experts add their own ad measurement from Meta, TikTok and Google to their pages (store page, product pages and the purchase confirmation); these only run if you accept "advertising cookies", and they receive the visit and the purchase amount and currency only. We never send them your name, email or phone. What those companies collect is governed by their own policies. You can change your choice at any time from the "Cookie settings" link at the bottom of the page.

Our servers send usage events to PostHog under an encrypted identifier that doesn't reveal your name or email, to measure what works on the platform.

5Who we share it with

Service providers who process data on our behalf and on our instructions only: Supabase (database and sign-in), Vercel (hosting), Stripe and other payment gateways we use (payments and expert payouts), Resend (email), VdoCipher (protected video), LiveKit (live sessions), Inngest and Upstash (background jobs and rate limits), Sentry (error monitoring), PostHog and Google (analytics).

The expert you bought from, as far as they need it to provide the service, and authorities where the law requires it.

6Transfers outside Saudi Arabia

Your data may be stored or processed on servers outside Saudi Arabia by the providers above, with appropriate safeguards as the law requires.

7How long we keep it

We keep account data while your account exists.

The text of messages we send you is erased after 180 days (only the delivery log stays), and background job details after 30 days. IP addresses and browser details in the audit log are erased after 365 days; only what happened stays.

When you delete your account we delete your identity, contact details and the text you wrote, and keep order, payment and receipt records without anything that identifies you for as long as tax and financial laws require.

8Your rights

Access and a copy: download a file with all your data from "Privacy and my data" in your account.

Correction: edit your name, email and phone in your account settings, or write to us.

Deletion: delete your account from "Privacy and my data". It runs after 14 days, during which you can change your mind, and we email you as soon as you ask.

Withdrawing consent: stop marketing messages or email sharing with any expert at any time; this doesn't affect what happened before.

For anything else write to hello@dqeqh.com and we'll reply within 30 days. You may also complain to the Saudi Data & AI Authority (SDAIA).

9Security

We use encryption in transit, limited access permissions and an audit log of every sensitive administrative action, and each provider reaches only what it needs. No protection is perfect, but we protect your data to high standards and will notify you and the authorities of any breach affecting you as the law requires.

10Age

The platform is for people aged 18 or older, and we don't create accounts for anyone younger. If we learn an account belongs to a minor, we delete it.

11Changes

If we change this policy we publish the update date at the top of this page and ask you to review and accept the new version the next time you sign in.

12Contact

Privacy questions: hello@dqeqh.com