Privacy Policy

1. Data we collect

• Account data: first name, last name, email address and/or phone number, password (stored only as a secure hash), country of residence, and preferred language.
• Learning data: the courses and lessons you start and complete, your progress, quiz responses, certificates earned, and any feedback you submit.
• Communication data: a one-time SMS verification code (for phone sign-up) and emails we send you about your account and the program.
• Technical & usage data: IP address, device and browser information, pages viewed, and on-site interactions, collected through cookies and similar technologies.
• Marketing attribution: if you arrived from an advertisement, the campaign parameters (e.g. utm_source, utm_campaign) and advertising click identifiers (e.g. fbclid).

2. How we use your data

• To create and secure your account and let you log in.
• To deliver the courses, track your progress and issue your certificates.
• To verify your phone number and send you account- and program-related messages.
• To understand how the Platform is used and to improve it (analytics).
• To measure and improve our advertising, and - where you have agreed - to send you marketing communications.

3. Legal bases

Depending on your country, we rely on: your consent (for marketing messages and non-essential cookies/tracking), the performance of our agreement with you (to provide the course and certificate), and our legitimate interests (to keep the Platform secure and to improve it). You can withdraw consent at any time.

4. Cookies, analytics & advertising

With your agreement we use cookies and similar technologies for analytics and advertising:

• Google Analytics - to measure how many people use the site and how they navigate it.
• Microsoft Clarity - to understand site usage through heatmaps and anonymised session recordings.
• Meta Pixel and Meta Conversions API - to measure the performance of our advertising on Facebook and Instagram. Where you have consented, we may use this information to build advertising audiences on Meta - including custom audiences of people who registered or earned a certificate, and lookalike audiences of people with similar characteristics - so we can reach more learners. Where identifiers (such as email or phone number) are used for this, they are hashed before being shared with Meta.

You can manage cookies through your browser settings.

5. Who we share data with

We do not sell your personal data. We share it only with service providers that help us run the Platform, and only as needed: Meta (advertising), Google (analytics), Microsoft (usage analytics), Twilio (SMS verification), our email provider (program emails), and our hosting provider. Some of these providers are located outside your country (including the EU and the US); where required, such transfers are protected by appropriate safeguards.

6. How long we keep your data

We keep your account and learning data for as long as your account is active and as needed to provide the program and your certificates. We keep advertising and analytics data for a limited period. You can ask us to delete your account and personal data at any time.

7. Your rights

Subject to your local law, you have the right to:

• access the personal data we hold about you;
• correct or update it;
• delete it ("right to be forgotten");
• object to or restrict certain processing, including marketing;
• withdraw your consent at any time;
• lodge a complaint with your data-protection authority.

8. Contact

To exercise your rights or ask any question about this policy, contact Aflatoun International at info@aflatoun.org.

9. Changes

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date above.