Privacy Policy

Who we are

Rihla Digital School is an educational platform for children, operated by the Heal Social Foundation. Parents create and control all accounts. If you have any question about this policy, contact us at info@healsocialfoundation.com.

What we collect

From parents: your name, email address, and password (stored in encrypted form), or your Google account's basic profile if you sign in with Google.

About children: only what you enter — a first name (or nickname), an optional age, a chosen avatar emoji, and which learning topics they have completed. We never ask for a child's surname, photo, school, location, or contact details, and children cannot create accounts themselves.

We do not show ads, sell data, use third-party trackers, or profile children. The only outside companies involved are the ones that run the service itself — our database and hosting providers, and our email sender — listed below.

The closed beta

While Rihla is being tested, access is by invitation. That means we hold a little more than usual, and only for as long as the beta runs:

If you apply for a place: the name, email address, city and note you type on the apply form, and the payment reference if you give one. We use them to reply to you about joining, and nothing else.

If you take the free day: just the email address you type, the time, and a one-way fingerprint of the network — kept so that the free day is one per family rather than one per cleared browser. We do not ask for a password, we do not create an account for you, and the free day reaches the games only: no child's profile is made and no progress is saved. We keep the record after the day ends, because it is the only thing that remembers you have had it — and it means we can tell you when there is something new, if you would like that. Ask us and we will delete it.

If you join: your email address on the beta list, a note of the payment evidence you sent us (a reference you provide — we never see or store card or bank details, because payment happens outside this website), and the fingerprint of your personal invite code. The code itself is not stored: we keep only a one-way hash, so it cannot be looked up or recovered by anyone, including us.

Payment receipts: if you send us a photo or screenshot of your payment, it is stored in a private area that no web page can reach — only the foundation's own staff can open it, and only while signed in. We check that only images can be uploaded, and only up to 3 MB. It is deleted the moment a person has checked it and opened your place, in the same action, so we do not keep a copy. If you would rather not send a receipt through the website at all, send it to us on WhatsApp instead — that is completely fine and changes nothing about your place.

We ask for a receipt only to match your payment to your name. We never see or store card numbers, and no payment is ever taken through this website.

Sign-in records: for up to 90 days we keep a short log of beta sign-ins — the email address, what happened, and a one-way fingerprint of the network the request came from. We keep the fingerprint rather than your IP address: it is enough to notice one invite code being shared around, and it cannot be turned back into an address or a location. These records are deleted automatically after 90 days.

Sending invitations: invitation emails are sent either by Supabase (our database provider) or, where configured, by Resend, an email delivery service — in which case your email address and the invitation text pass through them in order to reach you. Many of our invitations are simply sent by hand over WhatsApp instead.

How long a place lasts: a place runs for a year from the day we approve it, so we keep the date it started and the date it ends. That is what the small "days left" note in the corner of the page is reading — it comes from a cookie on your own device, not from asking us.

When the beta ends, the request list, the free-day list and the sign-in log are deleted. Receipts are already gone by then — each one is deleted as your place is opened. Nothing in this section is used for advertising or shared with anyone else.

Where it lives

Account and progress data is stored securely with Supabase (our database provider) and the website is served by Vercel. Access rules ensure each family can only ever see its own data. Educational games run entirely in your browser.

Your controls

You can remove a child's profile at any time from your dashboard (this deletes their progress). To delete your entire account and all data, email us at info@healsocialfoundation.com and we will remove it.

Changes

If this policy changes in a meaningful way, we will note the new date at the top of this page.