Privacy Policy

1. What we collect

Information you provide when signing up (name, email, country), usage data (questions asked, progress), and basic technical data.

2. Why we collect it

To operate the platform, improve the learning experience, send useful notifications, and handle subscription billing.

3. Who accesses your data

Our limited engineering team, and service providers that process data on our behalf: hosting, payments, email delivery, video hosting, error monitoring (which receives technical details of a failure, not the text of your questions), and the AI model providers described in section 4. We do not sell your data.

4. AI and training

Answering your questions, grading your answers, reading voice recordings and uploaded pages, and preparing study material are done by AI models that third-party providers run. To do that, the text, images or audio of that request are sent to the provider handling it. The providers that can receive it are DeepSeek (China), Cohere (Canada), Google (United States), Groq (United States), OpenAI (United States) and Alibaba Cloud (Singapore). Cohere receives the text of your question and of the course material to search it and re-rank passages, Groq receives audio to transcribe it, and Google receives text (to generate study material and spoken audio) and images. No recording of your voice goes to Google. Your questions and the answers you receive are also saved in your account so you can return to them. We do not use your content to train AI models, and we do not send your email address or payment details to AI providers.

5. Cookies

We use essential cookies for login and preferences. No ad-tracking cookies. The sign-in cookie cannot be read by the site's pages; it lasts up to 7 days if you choose "Keep me signed in" and ends when the browser closes if you don't, and signing out deletes it either way.

We count page views with our own counter: no cookie and no third-party analytics tool. We honour the Global Privacy Control signal, so a visit that sends it is not counted. The footer switch "Visit analytics" turns the counter off for your browser; it stores one small preference cookie, set only when you press it, and nothing else.

6. Your rights

You can access, edit, or delete your account anytime from Settings. For full deletion: privacy@fahmona.com.

7. Security

Your data travels over encrypted connections (HTTPS). Access to our servers and databases is limited to the team that runs the platform, and backups never leave the server unencrypted. We review security regularly.

8. Children

The service is intended for users 13+. For younger learners, a parent must register under the "Parent" role.

9. How long we keep data

We delete the following automatically once its period has passed. The period runs from the date the record was created unless stated otherwise.

• Sign-in records (connection address, city, device label): 180 days, then deleted.
• Per-account AI usage records: 365 days, then deleted, except the per-subject cost records that enforce the AI allowance of a paid course. Those are kept for the life of the account and deleted when the account is erased.
• The text of the questions you asked and the answers you received: 730 days, then the text is erased and a statistical record without your words remains.
• Your written explanations and the AI's feedback on them: 730 days, then the text is erased.
• Support ticket text and conversations: 730 days after the ticket is closed (or, for a ticket left resolved or waiting for a reply and never closed, after its last update), then the text (and subject) is erased and the ticket number and status remain. An open ticket is never erased.
• Messages deleted by their sender: the text is erased at once and the stub is removed after 90 days. If a message was reported, its stub stays while the report does, and its attachment stays while the report is open and for 90 days after it is handled.
• Raw site visits (no identity): 90 days. Aggregated daily counts are then kept for 730 days.
• Verification codes sent to you: 7 days after they expire.

These are kept until you delete your account, because we have not set an automatic period for them yet. We will state the period here when we do:

• Your typed exam and practice answers, the AI's feedback on them, any dispute you raised about an answer key, the settings of your exam sessions, and your concept-map answers.
• Your notes, highlights and saved AI answers in the study view.
• Your notifications, including their text.
• A record that a message of yours triggered a safety response (the kind, where it happened and how many markers matched, never the message itself).

Everything else we keep while your account exists, and delete or de-identify when you delete it.

10. Updates

We may update this policy. Material changes will be announced by email.