Privacy Policy
A formal privacy policy is being finalised under the Saudi Personal Data Protection Law (PDPL). The Arabic binding version will be published at genie.courses/privacy-policy. This English note describes current practice.
What we collect
When you create an account: your name, email, and a hashed password (or your OAuth provider identifier if you sign in with a third party).
When you make a purchase: the billing email, amount, country, and reference number. Card details are collected directly by our payment provider (StreamPay); we never see or store them.
If you choose to pay in instalments at checkout, we collect your Saudi mobile number to start the Tamara session. Tamara then performs its own identity and credit checks directly with you, and shares only the approval outcome and instalment status back to us.
As you use the product: which lessons you have started and completed, for the progress UI. Video playback generates aggregate analytics, not per-user watch logs.
Who processes the data
StreamPay processes card payments and issues invoices. Tamara processes Buy-Now-Pay-Later instalment purchases, including its own identity and credit checks. Telegram hosts the course community. Infrastructure providers host the website, video, and database. Each has its own privacy terms. Some of these providers operate outside Saudi Arabia, and using the service may result in personal data being transferred outside the Kingdom. Your use of the service constitutes consent to this transfer under PDPL.
How long we keep it
Account and progress data persists as long as your account exists. Billing records are kept for 7 years to satisfy Saudi tax law. Server logs and structured event logs roll off after 30 days.
Emails we send you
Transactional emails are tied to actions you took: purchase confirmation and e-invoice, certificate of completion, refund updates, and security notices.
Lifecycle emails are tied to your activity on the platform: course updates from your instructor, gentle nudges if you stop progressing, and milestones when you hit a learning streak. We do not send unrelated marketing or sell your address. To stop lifecycle emails while keeping transactional ones, email help@genie.courses; we honour the request within 5 business days.
Your PDPL rights
You have the right to obtain a copy of your personal data, correct inaccurate data, request deletion (subject to legal record-keeping obligations), withdraw consent to future processing, and complain to the Saudi Data and AI Authority (SDAIA) if you believe our processing violates the law. To exercise any of these, email help@genie.courses.
Children
Genie is not directed at anyone under 18, and we do not knowingly create accounts for minors. If a minor has created an account, the account is void from creation; email help@genie.courses to have it removed and any charges returned to the guardian after identity verification.
Changes to this policy
When the Arabic binding version is published, it governs. Material changes to either are communicated to enrolled users by email.
Contact
Privacy questions and data-subject requests: help@genie.courses.