Privacy Policy
Last updated: January 1, 2026
This policy represents Edura's commitment (subject to the laws and regulations of the Kingdom of Saudi Arabia) to protecting the privacy of its users, including teachers and students. This document clearly and transparently explains how we collect, process, and protect personal data, and how we handle educational content produced through the platform.
Data We Collect
We collect the minimum data necessary to operate the platform efficiently: • Basic registration data: Name, email, and password (encrypted). • Student data (minors): Students (including those under 18 years of age) are added/invited to the platform by teachers. The teacher acknowledges that they have the authority or necessary consent from the educational institution or parents to invite students to use the platform. • Internal behavioral data: Student progress in learning paths and test results (for display to the teacher and student only). Important note: Edura does not use any external tracking tools (such as Google Analytics or Meta Pixel) to analyze user behavior for advertising purposes. Your data is never sold or shared with any marketing entity.
Intellectual Property & AI-Generated Content
Edura strictly differentiates between personal content and content generated through platform tools: • Human-uploaded content: Any files, images, or texts uploaded by the teacher (not AI-generated) remain the exclusive intellectual property of the teacher. The platform does not collect or use them for any purposes outside of providing the service to the teacher and their students. • AI-generated content: All outputs generated using Edura's AI tools (such as lessons, tests, summaries, remedial paths, and semester plans) are considered shared assets that Edura has the right to retain, reuse, and develop to build customized curricula and improve platform algorithms. • Anonymization: Edura commits to removing all personal data (teacher name, student name, or school) from AI-generated content before reuse, to ensure complete confidentiality. We rely on certified providers (such as Google Workspace) whose policies ensure that paid API data is not used to train their general models.
Financial Operations & Payment Gateways
The platform does not collect, process, or store any credit card or bank data on its servers. All payments are processed securely and fully encrypted through the certified service provider (Tuwaiq Pay) and are subject to the service provider's terms and conditions.
Data Protection & Technical Storage
• Platform data is stored on secure cloud servers (Hetzner) protected by the latest encryption protocols. • In line with business continuity requirements, we maintain daily data backups. These backups are programmatically and automatically destroyed after one week (7 days).
User Rights (Retention & Deletion)
Under the Saudi Personal Data Protection Law, users have the right to modify their data or request its deletion: • Personal account deletion: Upon requesting account closure, personal data is deleted immediately. • Temporary content retention (grace period): To protect teachers from accidental deletion or unauthorized third-party access, the platform retains educational content from deleted accounts for three (3) months. After this period, the content is permanently destroyed or fully anonymized and incorporated into platform assets (per the Intellectual Property section).
Legal Jurisdiction: Kingdom of Saudi Arabia (Personal Data Protection Law - PDPL)