Privacy Policy

Who is responsible

Imtaz is run by an individual developer based in the Kingdom of Saudi Arabia, who is responsible for your data. For any privacy question or request, email support@imtaz.app.

What we collect

Account: your email address and a password, which we store only as a secure hash. If you sign in with Google, Google gives us your name, email address and profile picture.

Sign-in sessions: the IP address and browser details of each signed-in session, to keep your account secure.

Onboarding: your answers about your exam timing, attempt, study method and preferred language.

Learning: your progress, quiz and mock exam answers, notes, and the feedback or content reports you send.

Purchases: the status and amount of your order and Polar's order reference. Card details stay with Polar.

Usage analytics, only if you agree: which pages and features you use, kept for 12 months.

Where you came from: campaign or referral tags in the link you arrived by, saved in your browser and linked to your account after you sign in.

Why we use it

To run your account and the course (our agreement with you), to keep the service secure (legitimate interest), to process your purchase and meet legal obligations, and, only with your consent, to measure and improve the course. We do not sell your data, show ads, or profile you for anyone else.

Cookies and browser storage

We use a sign-in cookie, a cookie that remembers which version of the home page you saw, and browser storage for your preferences and the campaign tags above. We use no advertising cookies and no third-party trackers.

Who processes it for us

Cloudflare (hosting and content delivery), Turso (database), Polar (payments, as merchant of record), and Google (only if you choose Google sign-in). They process data on our instructions or under their own privacy terms, and some of them process it outside Saudi Arabia.

How long we keep it

Account and learning data are kept until you delete your account. Analytics events are deleted after 12 months. Purchase records are kept as long as tax and accounting law requires.

Your rights

You can ask to see, correct or delete your data, get a copy of it, or withdraw consent at any time; withdrawing consent does not affect processing that happened before. Email support@imtaz.app and we will answer within 30 days. You can also complain to the Saudi Data & AI Authority (SDAIA).

Children

Imtaz is for adults preparing for a professional exam. We do not knowingly collect data from anyone under 18, and we delete it if we learn we have.

Security

Data is encrypted in transit, passwords are hashed, and access to production data is limited to the operator.

Changes

We update the date at the top when this policy changes, and tell you in the app or by email before a material change takes effect.