This policy explains what data Thaheen collects, why, how we protect it, and your rights over it under the Saudi Personal Data Protection Law.
Who we are
Your data is controlled by itar almaarifa Company For Information Technology, which runs Thaheen, RIYADH Al Taawun Dist. Ghifar Ibn Malil.
What we collect
Account data: your name, email, mobile number, and your university, faculty and year of study if you enter them.
Purchase data: orders, invoices and refund requests. We do not store your card details; payments are processed directly by our payment provider.
Learning data: the courses you have access to, your lesson progress, quiz attempts, notes and saved lessons.
Support data: your support tickets and their messages.
Technical data: sign-in sessions and trusted devices, and a record of your cookie choices with the IP address at the time you made them.
Why we use it
To create your account and sign you in, deliver the courses you bought, issue tax invoices, handle refund requests, answer support requests, and send you messages about your account and orders. We do not sell your data to anyone.
Who sees it
A teacher sees what they need about the students on their own course. We share with service providers only what they need to do their job: the payment provider to process payments, the video provider to play protected lessons, the email provider to send messages, and the Zakat, Tax and Customs Authority to clear electronic invoices.
Where your data is kept
Your data and files are stored on Amazon Web Services servers in Stockholm, Sweden, outside Saudi Arabia. This is subject to the cross-border rules of the Personal Data Protection Law. We also use Google to send email, VdoCipher to play protected lessons, and Vercel to host thaheen.app.
Cookies
thaheen.app sets no cookies and uses no analytics or marketing tools. If we add them later, we will use them only with your consent.
Your rights
You can see and correct your data on your account page.
You can ask for a copy of your data from the privacy settings in the app. We prepare a file with your account, orders, invoices, course access, progress, notes, support tickets and quiz attempts, and the download link appears in the app when it is ready.
You can ask for your account to be deleted from the app or at thaheen.app/account/delete. Your account is frozen as soon as you ask, and deleted within 3 days.
You can withdraw your consent at any time by contacting us. This may mean closing your account.
What remains after deletion
We remove your personal data, end every session, and delete your PIN, trusted devices, verification codes, notes, saved lessons and support conversations. Invoices and orders are kept, no longer linked to your personal data, because Saudi tax law requires us to keep them. Your course ratings stay as stars only; the text you wrote is removed.
How we protect it
Data travels over encrypted connections, internal access is limited to the people who need it for their work, and sensitive actions are logged.
Children
Thaheen is for users aged 18 or older. Anyone younger may use it only with a parent's or guardian's consent.
Contact
For any question about your privacy, email support@thaheen.app or reach us on WhatsApp or phone at +966567267006 · WhatsApp.
Changes
We may update this policy. The new version is published on this page and applies from the day it is published.
If the Arabic and English versions of this policy differ, the Arabic version prevails.