Privacy Policy

1. Overview

TaleemHouse is a homeschool tracking application available on iOS, Android, and the web. It is designed for parents and guardians who homeschool their children. The app lets you track schedules, reading logs, Quran memorization, activities, portfolios, goals, and language learning — all in one place.

TaleemHouse ("we," "us," or "our") is an independent company based in the United States. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data.

Who uses TaleemHouse? Account holders are adults — parents or guardians ("household owners") and the helpers they invite. Children are tracked in the app by their parent or guardian, but children do not create accounts and do not directly interact with the service.

If you have questions or concerns about this policy, email us at info@taleemhouse.com.

2. What We Collect

2.1 Account Data

When you create an account or are invited as a helper, we collect:

• Email address
• First name and last name
• Encrypted password (we never store your password in plain text)
• Session tokens used to keep you signed in

This applies to household owners and any helpers they add (up to 3 helpers per household).

2.2 Household & Child Data

When you set up your household and add children, we collect:

• Child's first name (and optional last or preferred name)
• Child's date of birth
• Child's grade level
• Child's photo (optional)
• Medical notes (optional — e.g., allergies or conditions relevant to schooling)
• Learning-style notes and interests (optional)
• US state (used for curriculum and standards context)

This information is entered by you, the parent or guardian. Children do not have their own accounts and do not submit this data themselves.

2.3 Learning Records

As you use TaleemHouse to track your children's education, we store the records you create:

• Schedule blocks: subject, day of week, time, recurrence pattern
• Reading log entries: book title, page range, date
• Quran memorization progress: surah and ayah markers
• Activity logs: title, description, date, subject area, attached educational standards
• Portfolio entries: title, description, date, and any attached photos or files
• Goals and milestones: title, due date, completion status
• Language entries (Arabic and others): text, script, romanization, translation
• Personal Qur'an progress (optional): your own read-through markers — surah and ayah — and an optional completion (khatm) goal date. This record is linked to your adult account rather than a child, and like other Qur'an activity it reveals religious practice, which we handle as special-category data (see the Article 9 basis below).

All of this data is entered by you and is used solely to provide the TaleemHouse service to you.

2.4 Files & Portfolio Attachments

You may upload photos and files (such as student work samples) as attachments to portfolio entries and activity logs. These files are stored on our file storage provider (Cloudflare R2) and are only accessible to members of your household.

2.5 Device & Session Data

• Push notification tokens: If you enable push notifications, we store a device token (issued by Apple APNs or Google FCM via Expo) linked to your account. This is used only to deliver notifications to your device.
• Session & security records: Session tokens are stored in secure, HttpOnly cookies on web and in device secure storage on mobile. When you sign in, we also record the IP address and user-agent associated with the session, and security-relevant account actions are written to an audit log (with the originating IP address) to detect and investigate abuse.
• Server logs: Our servers automatically record standard web-server information for each API request, including timestamps, IP address, and request metadata (e.g., HTTP method, endpoint path, response code). These logs do not include the content of your learning records.

2.6 Payment Data

If you subscribe to TaleemHouse after the free trial, payments are processed by Apple (App Store) or Google (Play Store) depending on your platform. We do not receive or store your full credit card number or bank details.

We use RevenueCat to manage subscription status. RevenueCat receives purchase receipts from Apple or Google and links the subscription status to your TaleemHouse user ID. We store your subscription status (active/inactive, plan type, renewal date) in our database.

2.7 Location Data

TaleemHouse includes Muslim prayer-time and qibla (compass direction) features. To calculate accurate prayer times and the qibla for where you are, the app reads your device's location with your permission:

• Foreground location: used on your device to compute daily prayer times and the qibla direction.
• Background location (optional): if you opt in, the app updates your location in the background so prayer times and reminders stay accurate while you travel. You can turn this off at any time in your device settings.
• Your saved location (latitude and longitude) is stored with your household so prayer times can also be generated for your subscribable calendar feed.

Location is used only to calculate prayer times and the qibla. It is never used for advertising or tracking, and it is never sold or shared with third parties. If you deny or revoke location permission, you can still set your location manually.

3. How We Use Your Data

We use the data we collect for the following purposes:

We do not use your data for advertising, behavioral profiling, or any purpose unrelated to providing the TaleemHouse service.

4. Who We Share Data With

We share data only with the service providers necessary to operate TaleemHouse. We do not sell your data to any third party. We do not share your data with advertisers or data brokers.

Each of these providers is contractually required to handle your data only as needed to perform their service for us, and not for their own purposes.

We may also disclose data if required by law, court order, or to protect the safety and rights of our users or the public.

5. Data About Children (COPPA Notice)

TaleemHouse is designed specifically for parents and guardians who homeschool their children. Children are not the account holders and do not directly use or interact with TaleemHouse.

• All accounts are created and managed by adults (parents, guardians, or helpers they invite).
• Information about children is entered by the parent or guardian. The fields we store are: name, date of birth, grade level, an optional photo, optional medical notes, optional learning-style notes and interests, prayer and Quran activity logs, and portfolio work (including uploaded photos and files).
• We do not knowingly collect personal information directly from children under the age of 13.
• We do not use children's data for any purpose other than providing the homeschool tracking service to the parent.
• Children's data is stored under the parent's household and is fully under the parent's control.

Some of this information is special-category data under Article 9 of the GDPR — prayer and Quran activity reveals religious practice, and medical notes are health data. We process it on the basis of the explicit consent of the parent or guardian account owner, given when you choose to enter it. You can withdraw that consent at any time by deleting the records or your account.

If you are a parent and want to delete your child's data, you can delete specific records from within the app, or delete your entire account (which removes all associated data, including your children's records) via the in-app Delete Account feature or by contacting us at info@taleemhouse.com.

If we learn that a child under 13 has independently created an account without parental consent, we will delete that account and its data promptly. Please contact us at info@taleemhouse.com if you believe this has occurred.

6. Data Retention

Account deletion: When you delete your account, all personal data — including account information, household data, children's records, learning records, and uploaded files — is permanently deleted within 30 days of the deletion request. Backups are purged on a rolling schedule within the same window.

7. Your Rights

All users:

• Access: You can view and export your data from within the app.
• Correction: You can update your account information and any records at any time within the app.
• Deletion: You can delete your account and all associated data via the in-app Delete Account option, or by emailing info@taleemhouse.com.

If you are in the European Union (GDPR):

In addition to the above, you have the right to:

• Data portability: Request a machine-readable copy of your personal data.
• Restriction of processing: Ask us to limit how we use your data in certain circumstances.
• Object to processing: Object to processing based on legitimate interests.
• Lodge a complaint: Contact your local data protection authority.

The legal basis for processing your data is:

• Contract performance: Processing necessary to provide the TaleemHouse service you've signed up for.
• Legitimate interests: Server logging for security and reliability.
• Consent: Push notifications (you may opt out at any time via device settings).
• Explicit consent (Article 9): Religious-practice records (prayer and Quran activity) and children's medical notes are special-category data. We process them only because you, the parent or guardian account owner, explicitly choose to enter them; delete the records or your account to withdraw consent.

If you are in California (CCPA):

California residents have the right to:

• Know what personal information we collect, use, and share.
• Delete your personal information (subject to certain exceptions).
• Opt out of the sale of personal information — note: we do not sell personal information.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, use the in-app controls or email us at info@taleemhouse.com. We will respond to verifiable requests within 30 days (or as required by applicable law).

8. Security

We take the security of your data seriously. Our measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (HTTPS).
• Encryption at rest: Data stored in our Neon database and Cloudflare R2 file storage is encrypted at rest.
• Session security: Session tokens on the web are stored in secure, HttpOnly cookies that are not accessible to JavaScript. On mobile, tokens are stored in device secure storage.
• Access controls: Access to production data is limited to authorized personnel and service accounts only.
• No third-party analytics or tracking SDKs: We do not include advertising or analytics SDKs that could expose your data to third parties.

No system is completely immune to security risks. If you believe your account has been compromised, please contact us immediately at info@taleemhouse.com.

9. International Data Transfers

TaleemHouse is an independent company based in the United States. Your data is stored and processed in the United States (via Neon, Cloudflare R2, and Vercel).

For users in the European Union or UK: Your data is transferred to and processed in the United States. We rely on appropriate transfer mechanisms, including Standard Contractual Clauses (SCCs), to ensure that your personal data receives adequate protection when transferred outside the EU/UK. Our hosting providers (Vercel, Neon, Cloudflare) each support SCCs for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Posting the updated policy at this URL (and within the app)
• Updating the Effective Date at the top of this policy
• Sending an email to your registered address, if the change is significant

Your continued use of TaleemHouse after changes take effect constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may delete your account at any time.

11. Contact Us

For privacy-related questions, data requests, or concerns, please contact:

We will respond to all inquiries within a reasonable time, and within the legally required timeframes for rights requests under GDPR and CCPA.