Privacy Policy

1. Overview

TaleemHouse is a homeschool tracking application available on iOS and the web (an Android app is planned). It is designed for parents and guardians who homeschool their children. The app lets you track schedules, reading logs, Quran memorization, activities, portfolios, goals, and language learning — all in one place.

TaleemHouse ("we," "us," or "our") is an independent company based in the United States. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data.

Who uses TaleemHouse? Account holders are adults — parents or guardians ("household owners") and the helpers they invite. Children are tracked in the app by their parent or guardian. Children do not create accounts; a parent may hand a signed-in device to a child to view a simple daily checklist (see Section 5).

If you have questions or concerns about this policy, email us at info@taleemhouse.com.

2. What We Collect

2.1 Account Data

When you create an account or are invited as a helper, we collect:

• Email address
• First name and last name
• Encrypted password (we never store your password in plain text)
• Session tokens used to keep you signed in

This applies to household owners and any helpers they add (up to 3 helpers per household).

2.2 Household & Child Data

When you set up your household and add children, we collect:

• Child's first name (and optional last or preferred name)
• Child's date of birth
• Child's grade level
• Child's photo (optional)
• Medical notes (optional — e.g., allergies or conditions relevant to schooling)
• Learning-style notes and interests (optional)
• US state (used for curriculum and standards context)

This information is entered by you, the parent or guardian. Children do not have their own accounts and do not submit this data themselves.

2.3 Learning Records

As you use TaleemHouse to track your children's education, we store the records you create:

• Schedule blocks: subject, day of week, time, recurrence pattern
• Reading log entries: book title, page range, date
• Quran memorization progress: surah and ayah markers
• Activity logs: title, description, date, subject area, attached educational standards
• Portfolio entries: title, description, date, and any attached photos or files
• Goals and milestones: title, due date, completion status
• Language entries (Arabic and others): text, script, romanization, translation
• Personal Qur'an progress (optional): your own read-through markers — surah and ayah — and an optional completion (khatm) goal date. This record is linked to your adult account rather than a child, and like other Qur'an activity it reveals religious practice, which we handle as special-category data (see the Article 9 basis below).

All of this data is entered by you and is used solely to provide the TaleemHouse service to you.

2.4 Files & Portfolio Attachments

You may upload photos and files (such as student work samples) as attachments to portfolio entries and activity logs. These files are stored on our file storage provider (Cloudflare R2) and are only accessible to members of your household, unless you choose to create a portfolio share link (see 2.9).

2.5 Device & Session Data

• Push notification tokens: If you enable push notifications, we store a device token (issued by Apple APNs or Google FCM via Expo) linked to your account. This is used only to deliver notifications to your device.
• Session & security records: Session tokens are stored in secure, HttpOnly cookies on web and in device secure storage on mobile. When you sign in, we also record the IP address and user-agent associated with the session. Security-relevant account actions (for example membership changes, data exports, and account deletion) are written to an audit log to detect and investigate abuse.
• Server logs: Our servers automatically record standard web-server information for each API request, including timestamps, IP address, and request metadata (e.g., HTTP method, endpoint path, response code). These logs do not include the content of your learning records.

2.6 Payment Data

If you subscribe to a paid TaleemHouse plan, payments are processed by Apple (App Store), or by Google (Play Store) once the Android app is available. We do not receive or store your full credit card number or bank details.

We use RevenueCat to manage subscription status. RevenueCat receives purchase receipts from Apple or Google and links the subscription status to your TaleemHouse user ID. We store your subscription status (active/inactive, plan type, renewal date) in our database.

2.7 Location Data

TaleemHouse includes Muslim prayer-time and qibla (compass direction) features. To calculate accurate prayer times and the qibla for where you are, the app reads your device's location with your permission:

• Foreground location: used on your device to compute daily prayer times and the qibla direction. Your device's precise location stays on the device.
• Background location (optional): if you opt in, the app updates your location in the background so prayer times and reminders stay accurate while you travel. These updates are used on the device to schedule your reminders and are not sent to us. You can turn this off at any time in your device settings.
• Your saved location: when you save a location to your family account, we store an approximate version of it, rounded to about 1 km, with the place name (city and region). It is the home location the app uses for your prayer times and reminders (when you are more than about 25 km away, the app uses the phone's current location instead, on the device), and we use it for your subscribable calendar feed, the web dashboard and your household's time zone.

Location is used only for prayer times, the qibla and your household's time zone. It is never used for advertising or tracking, and it is never sold or shared with third parties. If you deny or revoke location permission, you can still set your location manually.

2.8 Calendar Integration (optional)

If you turn on calendar sync in the mobile app, TaleemHouse writes your schedule and lesson events into a dedicated calendar on your device. Your device's operating system may then sync that calendar to the account you have set up (for example iCloud, Google, or Microsoft Exchange). That sync is handled by your calendar provider under its own privacy policy, not by TaleemHouse. You can turn calendar sync off at any time.

2.9 Links You Choose to Share

Two optional features create private links that work without signing in. Anyone who has the link can see what it shows, so share them only with people you trust:

• Portfolio share links show one child's name, portfolio work, and attached photos. Each link expires after 30 days, and you can revoke it sooner.
• Calendar subscription links (an .ics feed for Apple, Google, or Outlook calendars) show your household schedule, including your children's names, and prayer times for your saved location. A calendar link keeps working until you refresh it or turn it off in Settings. Refreshing or turning off a link is always available, even if a trial or subscription has ended.

2.10 AI Lesson Planning (optional)

If you use "Plan with AI", we send our AI provider (Groq) the information needed to draft a plan for one child: grade level, US state, interests, learning-style notes, active goals, recent lesson titles, the subjects and learning standards you selected, and any extra context you type. We do not send your child's name, date of birth, photo, or medical notes. This happens only when you tap generate. You review the draft before anything is saved.

2.11 Error Diagnostics

To find and fix crashes, the app sends us a report when it hits an unexpected error. The report contains the error message, part of the technical stack trace, the app version, and the platform (iOS, Android, or web). Before a report leaves your device, the app removes anything that could be personal or something you typed: quoted text, email addresses, web-address details, IDs, and long numbers. Our server removes them again when the report arrives. Reports are not linked to your account. They are delivered to our team by email and are used only to fix problems, never for advertising or profiling.

2.12 Waitlist

If you join our waitlist on the website, we store your email address and notify our team so we can let you know when TaleemHouse is available.

3. How We Use Your Data

We use the data we collect for the following purposes:

We do not use your data for advertising, behavioral profiling, or any purpose unrelated to providing the TaleemHouse service.

4. Who We Share Data With

We share data only with the service providers necessary to operate TaleemHouse. We do not sell your data to any third party. We do not share your data with advertisers or data brokers.

We share with each provider only the data it needs to perform its service for us. Each provider handles that data under its own terms and privacy policy.

We may also disclose data if required by law, court order, or to protect the safety and rights of our users or the public.

Features you turn on can also send data to services you choose: calendar sync sends your schedule to your own calendar provider (2.8), and share links show data to the people you give them to (2.9). These are transfers you direct, not providers working for us.

5. Data About Children (COPPA Notice)

TaleemHouse is designed specifically for parents and guardians who homeschool their children. Children are not account holders. A parent may hand a signed-in device to a child to view a simplified daily checklist and mark lessons complete. That view runs under the parent's account, shows only that child's name and lessons, and stays locked until the parent enters a PIN set on the device. No personal information is collected from the child.

• All accounts are created and managed by adults (parents, guardians, or helpers they invite).
• Information about children is entered by the parent or guardian. The fields we store are: name, date of birth, grade level, an optional photo, optional medical notes, optional learning-style notes and interests, prayer and Quran activity logs, and portfolio work (including uploaded photos and files).
• We do not knowingly collect personal information directly from children under the age of 13.
• We do not use children's data for any purpose other than providing the homeschool tracking service to the parent.
• Children's data is stored under the parent's household and is fully under the parent's control.

Some of this information is special-category data under Article 9 of the GDPR — prayer and Quran activity reveals religious practice, and medical notes are health data. We process it on the basis of the explicit consent of the parent or guardian account owner, given when you choose to enter it. You can withdraw that consent at any time by deleting the records or your account.

If you are a parent and want to delete your child's data, you can delete specific records from within the app, or delete your entire account (which removes all associated data, including your children's records) via the in-app Delete Account feature or by contacting us at info@taleemhouse.com.

If we learn that a child under 13 has independently created an account without parental consent, we will delete that account and its data promptly. Please contact us at info@taleemhouse.com if you believe this has occurred.

6. Data Retention

Account deletion: When you delete your account, your account information, household data, children's records, and learning records are deleted from our database immediately, and your uploaded files are deleted at the same time (with automatic daily retries if file storage is briefly unavailable). For disaster recovery, our database provider keeps short-lived recovery snapshots, and we keep encrypted daily backups of the database in our file storage (Cloudflare R2), each deleted automatically after 14 days. Both roll off on their own, so all copies are gone within 30 days. We do not email backups of your data.

7. Your Rights

All users:

• Access and portability: In Settings, "Download my data" gives the household owner a complete, machine-readable JSON copy of the household's data (including children's records, learning records, and file references) through a private link that expires after one hour. The export is never emailed.
• Correction: You can update your account information and any records at any time within the app.
• Deletion: You can delete your account and all associated data via the in-app Delete Account option, or by emailing info@taleemhouse.com.

If you are in the European Union (GDPR):

In addition to the above, you have the right to:

• Data portability: Request a machine-readable copy of your personal data.
• Restriction of processing: Ask us to limit how we use your data in certain circumstances.
• Object to processing: Object to processing based on legitimate interests.
• Lodge a complaint: Contact your local data protection authority.

The legal basis for processing your data is:

• Contract performance: Processing necessary to provide the TaleemHouse service you've signed up for.
• Legitimate interests: Server logging for security and reliability.
• Consent: Push notifications (you may opt out at any time via device settings).
• Explicit consent (Article 9): Religious-practice records (prayer and Quran activity) and children's medical notes are special-category data. We process them only because you, the parent or guardian account owner, explicitly choose to enter them; delete the records or your account to withdraw consent.

If you are in California (CCPA):

California residents have the right to:

• Know what personal information we collect, use, and share.
• Delete your personal information (subject to certain exceptions).
• Opt out of the sale of personal information — note: we do not sell personal information.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, use the in-app controls or email us at info@taleemhouse.com. We will respond to verifiable requests within 30 days (or as required by applicable law).

8. Security

We take the security of your data seriously. Our measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (HTTPS).
• Encryption at rest: Data stored in our Neon database and Cloudflare R2 file storage is encrypted at rest.
• Session security: Session tokens on the web are stored in secure, HttpOnly cookies that are not accessible to JavaScript. On mobile, tokens are stored in device secure storage.
• Access controls: Access to production data is limited to authorized personnel and service accounts only.
• No advertising or analytics SDKs: We do not include advertising, analytics, or tracking SDKs. The only diagnostics we collect are the error reports described in 2.11.

No system is completely immune to security risks. If you believe your account has been compromised, please contact us immediately at info@taleemhouse.com.

9. International Data Transfers

TaleemHouse is an independent company based in the United States. Your data is stored and processed in the United States (via Neon, Cloudflare R2, and Vercel), and the providers listed in Section 4 (including Resend and Groq) process data in the United States.

For users in the European Union or UK: Your data is transferred to and processed in the United States. Our hosting providers (Vercel, Neon, Cloudflare) each support Standard Contractual Clauses (SCCs) for international data transfers, and we rely on them where they are available.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Posting the updated policy at this URL (and within the app)
• Updating the Effective Date at the top of this policy
• Sending an email to your registered address, if the change is significant

Your continued use of TaleemHouse after changes take effect constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may delete your account at any time.

11. Contact Us

For privacy-related questions, data requests, or concerns, please contact:

We will respond to all inquiries within a reasonable time, and within the legally required timeframes for rights requests under GDPR and CCPA.