1. Who we are
Wirdi is an online platform for memorising and learning the Holy Qur'an, offering group cohort classes led by qualified teachers, alongside self-practice and performance-tracking tools.
The service is operated by Wirdi. For privacy enquiries or to exercise your rights, contact us at team@wirdi.app.
2. Data we collect
a) Account data
- Name, email address, phone number, country, timezone, preferred language, gender, and profile photo.
b) Children's data (managed accounts)
- Child's name, age, gender, and avatar — provided and managed entirely by the parent or legal guardian. Children do not sign in independently.
c) Payment data
- Payments are processed by a regulated payment provider. We do not store your card details. We retain your billing identifier and basic billing profile (name, billing address, currency).
d) Learning and session data
- Attendance, performance ratings, progress entries, session audio recordings (when enabled), and teacher notes.
e) Technical data
- Device identifier, device and browser type, error and performance logs — collected automatically by our infrastructure providers.
3. How we use your data
- Operating the service and delivering classes and content.
- Issuing invoices, processing payments, and handling refunds.
- Sending transactional notifications (enrolment confirmations, session reminders, payment receipts) via email and/or WhatsApp — only with your explicit consent.
- Tracking academic performance and reporting it to the parent / guardian.
- Providing support and responding to your enquiries.
- Improving the platform and diagnosing faults (using anonymised data where possible).
4. Third parties we share data with
We share the minimum necessary data with trusted service providers, each contractually bound to protect your information. These include:
- A database, authentication, and session-storage provider.
- A regulated payment processor and invoicing provider.
- A transactional email delivery service.
- The official WhatsApp Business platform — for transactional notifications only, with your explicit opt-in.
- A real-time audio service for live sessions.
- An error-monitoring and performance-diagnostics service.
- A website hosting provider.
- AI-assisted feature providers (e.g. for recitation feedback).
- A cloud storage service for session audio recordings.
We do not sell your data to third parties under any circumstances, and we do not share data for advertising purposes.
5. Cookies
We use only essential cookies to manage your authenticated session (secure HTTP-only cookies, inaccessible to third-party scripts). We do not use advertising or cross-site tracking cookies.
6. Children's data
Wirdi is open to both adults and children. Children use the platform through a "managed account" created by a parent or legal guardian.
Children under 16 are not permitted to create their own accounts. A parent or legal guardian creates a managed account for the child and controls:
- Entering and editing the child's information.
- Enrolling the child in classes and cohorts.
- Viewing the child's performance and reports.
- Deleting the child's data entirely at any time.
The child does not log in with their own email and never receives marketing communications from us.
7. Your rights
At any time, you have the right to:
- Request a copy of the personal data we hold about you.
- Correct any inaccurate information in your account.
- Request deletion of your account and personal data.
- Withdraw your consent to data processing (note that withdrawal may prevent us from providing certain services).
- Object to or restrict the processing of your data.
To exercise any of these rights, email team@wirdi.app. We typically respond within 30 days.
8. Data retention
We retain your data for as long as your account is active. When you request account deletion, we delete your personal data within 30 days, except where retention is required for legal or accounting purposes (e.g. invoice records, retained for up to 7 years to meet tax obligations).
9. Security
We implement appropriate security measures to protect your data:
- Full encryption in transit via HTTPS/TLS.
- Encryption at rest through our infrastructure providers.
- Strict internal access controls enforced at the record level.
- Two-factor authentication on administrative accounts.
No method of electronic transmission or storage is 100% secure, but we work to apply best-practice safeguards at every layer.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. For material changes, we will notify active users by email a reasonable time before the changes take effect.
11. Contact us
For any privacy-related enquiry or to exercise your rights:
- Email: team@wirdi.app