Nanour

Privacy Policy

Last updated: April 2026

1. Who we are

Nanour ("we", "us", "our") is a managed Arabic tutoring service for children. We are based in the United Kingdom. If you have questions about this policy, contact us at yanooapp@gmail.com.

2. What data we collect

We collect the following personal data:

  • Parent account data: name, email address, phone number, country.
  • Child profile data: first name, date of birth, Arabic language level, learning goals, preferred days and times, learning notes.
  • Tutor profile data: name, bio, languages spoken, teaching specialism, experience, lesson price.
  • Lesson data: booking details, lesson notes (submitted by tutors), AI-generated lesson summaries.
  • Payment data: payment amounts, Stripe payment references. We do not store card numbers — payments are processed securely by Stripe.
  • Technical data: authentication tokens, session cookies.

3. Why we collect this data

We use your data to:

  • Create and manage your account.
  • Match your child with a suitable Arabic tutor.
  • Schedule and deliver live tutoring lessons.
  • Generate post-lesson summaries to keep you informed of your child's progress.
  • Process payments for lessons.
  • Send you important notifications about bookings and lessons.
  • Improve our service.

Our legal basis for processing your data is the performance of our service contract with you (GDPR Article 6(1)(b)), and your consent where applicable (GDPR Article 6(1)(a)).

4. Children's data

Nanour provides tutoring for children approximately aged 5 to 16. We collect children's data (first name, date of birth, learning information) only through the parent's account and with the parent's consent. We do not collect data directly from children. Children's data is used solely to deliver and improve the tutoring service.

5. AI-generated content

We use OpenAI to generate parent-friendly lesson summaries from tutor notes. Tutor notes are sent to OpenAI's API for this purpose only. AI is not used to make educational decisions, assess children, or choose tutors. The AI only rewrites existing tutor notes into a warmer, parent-friendly format.

6. Who we share data with

We share data with the following third parties:

  • Supabase — database and authentication hosting.
  • Stripe — payment processing.
  • OpenAI — lesson summary generation.
  • Resend — email notifications.
  • Vercel — application hosting.

We do not sell your data to third parties. We do not use your data for advertising.

7. How we store and protect data

Your data is stored securely in Supabase (hosted in the EU/UK region). Access to data is controlled by row-level security policies — parents can only see their own data, tutors can only see their assigned students, and administrators have full access for service management.

All connections are encrypted via HTTPS. Passwords are hashed and never stored in plain text.

8. How long we keep data

We keep your data for as long as your account is active. If you delete your account, your personal data and your children's data will be deleted within 30 days. Anonymised lesson data may be retained for service improvement.

9. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a common format.
  • Withdraw consent at any time.

To exercise any of these rights, email yanooapp@gmail.com.

10. Cookies

We use essential cookies only — authentication session cookies required for the service to function. We do not use tracking cookies, analytics cookies, or advertising cookies.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or through the service. The "last updated" date at the top shows when the policy was last revised.

12. Contact

If you have questions about this privacy policy or how we handle your data, contact us at yanooapp@gmail.com.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).