Nanour

Privacy Policy

Last updated: May 2026

1. Who we are

Nanour ("we", "us", "our") is a managed Arabic tutoring service for children. We are based in the United Kingdom. If you have questions about this policy, contact us at yanooapp@gmail.com.

Nanour is operated by [COMPANY_NAME_TODO], registered in England and Wales under company number [COMPANY_NUMBER_TODO].

2. What data we collect

We collect the following personal data:

  • Parent account data: name, email address, phone number, country.
  • Child profile data: first name, date of birth, Arabic language level, learning goals, preferred days and times, learning notes.
  • Tutor profile data: name, bio, languages spoken, teaching specialism, experience, lesson price.
  • Lesson data: booking details, lesson notes (submitted by tutors), AI-drafted parent-facing lesson summaries (reviewed and approved by the tutor before sending), and — from public launch — lesson recordings (see section 8 for the timing).
  • Payment data: payment amounts, Stripe payment references. We do not store card numbers — payments are processed securely by Stripe.
  • Technical data: authentication tokens, session cookies.

3. Why we collect this data

We use your data to:

  • Create and manage your account.
  • Match your child with a suitable Arabic tutor.
  • Schedule and deliver live tutoring lessons.
  • Generate post-lesson summaries to keep you informed of your child's progress.
  • Process payments for lessons.
  • Send you important notifications about bookings and lessons.
  • Improve our service.

Our legal basis for processing your data is the performance of our service contract with you (GDPR Article 6(1)(b)), and your consent where applicable (GDPR Article 6(1)(a)).

4. Children's data

Nanour launches for children aged 6 to 12. Our wider roadmap extends toward ages 6 to 14 and the broader K–12 journey. We collect children's data (first name, date of birth, learning information) only through the parent's account and with the parent's consent. We do not collect data directly from children. Children's data is used solely to deliver and improve the tutoring service.

5. AI-generated content

We use OpenAI for three purposes in v1:

  1. Parent lesson summaries. Your tutor's structured notes are sent to OpenAI's API to draft a parent-friendly summary. The tutor reviews and approves (or edits) the draft before it is sent.
  2. Tutor pre-lesson briefings. Your child's recent learning data is used by OpenAI to prepare a one-page briefing for the tutor before each lesson, to help the tutor deliver a lesson calibrated to your child.
  3. Rule-based recommendations. We use rules operating on structured lesson data (not machine learning) to surface suggestions to tutors, parents, and admins — for example, flagging a skill that has not progressed after several lessons.

AI is not used to make high-stakes educational decisions, assess children formally, or choose tutors. All AI output is reviewed by a human tutor or admin before being acted on.

6. Who we share data with

We share data with the following third parties:

  • Supabase — database and authentication hosting.
  • Stripe — payment processing.
  • OpenAI — lesson summary generation.
  • Resend — email notifications.
  • Vercel — application hosting.

We do not sell your data to third parties. We do not use your data for advertising.

7. How we store and protect data

Your data is stored securely in Supabase (hosted in the EU/UK region). Access to data is controlled by row-level security policies — parents can only see their own data, tutors can only see their assigned students, and administrators have full access for service management.

All connections are encrypted via HTTPS. Passwords are hashed and never stored in plain text.

8. How long we keep data

We keep your data for as long as your account is active. Account deletion is handled by the Nanour team — to request deletion, email us at yanooapp@gmail.com. Once your request is verified, your personal data and your children's data will be deleted within 30 days. Anonymised lesson data may be retained for service improvement.

Lesson recordings. From the point Nanour goes live with paying families, lessons (including the free trial) are recorded as standard for safeguarding, quality assurance, tutor support, and lesson continuity, in line with the recording terms set out in our Terms of Service. Recordings are stored securely and access is restricted to the assigned tutor, the parent account holder, and Nanour staff with legitimate operational need. Recordings attached to active accounts are retained while the account is active; on account deletion they are removed in line with the 30-day deletion process above. Where required to defend or pursue legal claims (for example, a safeguarding investigation), specific recordings may be retained for longer.

9. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a common format.
  • Withdraw consent at any time.

To exercise any of these rights, email yanooapp@gmail.com.

10. Cookies

We use essential cookies only — authentication session cookies required for the service to function. We do not use tracking cookies, analytics cookies, or advertising cookies.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or through the service. The "last updated" date at the top shows when the policy was last revised.

12. Contact

If you have questions about this privacy policy or how we handle your data, contact us at yanooapp@gmail.com.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).