Privacy Policy

Darajah ("we", "our", "us") is an Islamic educational platform accessible via web at getdarajah.com and via the Darajah Android app. We are committed to protecting your privacy.

Darajah does not display advertisements on the platform and does not sell your personal data. To measure our marketing and improve the product we use a small set of consent-gated analytics and advertising-measurement tools (see “Cookies & Tracking” and “Third-Party Services” below). These load only if you accept the cookie banner, and you can decline them without losing access.

We collect only what is necessary to provide the service:

• Account data: email address and password (hashed).
• Learning progress: lessons completed, exam attempts, level progress, journal reflections.
• Payment data: we use Razorpay. We store payment confirmation only. No card details.
• Usage analytics: anonymised events via PostHog (self-hosted). No PII shared.

Push notifications on the mobile app are scheduled locally on your device only. No push tokens or notification data are transmitted to our servers.

All data is stored in Supabase (AWS ap-south-1, Mumbai, India). Row-Level Security is enabled. Data in transit is encrypted via TLS/HTTPS.

• Supabase — authentication and database (India region)
• Razorpay — payment processing (India, RBI-compliant)
• Cloudflare R2 — audio/content file storage
• PostHog — anonymised product analytics (consent-gated)
• Vercel — web hosting and cookieless aggregate traffic analytics
• Meta Pixel (Meta Platforms) — advertising-measurement tag used on our public marketing pages. It loads only after you accept the cookie banner, is never used to profile children, and can be declined.

Essential cookies needed to sign you in and keep you logged in are always on. Non-essential analytics and advertising-measurement tools (PostHog and the Meta Pixel) are off by default and load only if you choose “Accept” on the cookie banner. Vercel’s aggregate traffic analytics is cookieless. You can withdraw consent at any time by clearing your choice in your browser or emailing privacy@getdarajah.com.

We keep your account and learning data for as long as your account is active. When you request deletion we remove your personal data within 30 days, except limited records we are required to keep for legal, tax, or accounting purposes (for example, payment records retained for the period required by law).

You may access, correct, export, or request deletion of your data, and you may withdraw any consent you have given. Email privacy@getdarajah.com — we will respond within 30 days.

Accounts on Darajah are intended for adults (18+). Where a parent or legal guardian chooses to use Darajah for a child, the parent or guardian must hold and control the account and provides consent on the child’s behalf. We collect only the minimal learning data needed to deliver lessons.

In line with India’s Digital Personal Data Protection Act, 2023, we do not knowingly process a child’s personal data without verifiable parental consent, and we do not carry out behavioural tracking or targeted advertising directed at children. If you believe a child has provided us data without parental consent, email privacy@getdarajah.com and we will delete it.

If you have a concern about how your data is handled, contact our grievance officer at privacy@getdarajah.com. We acknowledge grievances within 48 hours and aim to resolve them within the timeframes required under applicable law.

Questions? privacy@getdarajah.com