Privacy

This is a draft based on how the platform works technically. We recommend a legal review before going live with real users.

1. Who we are

Noer is a platform for learning, reading and memorising the Quran. Data controller: [TO COMPLETE: name / organisation]. Contact: [email protected]. Website: ibocom.nl.

2. What data we process

Account data: your name, email address, encrypted password, role (student/teacher), language preference and settings.

Learning data: your memorisation progress and your pronunciation attempts (including the automatic transcription, the score, and your teacher's assessment).

Voice recordings: when you record a pronunciation exercise, your recording is stored temporarily so your teacher can listen to and review it. The recording is deleted automatically after your teacher has reviewed it, or at the latest at the end of the retention period (by default at least 7 days). After deletion only the text assessment remains, not your voice.

Consent: the moment you consented to recording and temporarily storing your voice.

Links: the link between student and teacher.

3. Why we process it

• To manage your account and access.
• To track and show your learning progress.
• So your teacher can assess your pronunciation and give feedback.
• To operate and improve the platform.

Processing of your voice recording is based on your explicit consent, given before your first recording.

4. Third-party processing (speech recognition)

To automatically convert your recording to text we use OpenAI's Whisper API. For this purpose your recording is sent to OpenAI (United States). OpenAI states that data sent via the API is not used to train its models. [TO COMPLETE: state whether a data processing agreement (DPA) with OpenAI is in place.]

5. How long we keep your data

• Voice recordings: temporarily, until teacher review or the end of the retention period (at least 7 days), then deleted automatically.
• Account and learning data: as long as you have an account. If you delete your account, your data is deleted.

6. Your rights

You have the right to access, correct or delete your data. You can delete your account and data via your profile page. For other requests, contact [email protected]. You also have the right to lodge a complaint with the relevant data protection authority.

7. Security

We take appropriate measures to protect your data. Passwords are stored encrypted. Voice recordings are kept outside the public web environment and are only accessible to your own teacher.

8. Minors

If you are under 16, we ask for consent from your parent or guardian before you use the platform.

9. Changes

We may update this privacy statement. The most current version is always on this page.

Last updated: [TO COMPLETE: date].