Privacy Policy

Account details: your name, email address and password (stored only as a hash), and optionally a phone number, country, short bio and profile photo. Accounts are created on hurbad.com; the mobile app signs in to an existing account.

Learning activity: which courses and diplomas you are enrolled in, lessons you complete, quiz answers and scores, notes you write on a lesson, questions and replies you post in lesson Q&A on hurbad.com, practice-exam and flashcard progress, and certificates issued to you.

Diploma verification: for diploma programmes we ask for an identity document and a passport-style photo, as described in our Terms. These are used only to verify you and to issue your certificate.

Payments: purchases are made on hurbad.com and processed by Stripe, or recorded by our staff for offline payments. We keep the order, amount, currency and payment status. We never see or store your full card number — Stripe handles that under its own privacy policy. The mobile app does not sell anything and does not collect payment details.

Support messages: anything you send us by email or WhatsApp.

Device session: when you sign in, the app sends a random device identifier it generates, the device name, platform (Android or iOS), OS version and app version. We store these with your sign-in session so you can see and sign out of individual devices, and so a stolen session can be revoked.

Push notifications: only if you allow notifications, the app registers an Expo push token for your device so we can tell you about updates to your courses. You can turn this off at any time in your phone's settings.

Video playback: lesson videos are streamed from Bunny CDN using short-lived signed links. We record how far you have watched so you can resume, and that is what your progress is calculated from.

What the app does not do: it has no advertising, no third-party analytics or tracking SDK, no access to your contacts, photos, location or microphone, and it does not read other apps. There is no chat, Q&A or messaging between students in the app. Screen capture of lesson videos is blocked to protect course content.

To provide the service: sign you in, show your courses, save progress, grade quizzes, issue certificates, and answer your questions.

To keep accounts safe: detect shared accounts and suspicious sign-ins, lock accounts after repeated failed attempts, and let you revoke devices.

To communicate: transactional emails such as password resets, enrollment confirmations, payment reminders and certificate delivery, and push notifications if you opted in.

To improve Hurbad: aggregate statistics about which courses and lessons are used. These are counts, not profiles of individual students.

AI features: where a lesson or tool uses AI assistance, the text you type into that feature is sent to Google Gemini to generate a response. We do not send your account details with it.

Access and correction: you can view and edit your profile in the app and on hurbad.com.

Devices: sign out of any device from the app, which deletes that device's session.

Notifications: allow or deny push notifications in your phone settings at any time.

Deletion: you can ask us to delete your account and personal data by emailing contact@hurbad.com from your account email, or on WhatsApp. We will confirm and complete the deletion within 30 days. Records we must keep by law (payment history) are retained in anonymised form.

Objection and portability: you may ask us for a copy of your data or object to a particular use; write to contact@hurbad.com.