Privacy Policy
What personal data Tashrih collects, why, who processes it for us, how long we keep it, and how to see, correct or delete it.
Last updated:
Who is responsible
Tashrih is run by Ameni Grami, an individual based in Tunisia, who is responsible for the personal data described here. Contact: amenigrami489@gmail.com.
What we collect
Account: your email address, and your display name and study track if you set them. Your password is stored hashed by our authentication provider; we never see it.
Study: your progress, quiz and QCM answers and scores, streaks, and the notes you write, so they follow you from one device to another.
Feedback: what you send us through the feedback form, and your email address if you include it.
Subscription: your plan, its status and renewal dates, and the customer and subscription references Paddle gives us. We never receive or store your card number.
Technical: like any website, our hosting provider handles your IP address and browser details to deliver pages and protect the site.
Usage counts: anonymous records of a few steps on the site — a visit, a duel played, the sign-up form opened or sent, a score shared — with the link or site you arrived from. They carry a random number your browser makes for itself, not your account, email or IP address, and they only tell us which links bring readers.
How we use it
To run your account and keep your progress in sync; to unlock what you paid for; to send account emails such as sign-in links and password resets; to answer your messages; to fix errors and improve the content from your feedback; and to prevent abuse.
We do not show ads, and we do not use your data for advertising.
Who processes it for us
Supabase — our database and authentication provider. It stores your account and study data.
Cloudflare — hosts and delivers the site and protects it from attacks. We also use Cloudflare Web Analytics, which counts page views, referring sites and countries without cookies and without identifying you.
Paddle — sells our online subscriptions as Merchant of Record. Paddle collects your payment details, billing country and email to take payment and handle tax, under its own privacy policy: www.paddle.com/legal/privacy. Card numbers go to Paddle only; we never see them.
These providers may process data outside Tunisia, for example in the European Union or the United States. They only use it to provide their service to us.
We don't sell your data
We do not sell, rent or trade your personal data, and we do not share it with anyone except the providers above, or where the law requires it.
Cookies
We only use cookies the site needs: a session cookie that keeps you signed in; a language cookie that remembers French, English or Arabic; and a referral cookie that remembers a friend's invite code, if you arrived through one, so it can be credited when you sign up.
Your browser's local storage also keeps a few display preferences, such as light or dark mode, and the random number and arrival link used for the usage counts above. We use no advertising or cross-site tracking cookies. If that ever changes, we will update this policy first.
How long we keep it
We keep your data while your account is open. When you delete your account or ask us to, we delete your personal data within 30 days, except records we must keep by law, such as payment records — Paddle keeps its own transaction records under its legal obligations.
Your rights
You can ask to access your data, get a copy of it, correct it, or have it deleted, and you can object to how we use it.
To make a request, email amenigrami489@gmail.com from the address on your account. We will answer within 30 days.
If you think we have mishandled your data, you can also complain to a data protection authority — in Tunisia, the INPDP (Instance Nationale de Protection des Données Personnelles), or the authority where you live.