This policy explains what personal data THE FLOOD ACADEMY ([legal business name], [address]) collects, why, and what you can do about it. We aim to follow Egypt's Personal Data Protection Law (Law 151 of 2020).
1. What we collect
- Account: your name, email address and password. Your password is stored only in a scrambled (hashed) form that nobody can read. If you sign in with Google, we receive your name, email and profile picture from Google.
- AI tutor: the questions you ask the tutor and its answers, kept so our team can check answers are correct.
- Learning: lessons you complete, your answers to questions, practice sessions and mock exams, and your results. This is how we show your progress and weak areas.
- Purchases: your orders, what you bought, the amount, coupons used and receipt numbers. Paymob handles the payment; we receive only the payment result and limited details such as the card type and the last 4 digits. We never see your full card number.
- Downloads: which PDF you downloaded and when, because each copy is stamped with your email and order number.
- Technical: the device and browser you use, your IP address with each sign-in session, and your language choice.
2. Why we use it
- To run your account and give you access to what you bought.
- To process payments, send receipts and handle refunds.
- To show your progress, weak areas and achievements.
- To protect our content (watermarks, download records) and prevent account sharing and fraud.
- To send you important emails (account confirmation, password reset, receipts). We don't send marketing emails without your agreement.
3. Who we share it with
We do not sell your data. We share only what each service needs to work:
- Paymob (payments, Egypt).
- Bunny.net (video playback; your email is shown on the video as a watermark).
- Cloudflare R2 (storage of PDFs and files).
- [Hosting provider] (the servers and database that run the platform).
- Resend (sending emails, once connected).
- Anthropic (the AI tutor: your question and the matching passages from our lessons are sent to answer it).
- Google (only if you choose "Sign in with Google").
- Make.com (only if we switch on automations; it never receives payment details).
Some of these services store data outside Egypt. We choose services that protect data properly. We may also share data if the law requires it.
4. Cookies
We use only the cookies the platform needs: one to keep you signed in, and one to remember your language. We don't use advertising or tracking cookies.
5. How long we keep it
- Account and learning data: while your account is open.
- Orders, receipts and payment records: as long as Egyptian tax and accounting rules require, even if you close your account.
- Download records: [period, e.g. 3 years], to protect our content.
6. Your rights
You can ask to see the data we hold about you, correct it, or delete your account. Some records (such as orders) must be kept by law. Write to [contact email]. We will answer within [number] days.
7. Security
Passwords are hashed, connections are encrypted (HTTPS), files are stored privately, and only authorised staff can see admin data. No system is perfect: if a breach affects you, we will tell you as the law requires.
8. Changes and contact
We may update this policy; the date at the top shows the latest version. Questions: [contact email].