Privacy Policy

At mbahadi.studio, we are committed to protecting your personal data and handling it transparently. This policy explains the data we collect, why we collect it, and how we protect it in accordance with the Saudi Personal Data Protection Law (PDPL) and the European General Data Protection Regulation (GDPR).

• Account information: name, phone number or email address, profile picture.
• Payment data: we use trusted external payment gateways (Paymob/Stripe) and do not store your card details on our servers.
• Usage data: pages you viewed, courses you enrolled in, your progress in lessons.
• Technical data: IP address, browser type, operating system, time of visit.

• Operating the platform and providing courses and digital products.
• Sending notifications and confirmations for orders and certificates.
• Improving the user experience and developing new features.
• Complying with legal and accounting requirements.

We do not sell your data. We share it only with the service providers necessary to operate the platform: - Supabase: database hosting and authentication. - Twilio: sending OTP messages via mobile. - Paymob/Stripe: payment processing. - Google Analytics / Meta Pixel: website usage analytics (optional).

• Obtain a copy of your data.
• Correct or update your data from the profile page.
• Request deletion of your account along with all your data.
• Withdraw your consent to the processing of your data at any time.

To exercise any of these rights, contact us via the /contact page.

We use cookies to remember your login and to measure site usage. You can decline optional cookies through the notice shown on your first visit to the site.

We apply TLS encryption in transit, Row-Level Security on the database, and additional protection for private files. No system is 100% secure, but we follow industry best practices to protect your data.

For any questions about this policy, use /contact or email us at the address shown in the settings.