Privacy policy

This policy explains what personal data Ruqqy (the “service”, operated from the United Kingdom) holds about you, why, and the choices you have. If anything here is unclear, contact us using the support email address shown in your account emails.

What we hold and why

• Account details — your name, username and email address, so we can create and secure your account, sign you in, and send account emails (verification, password resets, enrolment confirmations).
• Learning progress — sessions you complete, scores you record and milestones you tick off, so your dashboard reflects your progress and we can support your learning.
• Orders — enrolment orders and any discount code used. Enrolment is currently free; we do not take or store card details. If paid checkout is introduced later, payments will be handled by a payment processor and this policy will be updated before that happens.
• Activity log — a timestamped record of account events (sign-up, sign-ins, progress and checkout events) used to run the service, prevent abuse and — in future — power student-support follow-ups.
• Authentication data — if you sign in with Google, we receive your name, email address and profile identifier from Google. Passwords for email accounts are stored only as a one-way hash.

Cookies and advertising measurement

We use a small number of first-party cookies: one to keep you signed in, and one to remember your cookie-consent choice. We also use the Meta (Facebook) Pixel and Meta’s Conversions API to measure how our advertising performs — for example, whether an advert led to a sign-up or a completed enrolment. The Pixel loads when you visit the site; by visiting, you agree to this tracking as part of our terms. These tools receive hashed identifiers (such as a hashed email address) and event details, never your password or course content. You can control how Meta uses your data in Meta’s ad preferences, and read Meta’s Privacy Policy.

We also show advertising from Google AdSense on our public blog pages — but only when advertising is switched on in the site settings. It is off unless the site owner turns it on. When advertising is on, the AdSense script loads when you visit the site, and Google and its partners may use cookies — including the DoubleClick cookie — to serve ads based on your prior visits to this site or other websites. No AdSense code runs on lesson, dashboard, checkout or sign-in pages. You can opt out of personalised advertising at any time in Google Ads Settings. See also how Google uses information from sites or apps that use its services.

Who else processes data

We use a small set of processors to run the service: a hosting provider and a managed database for the application itself, an email provider for transactional messages, and Meta for advertising measurement and Google for advertising on the blog. We do not sell personal data.

How long we keep it

Account, progress and order data are kept while your account is open. If you ask us to delete your account, we will remove your personal data except where we must keep a record for legal or accounting reasons.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict its use. For advertising, you can opt out of personalised ads at any time through Google Ads Settings and Meta’s ad preferences (linked above). Contact us using the support email address shown in your account emails and we will respond within one month. You can also complain to the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.