Privacy Policy

Last updated September 30, 2026

This policy explains what data we collect when you use PenPal, why, how we protect it, and your rights. We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

1. What we collect

Account data from Google: your name, email address, profile picture and account ID.

Learning data: your messages to the tutor and its replies, the boards and drawings, and your quiz answers. On the Plus and Pro packs your lessons are saved so you can continue them.

Usage and payment data: your credit balance and history, purchase references and amounts (Nomod handles your card details; we never see them), and basic technical logs that keep the service safe.

Voice: your browser turns what you say into text; we don't store recordings of your voice.

2. Why we use it

To teach and save your lessons, run credits and payments, protect the service from misuse, email you about your account or when PenPal is back after maintenance, and meet legal obligations. Our grounds are providing the service you asked for, your consent, our legitimate interest in keeping the service safe, and the law.

We don't sell your data, we don't show ads, and we don't use your lessons to build marketing profiles.

3. Who we share it with

Service providers that work for us, and only as much as they need: sign-in (Google), AI processing for explanations, drawings and voice, payments (Nomod) and hosting. They must protect the data and may not use it for their own purposes.

Some of these providers may process data outside the UAE. We only transfer it with appropriate safeguards under the Personal Data Protection Law.

We may disclose data when the law or a competent authority requires it.

4. How long we keep it

We keep your account data while your account exists. Saved lessons stay until you delete them or your account. Payment records may be kept as long as the law requires.

5. Security

We use encrypted connections (HTTPS), access controls and protected servers. No system is perfectly secure, but we keep working to protect your data.

6. Your rights

You can ask to access, correct, delete, restrict or object to the processing of your data, get a copy of it, and withdraw your consent at any time. You can delete saved lessons yourself in My lessons.

To use your rights, reply to any email you receive from us. We reply within 30 days. You may also complain to the UAE Data Office.

7. Cookies

We use one essential cookie to keep you signed in, and your browser stores your preferences (language and voice). We use no advertising or tracking cookies.

8. Children

PenPal is not for children under 13; students under 18 use it with a parent's or guardian's consent. If you believe a child gave us data without consent, contact us and we'll delete it.

9. Changes

We may update this policy. We'll post the new date here and ask for your agreement after any material change.

Privacy Policy · PenPal