Razeen Academy

Privacy policy

Last updated: 3 November 2026 · Version 2026-11-03

We collect the minimum data needed to keep your account and progress. We don't sell your data or use it for advertising.

Who we are

Razeen Academy is an educational platform for cloud security. For anything about your data, contact: razeenacad@gmail.com.

What we collect

  • Account data: Your email, and your name if you entered one.
  • Password: We never store it. We store a one-way hash (PBKDF2) that can't be turned back into your password.
  • Progress: Which steps you solved in each lab, and when.
  • Security data: Your IP address, temporarily, to block repeated login attempts. It's deleted within a day.
  • Payments (in future): Transaction number and amount. Card details never reach us; the payment gateway (Moyasar) handles them directly.

Why we collect it

  • So you can log in and continue your labs from any device.
  • To send you a password reset link when you ask for one.
  • To protect your account from break-in attempts.

We rely on the explicit consent you give when you sign up, and you can withdraw it by deleting your account.

Who sees your data

  • Cloudflare: Website hosting and database.
  • EmailJS: Sending password reset emails only (they receive your email address and the reset link).

Some of these services store or process data outside Saudi Arabia, and we follow the Personal Data Protection Law's requirements for transfers outside the Kingdom.

How long we keep it

As long as your account exists. When you delete your account, we delete your data and progress immediately. Payment records (if any) are kept without your name or email, only as long as accounting and tax rules require.

Your rights

  • Access and download your data: From “My account” → “Download my data”.
  • Correct your data: Email us.
  • Delete your data: From “My account” → “Delete my account”, or email us.
  • Withdraw consent: By deleting your account at any time.

You also have the right to file a complaint with the Kingdom's personal data protection authority.

Security

Connections are encrypted (HTTPS), passwords are stored as hashes, sessions expire automatically, and login attempts are limited. If a breach ever affects your data, we'll notify you and the authorities as the law requires.

Changes

If we make a material change to this policy, we'll tell you and ask for your consent again.