Privacy Policy

Who We Are

Bnan ACADEMY LTD
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Email: support@bnanacademy.com
Tel: +44 20 8159 6055

Scope

This Privacy Policy explains how we collect, use, store, and share personal data when you use our website, online tutoring services, support channels, business communication channels, and the Bnan Student Mobile App.

This policy applies to:

• our website and landing pages;
• Bnan Academy website visitors;
• Bnan students and families;
• Bnan Student Mobile App users on Android and iOS;
• our online tutoring services and student/parent support channels;
• our WhatsApp Business communications;
• Facebook Page messages / Facebook Messenger interactions handled through Meta APIs;
• Instagram Direct / Instagram Messaging interactions handled through Meta APIs; and
• website analytics and behavioural analytics tools, including Microsoft Clarity.

Information We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Parent / guardian contact details
Name, email address, phone number, country, and other contact details you choose to provide.

Basic student details
With parental or guardian consent where required, we may collect limited student information such as first name, age range, learning level, course interest, and related educational details.

Account and billing data
Payment and billing-related information processed by our payment providers. We do not store full card numbers on our systems.

Lesson and service data
Schedules, attendance, lesson assessments, homework, homework status, Quran weekly schedule and completion progress, curricula, educational materials, assigned PDF files, support history, communication records, and service-related notes.

Class recordings
Where explicit parental or guardian consent has been given, some lessons may be recorded for quality assurance or training purposes.

Technical, device, and notification data
IP address, browser type, device information, operating system, pages visited, referral sources, timestamps, cookies, Firebase Cloud Messaging tokens, random installation identifiers, platform, app version, language/locale, timezone, notification routing metadata, and similar technical data.

Analytics and behavioural usage data
We may use analytics tools, including Microsoft Clarity, to better understand how visitors use our website. This may include interaction data such as page views, clicks, scrolling, navigation behaviour, approximate session activity, heatmap-style insights, and session replay-style website usage analysis.

Bnan Student Mobile App

The Bnan Student Mobile App allows students and families to access Bnan educational services from Android and iOS devices. The app may be used to view lessons, meeting schedules, reports, homework, Quran weekly review schedules, curricula, educational materials, notifications, and communication tools.

When using the app, we may process the following categories of data:

• Student account data: name, email address, phone number, WhatsApp number, date of birth, student code, timezone, and account status.
• Educational data: lessons, meeting schedules, teacher/course information, lesson reports, homework, homework status, Quran weekly schedule and completion progress, curricula, educational materials, and assigned PDF files.
• User-generated content: homework submissions, uploaded files, teacher chat messages, support chat messages, and student notes.
• Voice and files: voice messages sent in teacher chat, PDFs, images, audio files, and homework files selected by the student.
• Device and notification data: Firebase Cloud Messaging token, random installation identifier, platform, app version, language/locale, timezone, and notification routing metadata.
• Local app data: secure login tokens, saved account summaries for multi-account switching, active account id, temporary files selected by the user, and protected PDF cache scoped to the active account.

We use mobile app data to provide student login and account access; show lessons, reports, homework, Quran schedules, curricula, and educational materials; allow students to submit homework; allow students to communicate with assigned teachers; allow students to contact Bnan Customer Support; send important notifications about lessons, messages, homework, reports, or support updates; protect accounts, enforce access control, prevent cross-account data leakage, and maintain platform security; and provide technical support and improve service reliability.

Teacher Chat and Customer Support Chat

Teacher Chat is a controlled in-app communication channel between a student and assigned active teachers. Students can only contact teachers authorized by Bnan systems.

Messages may include text, PDF attachments, and voice messages where enabled. Bnan admins or authorized staff may review teacher chat conversations for safeguarding, support, quality, compliance, and dispute resolution.

Customer Support Chat is separate from Teacher Chat and separate from WhatsApp/Meta inbox. Support-side replies are displayed to students as Bnan Customer Support. Support chat in the current app is text-based.

Chat data is not used for advertising or tracking.

Push Notifications

The mobile app uses Firebase Cloud Messaging (FCM) to send notifications. Notifications may include lesson reminders, lesson start alerts, teacher chat alerts, and support chat alerts.

Notification payloads are designed to avoid sensitive details. Push notifications should not include message bodies, teacher/admin names, Zoom links, LiveKit tokens, private file paths, passwords, or credentials.

Device tokens are used only to deliver app notifications and manage notification routing for the student account. On shared devices or multi-account usage, the app may register the same device for more than one saved student account, but routing remains account-scoped.

Multi-account Switching

The mobile app may allow multiple student accounts on one device, for example siblings using the same family phone or tablet. Each account has its own secure token and account metadata.

The active account controls which data is shown. Removing an account from the device removes local access for that account but does not automatically delete server-side educational records.

Families should ensure the correct student account is selected when using a shared device.

Local Storage and PDF Cache

The app stores authentication tokens using secure device storage where supported by the operating system. The app may cache protected PDF files temporarily to improve loading speed.

PDF cache is scoped to the account/session and should not include student names, raw file paths, or server filesystem paths in cache filenames. Cached files may be cleared on logout, account removal, token invalidation, or normal device/app cleanup.

Opening, sharing, printing, or saving files may be controlled by app features and device capabilities.

How We Use Your Information

We use personal data to:

• provide, manage, and improve our tutoring services;
• schedule lessons and manage instructors;
• communicate with parents, guardians, students, and leads;
• send operational notices, reminders, invoices, confirmations, and support messages;
• respond to enquiries received through our website or messaging channels;
• process payments and maintain financial records;
• comply with legal, regulatory, and contractual obligations;
• maintain internal records and service history;
• monitor, secure, and improve our website, platform, mobile app, and user experience;
• analyse website and support performance; and
• send marketing communications only where permitted and, where required, with your consent.

You may opt out of marketing communications at any time.

WhatsApp Business Messages

If you contact us on WhatsApp, share your phone number with us, or otherwise communicate with us through WhatsApp Business, we may process your WhatsApp-related data to:

• receive and review your messages;
• respond to enquiries;
• send onboarding messages, reminders, invoices, confirmations, and support communications;
• keep communication records; and
• manage service operations and customer support.

The data we may process includes:

• phone number;
• WhatsApp profile name;
• message and media content;
• message IDs;
• timestamps;
• conversation history; and
• delivery, read, or related messaging status data where available.

This data may be processed through the WhatsApp Business Platform provided by Meta and by service providers acting on our behalf under appropriate safeguards.

Retention: WhatsApp-related message logs and related metadata may be retained for up to 24 months, unless a longer period is required by law, needed to resolve disputes, or deletion is requested where applicable.

Facebook Page Messages / Messenger

If you contact us through our Facebook Page or via Facebook Messenger, we may process Facebook messaging data to:

• receive your messages;
• display them within our support or admin platform;
• manage conversations internally;
• assign conversations to relevant team members where needed;
• respond to your enquiries; and
• maintain communication and support records.

The data we may process includes:

• your Facebook name and public profile information made available to us through Meta;
• Facebook-scoped user ID or related identifiers;
• message and media content;
• conversation identifiers;
• message IDs;
• timestamps;
• webhook or event metadata; and
• delivery or read status where available.

We use Facebook messaging data for customer support, service operations, follow-up communication, maintaining communication history, and improving support handling. We do not use Facebook messages for marketing unless permitted by applicable law and Meta rules and, where required, with your consent.

This data may be processed through Meta Platforms’ business messaging infrastructure and our service providers acting on our behalf under appropriate safeguards.

Retention: Facebook messaging logs and related metadata may be retained for up to 24 months, unless a longer period is required by law, needed to resolve disputes, or deletion is requested where applicable.

Instagram Direct Messages

If you contact us via Instagram Direct / Instagram Messaging, we may process Instagram messaging data to:

• receive your messages;
• display them within our support or admin platform;
• manage conversations and assign them internally where needed;
• reply to enquiries; and
• keep support history and communication records.

The data we may process may include:

• your Instagram username;
• Instagram-scoped user ID;
• public profile information made available by Meta;
• message content;
• media content;
• conversation identifiers;
• message IDs;
• timestamps;
• related webhook or event metadata; and
• delivery or read status where available.

We use Instagram Direct message data for customer support, responding to enquiries, follow-up communication, service operations, maintaining communication records, and improving support handling. We do not use Instagram Direct messages for marketing unless permitted by applicable law and Meta rules and, where required, with your consent.

This data may be processed through Meta Platforms / Meta business messaging infrastructure and our service providers acting on our behalf under appropriate safeguards.

Retention: Instagram message logs and related metadata may be retained for up to 24 months, unless a longer period is required by law, needed to resolve disputes, or deletion is requested where applicable.

Children, Students, and Families

Bnan Academy provides educational services to students and families, including minors. Student accounts may be created or managed by Bnan Academy, parents/guardians, or authorized academy staff.

Data relating to children is used only to provide education, account access, communication, support, safeguarding, and service administration. Bnan does not use children’s app data for advertising or third-party behavioural tracking.

Parents or guardians may contact Bnan to request access, correction, or deletion of their child’s personal data, subject to legal, safeguarding, accounting, and educational record retention requirements.

Class Recordings

Some lessons may be recorded for quality assurance or training purposes only where explicit parental or guardian consent has been obtained.

Recordings are stored securely and may be retained for up to 12 months, unless a different retention period is required by law or justified for a legitimate operational reason.

Cookies and Analytics

We use cookies and similar technologies for essential website functionality, performance monitoring, analytics, and service improvement.

This may include:

• necessary cookies required for the operation of the website;
• analytics cookies;
• measurement tools;
• behavioural analytics tools such as Microsoft Clarity; and
• similar technologies used to understand website usage and improve user experience.

Microsoft Clarity may collect or help us analyse website interaction data such as mouse movements, clicks, scrolling, page navigation, and session behaviour for analytics and usability purposes.

Website analytics and cookies described in this section apply to our public website unless clearly stated otherwise. The Bnan Student Mobile App does not use advertising SDKs, mobile tracking SDKs, or behavioural advertising analytics.

You can control or disable cookies through your browser settings, although some website features may not function properly if you do so.

Third-party Services

We may use trusted third-party service providers to deliver our website, tutoring services, communications, and mobile app features. These may include:

• Firebase Cloud Messaging / Google Firebase: used for push notifications and device-token delivery.
• Zoom: used where lessons are delivered through Zoom. The app may open an external Zoom link only after Bnan verifies the student is allowed to join the lesson.
• LiveKit / Bnan classroom infrastructure: used or planned for online classroom features where enabled.
• Meta business messaging services: used for WhatsApp Business, Facebook Messenger, and Instagram Direct communications as described in this policy.
• Website analytics services: Microsoft Clarity and similar tools may be used for public website analytics and usability. This applies to website visitors and not necessarily to the mobile app.

The Bnan Student Mobile App does not use advertising SDKs, mobile tracking SDKs, or behavioural advertising analytics SDKs for advertising purposes, unless the app changes in the future and this policy is updated.

Sharing Your Data

We may share personal data with:

• hosting and infrastructure providers;
• communications and messaging providers;
• analytics providers;
• payment processors;
• learning or operational systems we use to deliver services;
• tutors, contractors, or staff where necessary to provide lessons or support;
• legal, regulatory, or governmental authorities where required by law; and
• parties involved in a business sale, merger, restructuring, or transfer, subject to appropriate protection.

We do not sell your personal data.

International Transfers

Your data may be processed outside your country of residence, including in countries that may not provide the same level of legal protection as your home jurisdiction. Bnan may process data using service providers or infrastructure in the UK, EEA, US, or other countries where its service providers operate.

Where we transfer personal data internationally, we take appropriate safeguards, which may include contractual protections such as SCCs and/or IDTAs, where applicable.

Security

We use access controls, authenticated APIs, HTTPS, private file access, account-scoped tokens, and role-based authorization to help protect student data.

No system can be guaranteed completely secure, but Bnan takes reasonable steps to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Students and families should keep login credentials private and should not share accounts with unauthorized persons.

Data Retention and Deletion

We retain personal data only for as long as necessary for the purposes described in this policy, including to provide services, maintain records, comply with legal obligations, resolve disputes, support safeguarding needs, and enforce agreements.

Users, parents, or guardians may request deletion or correction of personal data by contacting Bnan. Some educational records, safeguarding records, transaction records, communication records, or legal/accounting records may need to be retained for a lawful period.

Removing an account from the mobile app only removes local access from that device; it does not automatically delete Bnan server records. To request server-side account or data deletion, contact Bnan support at support@bnanacademy.com or through the official in-app support channel.

Your Rights

Depending on your location and applicable law, you may have rights such as the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion of personal data;
• restrict certain processing;
• object to certain processing;
• request data portability; and
• withdraw consent where processing is based on consent.

To exercise your rights, request correction, or request deletion of website or mobile app personal data, contact us at support@bnanacademy.com.

You may also request deletion of personal data collected through our Meta messaging integrations, including WhatsApp, Facebook Messenger, and Instagram Direct, by contacting support@bnanacademy.com.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the effective or updated date above.

Contact Us

If you have questions about this Privacy Policy or how we process personal data, please contact:

Bnan ACADEMY LTD
Email: support@bnanacademy.com
Tel: +44 20 8159 6055
London, United Kingdom